Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa (raw, json)
Hash identifier:          vWKHEFbXhW1+imdIQx2igYEQjoiK9FtXhtTGEoLgnZc=
Subject key identifier:   CA:BA:50:39:D1:35:0E:85:B5:41:4E:E0:81:FD:48:19:78:52:27:CF
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       26A8B28D3BD61A63C5AFF9579EE3299807E4AFCB
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:33 +0000
ROA not before:           Mon 18 Oct 2021 14:21:33 +0000
ROA not after:            Mon 17 Oct 2022 14:26:33 +0000
asID:                     268518
IP address blocks:        45.162.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a8:b2:8d:3b:d6:1a:63:c5:af:f9:57:9e:e3:29:98:07:e4:af:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:33 2021 GMT
            Not After : Oct 17 14:26:33 2022 GMT
        Subject: CN=3082010A0282010100D49E1EA5038ABDCD54E401A459845C6F79B3DC7CA2F0824CDDA2D7D6C77C23EDEE31D6FBE77B5A8453D2AC89A1072F9FCD0399DF450E1D2075AD6DD9AF8590C09A5753502CFD75FE5E237422A2EEC5D14315340786F6C2A6E1FF3A27CCF9B21CA1C4804625B86EB6D9C6DF4FB670A00C4CFAFEF32881DB72F6BDBBD5253B63B89FDE9C56FCFA6FC9C24C359F3283DD3CB27D255726BF7D55571839695444E211DFAC9E4A270FB7855746991FB15B4C26099E8EBCE89B5F0CC3F2D6A5AB97382073A0A3108BA0F7E0D92F1102C6FFD77F1B3CAD1D1A5CF3C5658A260E4DC3F369E239BF3BA3A2DA734950EC4C46AE1ADCBA2876988A272B963589E9ECC20830110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:1e:a5:03:8a:bd:cd:54:e4:01:a4:59:84:
                    5c:6f:79:b3:dc:7c:a2:f0:82:4c:dd:a2:d7:d6:c7:
                    7c:23:ed:ee:31:d6:fb:e7:7b:5a:84:53:d2:ac:89:
                    a1:07:2f:9f:cd:03:99:df:45:0e:1d:20:75:ad:6d:
                    d9:af:85:90:c0:9a:57:53:50:2c:fd:75:fe:5e:23:
                    74:22:a2:ee:c5:d1:43:15:34:07:86:f6:c2:a6:e1:
                    ff:3a:27:cc:f9:b2:1c:a1:c4:80:46:25:b8:6e:b6:
                    d9:c6:df:4f:b6:70:a0:0c:4c:fa:fe:f3:28:81:db:
                    72:f6:bd:bb:d5:25:3b:63:b8:9f:de:9c:56:fc:fa:
                    6f:c9:c2:4c:35:9f:32:83:dd:3c:b2:7d:25:57:26:
                    bf:7d:55:57:18:39:69:54:44:e2:11:df:ac:9e:4a:
                    27:0f:b7:85:57:46:99:1f:b1:5b:4c:26:09:9e:8e:
                    bc:e8:9b:5f:0c:c3:f2:d6:a5:ab:97:38:20:73:a0:
                    a3:10:8b:a0:f7:e0:d9:2f:11:02:c6:ff:d7:7f:1b:
                    3c:ad:1d:1a:5c:f3:c5:65:8a:26:0e:4d:c3:f3:69:
                    e2:39:bf:3b:a3:a2:da:73:49:50:ec:4c:46:ae:1a:
                    dc:ba:28:76:98:8a:27:2b:96:35:89:e9:ec:c2:08:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BA:50:39:D1:35:0E:85:B5:41:4E:E0:81:FD:48:19:78:52:27:CF
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:01:26:f2:8a:3a:b2:d9:30:1b:99:ae:7f:6a:70:2d:9f:55:
         d3:0e:61:51:80:d5:4e:ab:8d:63:df:20:89:26:1f:c1:d2:8a:
         fa:07:a0:91:c9:f9:0f:95:8e:e4:7a:ad:a9:b3:52:5c:43:c9:
         e8:9f:fc:a3:3b:bd:bb:a1:90:0a:4f:2a:33:97:e6:97:a3:4a:
         ce:65:9d:d0:ad:ac:1e:c8:57:55:37:dc:f2:fa:83:49:2e:99:
         5f:18:d3:a7:8d:07:0a:21:5f:30:25:db:35:87:3b:9b:54:91:
         6b:ff:1a:88:c8:30:1f:51:7f:b4:27:e5:66:98:b8:a9:93:0b:
         61:d3:82:9f:02:cd:3b:43:fa:43:b6:5c:06:2d:89:e5:b5:33:
         d0:71:0d:a5:ef:9a:00:87:4c:45:24:be:8d:6e:6f:00:cc:a4:
         c8:01:01:93:c8:14:58:ad:5a:43:90:fd:87:39:e6:d6:51:18:
         d5:6b:81:69:69:32:c6:d5:60:ca:a5:f8:95:85:06:13:d5:12:
         06:06:aa:42:b6:ac:28:81:50:25:6a:20:0a:72:7d:5d:39:1f:
         c5:d0:9f:73:b8:53:15:a0:13:21:b3:b0:36:16:9a:b5:98:24:
         46:5f:0f:78:11:d3:1a:03:e8:3a:42:e4:40:5e:93:76:b4:af:
         33:bb:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org