Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32322e302f32332d3233203d3e20323637303038.roa
File:                     34352e3232372e32322e302f32332d3233203d3e20323637303038.roa (raw, json)
Hash identifier:          f/l6BmNFBPgxZ56lLfpu/wElBzNMpYIs2rfhvR5imL8=
Subject key identifier:   FA:B7:36:3D:56:F8:E9:AC:CA:09:E7:5E:78:DA:60:6C:F2:94:A2:DD
Certificate issuer:       /CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
Certificate serial:       4267B68C0913C4ED2CBF9BB78501F20AC9C4F30D
Authority key identifier: E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32322e302f32332d3233203d3e20323637303038.roa
Signing time:             Fri 05 May 2023 19:04:42 +0000
ROA not before:           Fri 05 May 2023 18:59:42 +0000
ROA not after:            Fri 03 May 2024 19:04:42 +0000
asID:                     267008
IP address blocks:        45.227.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:67:b6:8c:09:13:c4:ed:2c:bf:9b:b7:85:01:f2:0a:c9:c4:f3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E
        Validity
            Not Before: May  5 18:59:42 2023 GMT
            Not After : May  3 19:04:42 2024 GMT
        Subject: CN=FAB7363D56F8E9ACCA09E75E78DA606CF294A2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:d8:41:e8:12:50:84:8c:47:d3:d5:b8:d6:
                    70:47:d8:8a:05:3e:85:cb:37:89:a8:54:9d:55:64:
                    65:7b:aa:2d:2a:23:bf:e6:ba:4f:3d:a7:fb:20:f6:
                    af:37:46:18:4c:64:62:b4:dd:c5:a0:50:a8:26:41:
                    ff:56:62:95:73:ae:12:f7:b9:8a:16:43:79:42:04:
                    73:27:c1:5f:6f:22:1b:5b:aa:c7:62:5f:0d:f3:9a:
                    b1:3a:9b:ce:60:1e:b6:07:7c:13:02:45:95:16:62:
                    da:92:5b:c7:e6:95:d3:77:57:25:12:78:0b:f3:0a:
                    ff:5d:91:1e:05:fa:1e:ee:82:17:7e:b0:92:00:6d:
                    45:06:f8:1c:71:a3:f8:96:93:3c:6d:ce:d0:03:6e:
                    f1:5b:30:e5:3d:43:59:03:92:5a:5d:aa:c7:9e:f0:
                    a1:e4:14:72:37:8b:5b:a2:4f:a8:63:d7:16:e0:42:
                    5e:5e:af:29:a7:69:90:57:21:d6:62:76:80:ec:8e:
                    5b:72:73:9a:ea:ca:34:04:1f:cf:9a:54:34:7d:7c:
                    cc:e2:d8:e6:df:a7:26:cd:a3:e8:55:53:26:3c:77:
                    80:c3:58:20:d6:f3:ce:f4:40:c6:5e:40:c1:51:a9:
                    c9:43:1f:2a:02:96:2b:05:09:44:57:1c:62:ee:c8:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B7:36:3D:56:F8:E9:AC:CA:09:E7:5E:78:DA:60:6C:F2:94:A2:DD
            X509v3 Authority Key Identifier:
                keyid:E2:3D:CD:E6:C1:D8:FF:F1:C5:AB:1C:6F:4B:2D:E3:07:83:FE:55:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E23DCDE6C1D8FFF1C5AB1C6F4B2DE30783FE552E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVEDwDE6p7W2DVaMA3TGp31iAazrnfuRKS5Le6JQaFfD/0/34352e3232372e32322e302f32332d3233203d3e20323637303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:f4:f4:fa:3e:00:20:bd:0d:50:2e:09:83:f1:79:02:d4:
         d1:e1:d7:b2:b3:d8:9e:a0:20:77:9e:20:76:c2:a1:4c:79:ae:
         07:7f:84:81:5a:ea:48:01:79:47:04:23:05:06:f3:b2:fd:a0:
         42:03:fc:d6:e2:18:7b:9f:04:8e:c9:e4:51:9c:b1:b1:ef:d4:
         f1:74:24:d3:4c:5b:b4:ed:f0:95:9b:6d:b0:01:20:64:81:82:
         22:2b:22:74:5f:ac:64:cf:e0:95:e2:66:74:e6:b6:e1:ed:e0:
         5d:1e:12:40:02:47:8a:4d:54:98:2b:7b:c1:27:ea:4f:4e:20:
         72:10:be:0d:c5:c7:68:19:23:7d:67:2d:82:e4:50:c5:0f:38:
         9a:a7:43:23:42:34:96:88:0d:21:88:78:00:6f:8b:65:7b:f6:
         02:77:d8:a3:5b:a2:9e:70:b3:89:02:87:a5:4f:02:83:a8:9f:
         0b:b2:3e:fb:bd:1e:86:23:8a:04:99:c9:c4:05:6e:a7:50:a7:
         71:a2:62:99:09:8a:93:b4:cf:ac:3d:7b:81:48:98:2f:81:94:
         e0:d7:f3:a5:c1:71:28:98:26:9a:c3:e6:af:99:40:e4:39:98:
         4f:2b:7a:2e:1a:0c:4b:a7:64:a9:d8:eb:b3:57:53:2a:52:8c:
         6f:f1:89:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org