Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa
File:                     34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa (raw, json)
Hash identifier:          wf3dTTQbx10jyJj0fGn5JO3NmxBHIwo5FbTxx5A4Gg4=
Subject key identifier:   CF:05:67:D0:FC:A2:F7:C7:78:3A:3A:DC:D5:93:87:9E:32:B5:39:6D
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       38D39BFA485DBEBC83E749CB9DB62195B43D8F58
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:34 +0000
ROA not before:           Mon 18 Oct 2021 14:21:34 +0000
ROA not after:            Mon 17 Oct 2022 14:26:34 +0000
asID:                     268518
IP address blocks:        45.162.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d3:9b:fa:48:5d:be:bc:83:e7:49:cb:9d:b6:21:95:b4:3d:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:34 2021 GMT
            Not After : Oct 17 14:26:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:84:33:c8:9c:c0:70:a0:57:24:59:35:48:7a:
                    42:fa:ce:0f:a6:24:cc:16:8b:69:3e:ac:14:86:fe:
                    9c:90:8c:01:d9:33:42:a7:94:5d:6d:12:50:9a:10:
                    c5:8a:6d:48:d3:80:05:69:be:a1:4c:04:50:de:23:
                    19:e5:73:0c:e4:bf:2c:89:58:d5:ac:a7:15:45:ce:
                    2e:27:66:13:2e:78:5c:2f:2d:8c:2b:a3:56:a3:67:
                    ce:35:aa:22:82:f4:0e:b7:d3:b1:21:83:ae:4a:26:
                    1b:dc:15:d9:1e:be:26:87:b8:2e:f5:ac:57:de:80:
                    60:a1:18:1a:d4:3e:48:3a:9d:d0:0b:c2:64:bc:e6:
                    6f:bc:fa:47:b8:c5:11:46:f9:57:7b:be:bc:bb:b8:
                    08:c0:de:36:62:6e:ec:66:91:3a:1e:8e:7d:e6:6d:
                    e5:22:72:5f:9b:37:e2:c2:45:83:99:28:28:ff:16:
                    60:f3:06:32:4e:79:fc:80:3f:93:18:9a:47:3d:31:
                    fd:bd:d7:3d:eb:a6:9a:d4:c6:25:3c:a3:6d:59:91:
                    09:5e:7f:d1:3e:f6:c2:94:03:1c:ec:85:b0:42:41:
                    53:0f:a1:27:a4:3e:c4:22:9f:80:1f:21:4e:dc:86:
                    6c:f8:d1:75:3a:a6:26:9d:42:3c:b8:2a:26:d1:84:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:05:67:D0:FC:A2:F7:C7:78:3A:3A:DC:D5:93:87:9E:32:B5:39:6D
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:dd:f7:05:61:fd:c5:b5:c6:15:7a:9e:d3:5f:0d:34:94:
         e7:ab:1d:10:1a:d1:02:f4:8e:3d:40:f3:81:25:ad:6b:10:3c:
         c8:1e:5e:4a:20:35:77:46:7c:18:8d:eb:0c:04:64:b8:e9:30:
         08:a8:55:f1:5b:fb:bc:7a:9f:79:a9:69:b5:bb:31:0e:4f:07:
         6d:c1:68:f2:ef:e1:9d:cc:e9:8c:52:52:d8:98:85:3e:2e:91:
         d7:15:08:75:88:2b:fd:53:23:92:80:10:df:d4:bd:96:45:76:
         49:3b:fe:f9:2b:eb:78:19:d0:ef:56:2b:98:e4:d4:e9:64:79:
         bd:66:8c:4f:10:0f:fd:40:e0:07:41:7f:12:6e:2c:5f:80:a2:
         9c:dc:84:d1:ba:20:11:30:d8:0f:f1:91:db:a6:1f:ab:a7:97:
         f6:09:db:e6:a8:e4:e3:1e:a7:13:5f:79:ed:f6:55:41:5e:67:
         49:e4:bc:aa:d3:b6:e5:c5:97:50:83:44:4d:f1:0f:ad:88:ec:
         0f:9a:96:37:24:e7:df:bc:de:e9:ff:ab:da:df:0a:21:01:89:
         c1:fe:63:b6:8a:7e:1d:46:fc:50:c6:9c:8e:77:5c:ae:cc:2b:
         e2:23:c7:a2:6c:e8:06:e9:76:75:c4:dd:84:3a:e1:a0:16:15:
         b7:34:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org