Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa (raw, json)
Hash identifier:          19qVkgctMEflHgWrRljd2IK/MvE6SCKudnG+rcypCV8=
Subject key identifier:   FE:D6:4F:4B:D8:DC:3E:06:C9:D7:53:B2:CB:AF:6D:06:D0:07:8D:E0
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       07484087BA998FB6F51BBE717F2B76E5D961B762
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:34 +0000
ROA not before:           Mon 18 Oct 2021 14:21:34 +0000
ROA not after:            Mon 17 Oct 2022 14:26:34 +0000
asID:                     268518
IP address blocks:        45.162.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:48:40:87:ba:99:8f:b6:f5:1b:be:71:7f:2b:76:e5:d9:61:b7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:34 2021 GMT
            Not After : Oct 17 14:26:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:4f:3b:68:af:ce:9f:17:7c:52:8c:f4:1f:
                    28:11:b0:47:e1:ff:10:d5:1f:55:d5:0f:41:86:c4:
                    e5:bb:b7:4b:37:df:22:24:17:3c:a4:24:ce:f3:89:
                    f8:5d:46:8a:72:dc:26:b2:be:41:ec:3f:e4:b3:3e:
                    72:db:93:5e:2a:ba:1d:10:ab:71:a9:42:7c:98:97:
                    fa:54:f7:a2:6d:e9:1d:ae:44:52:04:0e:92:19:b7:
                    a7:7a:70:87:bf:cc:d4:67:ae:2e:84:01:2a:fb:f5:
                    f9:fa:7a:4a:bc:8f:0e:33:17:58:46:0b:ec:bc:a3:
                    e5:be:a6:32:0f:51:a3:40:b2:3d:99:3e:77:2d:11:
                    98:23:44:ed:69:f2:2f:b5:19:1d:0c:e8:92:02:5a:
                    3e:a7:2b:09:3d:b6:2c:86:26:7e:05:52:71:f0:ac:
                    55:fa:89:7f:5d:bd:32:f4:b1:e1:25:2f:b2:c2:eb:
                    10:94:54:f2:e6:9a:5e:15:d1:8c:7e:09:2e:45:49:
                    1f:81:9c:18:55:b7:e6:49:32:e5:c7:c3:a3:d2:e1:
                    3d:8b:8a:eb:b9:7f:0f:4c:90:49:4a:3a:83:1f:a0:
                    4b:33:9f:c3:e0:c9:d5:74:4f:08:6e:ea:5b:bb:83:
                    f0:fc:63:2c:c4:ad:ad:36:7a:1a:7c:41:37:24:ee:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D6:4F:4B:D8:DC:3E:06:C9:D7:53:B2:CB:AF:6D:06:D0:07:8D:E0
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:52:0e:ae:dc:44:5d:75:16:ea:80:80:64:58:61:79:36:92:
         82:ef:b3:c5:8a:6d:b5:5a:73:c2:d5:0a:4e:44:8b:22:7c:63:
         4c:59:37:a2:ac:16:e7:fd:da:1d:67:a7:b8:36:7b:74:2c:5a:
         63:fe:b2:1c:59:f5:5f:40:7c:e8:1b:80:86:a6:c1:f7:a2:86:
         10:39:2a:7c:28:f4:13:58:57:21:6f:0e:2d:c7:fb:4b:1c:6b:
         e8:1e:96:b7:78:6a:21:c1:9b:c9:3a:fe:dd:45:a8:fc:d9:c6:
         d4:a1:7e:19:c6:1a:de:d4:27:c6:14:2e:c0:0c:82:66:d3:a0:
         a6:62:20:31:cd:67:d7:bd:04:be:1c:bb:4e:9e:47:e6:2a:e8:
         cd:62:bc:db:eb:a2:78:ee:99:c3:f2:a6:c7:f7:4d:06:f7:b2:
         78:db:c7:e5:f4:e3:73:eb:0b:2e:33:4d:47:ed:e2:e3:75:8f:
