Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa (raw, json)
Hash identifier:          1EEzuAqXjk2HQ0akE6892ou9a4p/AEVjiuASYCaTBE4=
Subject key identifier:   90:63:5C:8E:14:05:F6:06:21:E9:0F:A9:5E:9D:14:14:10:87:03:68
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       3814A7A6C84C1F60FD31790BFC57369A960CE206
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:35 +0000
ROA not before:           Mon 18 Oct 2021 14:21:35 +0000
ROA not after:            Mon 17 Oct 2022 14:26:35 +0000
asID:                     268518
IP address blocks:        45.162.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:14:a7:a6:c8:4c:1f:60:fd:31:79:0b:fc:57:36:9a:96:0c:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:35 2021 GMT
            Not After : Oct 17 14:26:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:0f:24:97:32:98:2d:8c:a1:31:be:9e:fb:
                    8a:d9:db:bd:a6:a0:bb:f3:b7:33:21:19:32:bd:76:
                    d2:0c:84:c6:17:ab:af:29:a4:9c:f1:d7:0b:e3:46:
                    d8:11:0d:fb:8e:b8:66:46:03:60:af:cc:30:0b:df:
                    3e:c2:ba:a0:96:51:e0:ed:0b:d4:78:2d:29:37:be:
                    3d:93:b9:a0:46:a1:ba:02:50:57:57:5c:c9:79:24:
                    5d:01:90:69:0f:28:95:4b:a7:83:5c:50:50:f8:62:
                    59:fe:7e:7f:25:2d:59:82:bf:b4:5a:d9:22:5e:10:
                    02:83:77:9f:b9:b1:e7:47:74:71:72:69:31:92:0c:
                    a4:6f:1b:9b:ad:07:0d:06:f5:37:8f:65:8e:3c:57:
                    00:4f:6e:40:8e:b1:a3:e5:4e:07:f1:aa:26:73:68:
                    d4:70:4d:bd:41:18:dd:60:10:01:54:67:19:4f:f4:
                    60:fa:27:ea:e6:c3:a8:5c:93:45:bb:2d:75:21:32:
                    37:f9:2c:ae:1b:4d:fd:f6:c1:ff:b1:71:03:8e:b9:
                    90:95:50:c2:75:35:7e:b4:8c:7b:9f:e0:a7:17:21:
                    e0:ff:2d:4c:ea:84:40:71:e4:d6:f0:92:92:6b:89:
                    51:af:12:7c:e3:1c:9c:8e:d4:88:77:38:80:f6:4a:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:63:5C:8E:14:05:F6:06:21:E9:0F:A9:5E:9D:14:14:10:87:03:68
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:f6:a6:f3:ec:2c:9b:0c:5e:dc:a7:e6:e7:fe:1d:5d:ad:27:
         1e:95:95:f0:3b:2e:79:a6:b7:92:40:21:43:0d:1d:00:52:13:
         54:24:b5:35:aa:c5:61:2a:ce:5a:d8:b5:3a:c7:63:cd:1d:1a:
         97:0b:6f:6e:5d:1a:64:87:6c:77:39:a3:9b:d1:b8:2b:ac:c6:
         8a:db:27:3e:57:83:8b:43:fb:5c:e0:fe:09:89:c0:98:7e:ca:
         b7:9b:54:0a:c2:5e:ca:6a:cf:a6:74:43:f1:94:88:e2:49:81:
         3d:c4:da:ba:f3:45:9c:db:8a:5d:e4:48:ca:12:4a:8c:05:45:
         8d:e8:a4:b1:c9:2e:72:88:04:a4:57:1e:87:be:ae:3b:41:b0:
         f2:2c:2e:64:bf:a5:c7:e5:14:14:99:0c:fc:a4:b9:16:2c:56:
         da:b7:fc:ea:16:f8:40:5a:6f:b3:a5:63:a8:2d:bb:74:71:a8:
