Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32332d3234203d3e20323637303038.roa
File:                     34352e3232372e32302e302f32332d3234203d3e20323637303038.roa (raw, json)
Hash identifier:          SWYc7YVqeC+nKNFyW2KH79zkmr9vB6Z3xuYY+YL9Djc=
Subject key identifier:   BD:0B:5F:A7:7F:50:AF:CF:3A:07:CD:56:D9:0E:06:AA:7D:99:A1:4F
Certificate issuer:       /CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
Certificate serial:       243D6BB901C31CF6CC51C4F162CB1EF6578E03F1
Authority key identifier: E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32332d3234203d3e20323637303038.roa
Signing time:             Fri 05 May 2023 19:04:32 +0000
ROA not before:           Fri 05 May 2023 18:59:32 +0000
ROA not after:            Fri 03 May 2024 19:04:32 +0000
asID:                     267008
IP address blocks:        45.227.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3d:6b:b9:01:c3:1c:f6:cc:51:c4:f1:62:cb:1e:f6:57:8e:03:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
        Validity
            Not Before: May  5 18:59:32 2023 GMT
            Not After : May  3 19:04:32 2024 GMT
        Subject: CN=BD0B5FA77F50AFCF3A07CD56D90E06AA7D99A14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d4:5d:23:fc:e8:9e:e4:1b:45:51:b3:39:71:
                    35:be:c4:3c:d6:c1:30:4a:e7:fb:f7:24:af:3f:a0:
                    6a:90:c4:a3:68:10:00:a0:98:60:2b:55:63:8e:3f:
                    b4:48:55:f3:de:05:de:bc:1d:22:49:22:fd:bb:76:
                    1f:ec:d9:ee:c6:00:cc:40:9e:d3:3a:3d:8c:5c:d5:
                    d5:2c:50:eb:e8:70:c0:1b:55:59:a5:d5:16:b9:41:
                    6f:32:21:eb:bf:23:14:bf:e8:70:77:2f:21:eb:d8:
                    33:ad:0c:d2:f4:05:92:c3:e5:2f:52:af:6b:28:ee:
                    ad:55:5f:b5:0e:d9:6d:97:0c:48:94:08:db:de:05:
                    46:f8:18:7d:47:4f:7b:06:f1:a8:df:e9:c6:62:10:
                    11:b0:4e:04:f0:0a:8a:ee:ae:ac:71:6c:45:67:d1:
                    ee:7d:a0:77:5e:f9:e3:f4:ba:1c:5d:bb:da:56:27:
                    e9:6a:3e:d6:f7:b8:9d:b6:45:b3:e0:68:3b:21:1e:
                    9d:3f:03:83:88:c0:a3:5f:76:e6:40:49:d8:a2:97:
                    4b:0a:20:f8:e3:45:80:94:9b:1c:cb:30:9d:fc:85:
                    30:7c:9b:f3:cf:b2:75:a8:ac:48:7e:65:f3:70:00:
                    8f:f1:ab:9a:68:30:ca:0d:68:da:cd:f1:d1:3e:a4:
                    0e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0B:5F:A7:7F:50:AF:CF:3A:07:CD:56:D9:0E:06:AA:7D:99:A1:4F
            X509v3 Authority Key Identifier:
                keyid:E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32332d3234203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e0:97:7d:7b:23:8f:20:a4:e8:d4:6b:76:93:1e:c0:97:70:4e:
         30:83:98:57:e0:1e:97:22:a9:b2:94:2b:d4:06:7e:5b:79:8f:
         df:f4:a4:81:48:72:c9:10:2b:73:08:30:ce:bc:94:44:d9:4d:
         fe:ed:14:20:96:31:f0:00:05:f6:e9:e4:da:41:2c:7e:95:fb:
         cf:fe:46:33:f2:7a:f8:f6:80:b6:c3:13:5d:5b:5e:f0:4c:ad:
         2c:88:7e:aa:9a:0a:58:24:0b:52:bd:13:40:46:70:fc:10:e8:
         16:52:f0:21:c8:92:31:00:ed:9b:1d:5c:89:57:78:5b:c1:3c:
         a4:9a:80:18:9e:0b:c3:40:b8:ea:bb:3b:bb:94:7a:74:7a:4c:
         a8:60:a1:67:66:ee:ae:e4:b5:23:2a:53:9a:c7:2d:e7:22:70:
         90:3d:16:d3:1b:3b:b0:24:76:03:bb:a1:45:f7:0d:f5:06:ed:
         ab:70:71:18:6c:8b:f3:44:79:c8:92:64:d8:cb:d2:8a:03:95:
         5e:a1:14:96:9e:79:87:ea:b7:e6:17:d7:7a:e0:17:3f:e7:83:
         12:1a:76:ec:87:80:d1:be:a0:d7:88:3f:ae:07:f9:bb:c5:4f:
         de:ee:e1:24:3c:4f:a8:0c:5f:4c:0c:6d:48:a6:fa:66:7d:2b:
         ec:31:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org