         72:0c:01:ca:c6:15:57:7f:f2:99:b3:d2:7b:bf:47:a1:21:eb:
         36:fb:32:49:3c:4d:49:5e:d6:24:00:dc:39:89:98:fe:a7:4a:
         f3:55:2c:1d:23:c0:d5:19:69:c2:8b:34:65:ea:95:da:7b:db:
         72:1f:e9:38:47:40:b6:e5:02:3c:c2:bd:a7:8e:ae:67:12:14:
         6c:dd:d8:30
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUB0hAh7qZj7b1G75xfyt25dlht2IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDMzA0RDk1MDJFMDdCQzE1OEUwRkQ0MjJFQzI2QkRF
OUVDODY1MTAeFw0yMTEwMTgxNDIxMzRaFw0yMjEwMTcxNDI2MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0NERTRGM0I2OEFGQ0U5RjE3
N0M1MjhDRjQxRjI4MTFCMDQ3RTFGRjEwRDUxRjU1RDUwRjQxODZDNEU1QkJCNzRC
MzdERjIyMjQxNzNDQTQyNENFRjM4OUY4NUQ0NjhBNzJEQzI2QjJCRTQxRUMzRkU0
QjMzRTcyREI5MzVFMkFCQTFEMTBBQjcxQTk0MjdDOTg5N0ZBNTRGN0EyNkRFOTFE
QUU0NDUyMDQwRTkyMTlCN0E3N0E3MDg3QkZDQ0Q0NjdBRTJFODQwMTJBRkJGNUY5
RkE3QTRBQkM4RjBFMzMxNzU4NDYwQkVDQkNBM0U1QkVBNjMyMEY1MUEzNDBCMjNE
OTkzRTc3MkQxMTk4MjM0NEVENjlGMjJGQjUxOTFEMENFODkyMDI1QTNFQTcyQjA5
M0RCNjJDODYyNjdFMDU1MjcxRjBBQzU1RkE4OTdGNURCRDMyRjRCMUUxMjUyRkIy
QzJFQjEwOTQ1NEYyRTY5QTVFMTVEMThDN0UwOTJFNDU0OTFGODE5QzE4NTVCN0U2
NDkzMkU1QzdDM0EzRDJFMTNEOEI4QUVCQjk3RjBGNEM5MDQ5NEEzQTgzMUZBMDRC
MzM5RkMzRTBDOUQ1NzQ0RjA4NkVFQTVCQkI4M0YwRkM2MzJDQzRBREFEMzY3QTFB
N0M0MTM3MjRFRTc4RjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzN5PO2ivzp8XfFKM9B8oEbBH4f8Q1R9V1Q9BhsTlu7dLN98iJBc8
pCTO84n4XUaKctwmsr5B7D/ksz5y25NeKrodEKtxqUJ8mJf6VPeibekdrkRSBA6S
GbenenCHv8zUZ64uhAEq+/X5+npKvI8OMxdYRgvsvKPlvqYyD1GjQLI9mT53LRGY
I0TtafIvtRkdDOiSAlo+pysJPbYshiZ+BVJx8KxV+ol/Xb0y9LHhJS+ywusQlFTy
5ppeFdGMfgkuRUkfgZwYVbfmSTLlx8Oj0uE9i4rruX8PTJBJSjqDH6BLM5/D4MnV
dE8Ibupbu4Pw/GMsxK2tNnoafEE3JO548wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FP7WT0vY3D4GyddTssuvbQbQB43gMB8GA1UdIwQYMBaAFAHDBNlQLge8FY4P1CLs
Jr3p7IZRMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JDQVBYVVZvZFNhMlZL
ak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzAvMDFDMzA0RDk1MDJFMDdC
QzE1OEUwRkQ0MjJFQzI2QkRFOUVDODY1MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wMUMzMDREOTUwMkUwN0JDMTU4RTBGRDQyMkVDMjZCREU5RUM4
NjUxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CQ0FQWFVWb2RTYTJWS2pNWDFY
YVRBOTN2dnRyN05CV2JmWGRkMkJMcktRdS8wLzM0MzUyZTMxMzYzMjJlMzEzMjM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4MzUzMTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LaKAMA0GCSqGSIb3DQEBCwUAA4IBAQADUg6u3ERddRbqgIBkWGF5NpKC77PFim21
WnPC1QpORIsifGNMWTeirBbn/dodZ6e4Nnt0LFpj/rIcWfVfQHzoG4CGpsH3ooYQ
OSp8KPQTWFchbw4tx/tLHGvoHpa3eGohwZvJOv7dRaj82cbUoX4Zxhre1CfGFC7A
DIJm06CmYiAxzWfXvQS+HLtOnkfmKujNYrzb66J47pnD8qbH900G97J428fl9ONz
6wsuM01H7eLjdY9yDAHKxhVXf/KZs9J7v0ehIes2+zJJPE1JXtYkANw5iZj+p0rz
VSwdI8DVGWnCizRl6pXae9tyH+k4R0C25QI8wr2njq5nEhRs3dgw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org