         8d:4b:1a:8d:d2:e7:71:47:0b:6e:c6:fb:b1:66:58:2c:59:00:
         cc:a8:cc:e3:b4:1f:3c:33:19:ea:4d:4e:43:b6:28:43:54:2c:
         d7:20:11:ad:36:c0:da:b1:a9:5e:a2:3d:f7:40:e0:e0:f9:51:
         75:39:e4:41:eb:89:a7:ee:1a:45:71:7b:2e:18:20:62:9f:b3:
         9c:c7:60:46
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOBSnpshMH2D9MXkL/Fc2mpYM4gYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDMzA0RDk1MDJFMDdCQzE1OEUwRkQ0MjJFQzI2QkRF
OUVDODY1MTAeFw0yMTEwMTgxNDIxMzVaFw0yMjEwMTcxNDI2MzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDBCMjBGMjQ5NzMyOTgyRDhD
QTEzMUJFOUVGQjhBRDlEQkJEQTZBMEJCRjNCNzMzMjExOTMyQkQ3NkQyMEM4NEM2
MTdBQkFGMjlBNDlDRjFENzBCRTM0NkQ4MTEwREZCOEVCODY2NDYwMzYwQUZDQzMw
MEJERjNFQzJCQUEwOTY1MUUwRUQwQkQ0NzgyRDI5MzdCRTNEOTNCOUEwNDZBMUJB
MDI1MDU3NTc1Q0M5NzkyNDVEMDE5MDY5MEYyODk1NEJBNzgzNUM1MDUwRjg2MjU5
RkU3RTdGMjUyRDU5ODJCRkI0NUFEOTIyNUUxMDAyODM3NzlGQjlCMUU3NDc3NDcx
NzI2OTMxOTIwQ0E0NkYxQjlCQUQwNzBEMDZGNTM3OEY2NThFM0M1NzAwNEY2RTQw
OEVCMUEzRTU0RTA3RjFBQTI2NzM2OEQ0NzA0REJENDExOERENjAxMDAxNTQ2NzE5
NEZGNDYwRkEyN0VBRTZDM0E4NUM5MzQ1QkIyRDc1MjEzMjM3RjkyQ0FFMUI0REZE
RjZDMUZGQjE3MTAzOEVCOTkwOTU1MEMyNzUzNTdFQjQ4QzdCOUZFMEE3MTcyMUUw
RkYyRDRDRUE4NDQwNzFFNEQ2RjA5MjkyNkI4OTUxQUYxMjdDRTMxQzlDOEVENDg4
NzczODgwRjY0QUM4MDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0LIPJJcymC2MoTG+nvuK2du9pqC787czIRkyvXbSDITGF6uvKaSc
8dcL40bYEQ37jrhmRgNgr8wwC98+wrqgllHg7QvUeC0pN749k7mgRqG6AlBXV1zJ
eSRdAZBpDyiVS6eDXFBQ+GJZ/n5/JS1Zgr+0WtkiXhACg3efubHnR3Rxcmkxkgyk
bxubrQcNBvU3j2WOPFcAT25AjrGj5U4H8aomc2jUcE29QRjdYBABVGcZT/Rg+ifq
5sOoXJNFuy11ITI3+SyuG0399sH/sXEDjrmQlVDCdTV+tIx7n+CnFyHg/y1M6oRA
ceTW8JKSa4lRrxJ84xycjtSIdziA9krICQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJBjXI4UBfYGIekPqV6dFBQQhwNoMB8GA1UdIwQYMBaAFAHDBNlQLge8FY4P1CLs
Jr3p7IZRMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JDQVBYVVZvZFNhMlZL
ak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzAvMDFDMzA0RDk1MDJFMDdC
QzE1OEUwRkQ0MjJFQzI2QkRFOUVDODY1MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wMUMzMDREOTUwMkUwN0JDMTU4RTBGRDQyMkVDMjZCREU5RUM4
NjUxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CQ0FQWFVWb2RTYTJWS2pNWDFY
YVRBOTN2dnRyN05CV2JmWGRkMkJMcktRdS8wLzM0MzUyZTMxMzYzMjJlMzEzMjM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4MzUzMTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LaKAMA0GCSqGSIb3DQEBCwUAA4IBAQCC9qbz7CybDF7cp+bn/h1drScelZXwOy55
preSQCFDDR0AUhNUJLU1qsVhKs5a2LU6x2PNHRqXC29uXRpkh2x3OaOb0bgrrMaK
2yc+V4OLQ/tc4P4JicCYfsq3m1QKwl7Kas+mdEPxlIjiSYE9xNq680Wc24pd5EjK
EkqMBUWN6KSxyS5yiASkVx6Hvq47QbDyLC5kv6XH5RQUmQz8pLkWLFbat/zqFvhA
Wm+zpWOoLbt0caiNSxqN0udxRwtuxvuxZlgsWQDMqMzjtB88MxnqTU5DtihDVCzX
IBGtNsDasaleoj33QODg+VF1OeRB64mn7hpFcXsuGCBin7Ocx2BG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org