Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32312e302f32342d3234203d3e20323637303038.roa
File:                     34352e3232372e32312e302f32342d3234203d3e20323637303038.roa (raw, json)
Hash identifier:          DmCkfUKZQVapousZzJKJhSr1gQbzkkrDKGgJ2UcmKJk=
Subject key identifier:   36:F1:B8:13:06:DA:DA:30:A1:55:DF:62:58:D1:09:4E:69:E3:69:6B
Certificate issuer:       /CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
Certificate serial:       6084EB27943DB8B1ECBD7A0ED98808BE546F0E77
Authority key identifier: C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32312e302f32342d3234203d3e20323637303038.roa
Signing time:             Thu 09 Nov 2023 17:39:57 +0000
ROA not before:           Thu 09 Nov 2023 17:34:57 +0000
ROA not after:            Thu 07 Nov 2024 17:39:57 +0000
asID:                     267008
IP address blocks:        45.227.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:84:eb:27:94:3d:b8:b1:ec:bd:7a:0e:d9:88:08:be:54:6f:0e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41
        Validity
            Not Before: Nov  9 17:34:57 2023 GMT
            Not After : Nov  7 17:39:57 2024 GMT
        Subject: CN=36F1B81306DADA30A155DF6258D1094E69E3696B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:4a:52:7f:e2:4e:81:a7:ad:f4:76:3d:39:
                    c1:1f:26:18:a8:51:01:15:17:04:52:94:46:d5:89:
                    74:1c:c6:66:13:81:bf:69:75:c7:b1:69:e3:ca:70:
                    91:30:d9:5f:36:99:97:62:26:db:8c:bf:17:e9:4d:
                    4e:8f:1f:06:48:7c:57:10:11:3c:aa:6d:8b:97:94:
                    e7:29:5a:0a:21:39:d4:62:48:f9:a9:67:8d:15:e5:
                    d9:b3:cf:b4:54:5b:07:11:3c:f3:fa:5d:a5:58:27:
                    74:9e:d0:5b:60:49:14:9b:d1:4b:94:c9:3a:61:43:
                    bc:11:fa:1c:12:9a:f9:f0:e4:36:68:99:8d:61:67:
                    47:9e:ae:e6:d2:9f:15:73:67:8b:3b:cd:49:78:1c:
                    70:75:5d:4a:87:22:57:39:86:74:fd:57:ce:15:68:
                    8d:20:76:b3:2c:8c:9e:18:5d:42:fb:81:c1:c1:26:
                    96:30:5e:5c:2d:19:34:95:81:39:86:c9:d3:65:0a:
                    2e:ff:3a:f9:1d:6c:97:89:61:31:16:10:df:68:0d:
                    f4:d1:67:2b:3e:3b:ad:32:0b:c3:41:2d:57:ba:1e:
                    ab:18:e0:7d:80:d5:95:85:04:a6:e6:0d:d1:4b:f0:
                    1a:33:9c:ee:0a:33:6b:2f:d1:90:37:94:90:22:85:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F1:B8:13:06:DA:DA:30:A1:55:DF:62:58:D1:09:4E:69:E3:69:6B
            X509v3 Authority Key Identifier:
                keyid:C0:06:CA:8A:3F:C1:CE:6D:F1:B5:B0:6B:E6:A6:FF:C6:C9:DB:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C006CA8A3FC1CE6DF1B5B06BE6A6FFC6C9DBFA41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32312e302f32342d3234203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:cd:c7:1e:01:35:aa:49:f0:cc:0b:fb:8a:ca:60:67:07:
         af:ba:26:08:fa:37:5c:79:26:94:08:02:96:f5:a2:64:57:4a:
         07:b3:aa:43:4e:7d:1c:fb:da:e3:29:ca:a3:72:c2:c5:6d:15:
         2d:87:df:0b:9d:3d:cc:1b:2c:b2:5b:ed:98:1d:f5:3f:ab:c5:
         cf:90:a4:d9:7b:89:57:d1:a6:36:19:74:77:72:96:fb:42:c9:
         cc:f2:c1:e0:a1:23:4c:e0:99:5d:56:eb:e7:84:5c:01:24:8e:
         15:41:fa:cc:0e:c6:03:ed:be:a6:18:d2:4a:fc:5c:77:8e:e5:
         ea:3f:c6:4f:5f:ed:00:6f:a4:c7:73:8b:e6:4b:b8:a4:90:8a:
         73:6a:29:27:7f:55:3e:bb:27:a0:79:71:82:c1:6a:b1:5a:53:
         05:ff:8e:55:e4:52:11:b2:a2:28:78:fd:cb:37:ad:39:25:4e:
         2d:2d:fe:1a:69:dc:47:ae:c1:70:0b:8d:f7:93:77:2d:7b:b2:
         86:df:ab:44:1a:55:4f:fa:7d:0c:55:42:ef:68:7a:54:12:83:
         08:80:bb:47:b8:b3:31:a5:7c:b9:bf:e9:c8:54:7c:c6:1a:4d:
         84:5c:ff:53:00:f7:1d:2e:5c:96:6d:9b:ce:55:0c:29:a0:ab:
         a9:a0:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org