Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa
File:                     34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa (raw, json)
Hash identifier:          IU3LgQYhWWfyN0f1x3yODyOQqFmhS4FWtSHOVJOYD20=
Subject key identifier:   87:96:75:3F:F9:C3:F7:FD:12:1E:0D:64:6D:9B:9B:13:62:C5:A8:67
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       259E0BCFF3696A98DECFBFA90ADE964B8E492A06
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:34 +0000
ROA not before:           Mon 18 Oct 2021 14:21:34 +0000
ROA not after:            Mon 17 Oct 2022 14:26:34 +0000
asID:                     268518
IP address blocks:        45.162.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9e:0b:cf:f3:69:6a:98:de:cf:bf:a9:0a:de:96:4b:8e:49:2a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:34 2021 GMT
            Not After : Oct 17 14:26:34 2022 GMT
        Subject: CN=3082010A0282010100BBCB5F0211C12344233DD7E8921A33D6133F3F770F6E75BA029E008318C0D0DF5B32059AD872CD606DE933C6AB2676649138649C4A7502BD20B72D805A89AE1612300A72958467D3F22C4C8A546DF18E620F61D048FC63F1ADB6A1BDDA20CB8CB3CCCF1383613FF59D9D91EFFB72E6FB9C1F6A8CBD73334B996D05CB9B693F3E0C8DE3C245DB8D3AAF19E38A0EC1FC89B32E45AF126B4DDDC4E1C4745A9275506C90606C4D6650E5A2571B6DB382DE56FD526D3B84C51282808B064CB8CA43BC5FEA50AB18A57D7B3015777F7C79B10C5BED5881714EB049E32F7F6CE7D27ECDA877C2630D4F8B4E6DD392110DA331700F00966A3657E11156E5E521DAF9ACFD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:5f:02:11:c1:23:44:23:3d:d7:e8:92:1a:
                    33:d6:13:3f:3f:77:0f:6e:75:ba:02:9e:00:83:18:
                    c0:d0:df:5b:32:05:9a:d8:72:cd:60:6d:e9:33:c6:
                    ab:26:76:64:91:38:64:9c:4a:75:02:bd:20:b7:2d:
                    80:5a:89:ae:16:12:30:0a:72:95:84:67:d3:f2:2c:
                    4c:8a:54:6d:f1:8e:62:0f:61:d0:48:fc:63:f1:ad:
                    b6:a1:bd:da:20:cb:8c:b3:cc:cf:13:83:61:3f:f5:
                    9d:9d:91:ef:fb:72:e6:fb:9c:1f:6a:8c:bd:73:33:
                    4b:99:6d:05:cb:9b:69:3f:3e:0c:8d:e3:c2:45:db:
                    8d:3a:af:19:e3:8a:0e:c1:fc:89:b3:2e:45:af:12:
                    6b:4d:dd:c4:e1:c4:74:5a:92:75:50:6c:90:60:6c:
                    4d:66:50:e5:a2:57:1b:6d:b3:82:de:56:fd:52:6d:
                    3b:84:c5:12:82:80:8b:06:4c:b8:ca:43:bc:5f:ea:
                    50:ab:18:a5:7d:7b:30:15:77:7f:7c:79:b1:0c:5b:
                    ed:58:81:71:4e:b0:49:e3:2f:7f:6c:e7:d2:7e:cd:
                    a8:77:c2:63:0d:4f:8b:4e:6d:d3:92:11:0d:a3:31:
                    70:0f:00:96:6a:36:57:e1:11:56:e5:e5:21:da:f9:
                    ac:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:96:75:3F:F9:C3:F7:FD:12:1E:0D:64:6D:9B:9B:13:62:C5:A8:67
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:3b:8c:a8:9c:79:b2:0a:d6:78:c3:99:ae:f7:6e:92:6b:
         4a:6d:21:4d:84:3d:a1:59:5f:77:b8:59:97:e6:db:d3:3f:5f:
         15:7b:df:89:09:2f:90:f9:d4:88:be:da:f6:f1:40:08:d1:66:
         c9:29:ce:92:8f:a3:97:18:e6:22:a0:4f:52:4a:b4:dc:da:8c:
         a0:56:35:be:b9:92:14:4c:cc:b2:8f:9b:80:8a:41:db:b2:94:
         5a:c4:17:99:6f:4c:b1:61:b4:8c:5d:b9:40:9b:af:88:21:ea:
         cd:5f:ad:57:07:f7:bd:45:f8:de:af:38:75:3c:0b:29:4c:7d:
         c4:d7:f1:fd:8b:1c:3d:d1:c0:35:10:10:eb:e3:bf:30:3f:45:
         86:eb:6a:cd:7f:b3:07:fa:7b:11:50:dd:dc:e0:12:83:65:81:
         ff:ef:88:77:1c:a7:95:46:6b:0a:d9:0e:4b:09:41:ba:ee:5d:
         0a:d8:f0:68:09:62:64:64:ba:a5:d5:24:0a:8e:1d:3a:03:0e:
         9d:92:76:49:5d:31:34:e4:5d:f0:8a:03:85:64:2c:bc:46:6c:
         e7:a6:ad:1a:45:33:f0:97:c4:73:1a:9d:45:55:f6:6f:bb:24:
         a5:71:8a:74:84:75:8c:47:36:26:14:4e:ac:7c:3c:4f:cd:20:
         fe:c4:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org