Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32342d3234203d3e20323637303038.roa
File:                     34352e3232372e32302e302f32342d3234203d3e20323637303038.roa (raw, json)
Hash identifier:          wtOg3jALqAP9VcVr2T7YXjSxW7VVl68C0bond2DVKpA=
Subject key identifier:   C3:9D:18:D3:B6:D4:B2:F0:46:2A:CD:20:0E:C4:6A:15:4E:35:5E:B9
Certificate issuer:       /CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
Certificate serial:       07EE703203536645E4C12284029DE62EC57AE315
Authority key identifier: C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32342d3234203d3e20323637303038.roa
Signing time:             Thu 09 Nov 2023 17:39:54 +0000
ROA not before:           Thu 09 Nov 2023 17:34:54 +0000
ROA not after:            Thu 07 Nov 2024 17:39:54 +0000
asID:                     267008
IP address blocks:        45.227.20.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ee:70:32:03:53:66:45:e4:c1:22:84:02:9d:e6:2e:c5:7a:e3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
        Validity
            Not Before: Nov  9 17:34:54 2023 GMT
            Not After : Nov  7 17:39:54 2024 GMT
        Subject: CN=C39D18D3B6D4B2F0462ACD200EC46A154E355EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:bd:e5:40:d8:e3:5e:7d:4f:4a:33:93:45:
                    08:5f:ff:52:b9:18:a1:d2:c5:13:50:a0:7f:88:0c:
                    1f:38:88:40:1d:cf:31:fe:cd:79:fe:16:a3:ac:cf:
                    7b:e4:2a:4d:2d:63:61:1d:fc:aa:98:17:7f:aa:f8:
                    f6:5e:73:35:b2:24:c6:78:1f:96:80:13:e1:a9:0f:
                    ab:c5:02:e3:12:35:12:e7:95:29:d9:2c:ed:18:a0:
                    d9:0d:50:68:8e:af:40:c0:db:13:d3:a7:09:42:14:
                    cf:8d:b5:9e:42:32:51:4b:86:2e:1d:78:a0:4a:ab:
                    14:f1:69:82:2c:26:d1:e5:b6:c4:38:d8:6d:64:ab:
                    60:fe:71:50:b4:42:24:d4:4e:e9:9f:7d:3e:67:ea:
                    7c:09:5a:c2:5a:dc:1d:b0:b2:9a:95:b5:55:20:18:
                    a9:e5:71:ff:e6:83:8e:49:80:e0:66:48:52:a5:66:
                    f7:33:d6:8d:74:5a:41:32:a0:12:de:eb:5b:2c:62:
                    70:54:54:9e:89:05:28:1f:09:9c:9a:22:67:7e:79:
                    30:a1:4c:ae:84:35:6e:79:0f:6a:55:54:cf:2e:96:
                    cd:a7:97:be:e8:c2:44:3e:e8:4e:fe:83:9c:08:56:
                    81:8c:f1:53:10:05:03:a0:17:06:f3:94:35:97:6c:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9D:18:D3:B6:D4:B2:F0:46:2A:CD:20:0E:C4:6A:15:4E:35:5E:B9
            X509v3 Authority Key Identifier:
                keyid:C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32302e302f32342d3234203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:df:33:5d:29:e8:40:be:2f:48:c1:8a:ef:12:b6:34:ea:
         cd:f6:06:8c:77:c0:09:64:59:e4:f6:f1:fd:41:a0:9d:b9:82:
         10:3d:64:67:bf:e7:8b:6b:1b:79:87:7a:91:6e:8b:70:b8:fd:
         c7:73:f2:3c:c9:0e:34:96:d3:80:48:01:cc:9a:c9:f9:82:d9:
         d4:7e:e3:c5:81:99:d7:da:dd:c3:69:47:e8:ac:d6:59:85:3f:
         b6:60:af:dc:19:1d:d7:4e:2c:c3:72:3e:c5:33:66:74:ed:a3:
         9b:01:2a:b5:b4:10:c7:cc:83:19:67:4a:96:e8:8a:13:fe:c2:
         a1:b8:a3:dd:15:0c:24:6c:29:a7:2e:80:26:86:04:66:13:a0:
         41:fb:67:4d:89:25:b8:e7:c5:a4:cc:82:5c:5b:6d:ea:0d:ac:
         4e:0d:ab:23:02:e5:ca:39:6f:bb:87:b6:91:f4:86:1d:89:34:
         e2:4e:a4:27:31:c6:62:88:25:b7:7f:0e:9b:4c:28:71:37:5d:
         39:15:21:7a:b7:d7:ed:d6:3a:c3:2f:18:5e:82:bc:cc:54:8b:
         6a:e9:dc:c4:09:d2:d0:89:50:4b:87:fb:c9:d7:01:50:bb:c5:
         28:d8:3f:ca:44:b1:52:94:ac:8b:d7:e6:cb:dd:fa:72:8f:68:
         67:76:c4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:35:03 2025 by rpki-client