Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133302e302f32342d3234203d3e20323638353138.roa
File:                     34352e3136322e3133302e302f32342d3234203d3e20323638353138.roa (raw, json)
Hash identifier:          zaeh5Tcgor6N31J0XXjqIEULslYdiOXuIBBB+szSTfE=
Subject key identifier:   3C:4F:F3:B7:57:08:BF:B7:2E:EC:1E:CE:38:38:64:9F:FD:FB:8A:8D
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       6CB038A507AF7E4B2C36D59DBD52460899463D08
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133302e302f32342d3234203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:33 +0000
ROA not before:           Mon 18 Oct 2021 14:21:33 +0000
ROA not after:            Mon 17 Oct 2022 14:26:33 +0000
asID:                     268518
IP address blocks:        45.162.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b0:38:a5:07:af:7e:4b:2c:36:d5:9d:bd:52:46:08:99:46:3d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:33 2021 GMT
            Not After : Oct 17 14:26:33 2022 GMT
        Subject: CN=3082010A0282010100F00F97983A37C0C3E23F9FD3DC59820A4CCC87FB6C487BEE7DA65C6EA5CD1AA5B2845930622883D48180F6DDD5C893510ED3CB56780E8FE90D5EDEB13BAAEEC92AE9B730F7B18D0EE033F23E185E5C0D249E3ADACD033944B6227B35BEFB45D2F4D22B5E024E7930C31C3795DFBEEBBA112D1D5121C72E9CACE5F1C2DB2774509BF4E16AE636C563FCBACE5EEFCD6321BC0F81BA61B10315C949CAB509E67513C9A907286DC49EED6787080A6FD43A5CBDAB6BDEBB0B4B043C56E051CE5087D4AC8B65A0EA82472441EC74A98C3562551C8137DDDEBFA0F7463407CD950D0C4D902A2BD3548732CD3E2410632E72C2F0314EE93B55ED33C45D0176AE2C5BC41B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0f:97:98:3a:37:c0:c3:e2:3f:9f:d3:dc:59:
                    82:0a:4c:cc:87:fb:6c:48:7b:ee:7d:a6:5c:6e:a5:
                    cd:1a:a5:b2:84:59:30:62:28:83:d4:81:80:f6:dd:
                    d5:c8:93:51:0e:d3:cb:56:78:0e:8f:e9:0d:5e:de:
                    b1:3b:aa:ee:c9:2a:e9:b7:30:f7:b1:8d:0e:e0:33:
                    f2:3e:18:5e:5c:0d:24:9e:3a:da:cd:03:39:44:b6:
                    22:7b:35:be:fb:45:d2:f4:d2:2b:5e:02:4e:79:30:
                    c3:1c:37:95:df:be:eb:ba:11:2d:1d:51:21:c7:2e:
                    9c:ac:e5:f1:c2:db:27:74:50:9b:f4:e1:6a:e6:36:
                    c5:63:fc:ba:ce:5e:ef:cd:63:21:bc:0f:81:ba:61:
                    b1:03:15:c9:49:ca:b5:09:e6:75:13:c9:a9:07:28:
                    6d:c4:9e:ed:67:87:08:0a:6f:d4:3a:5c:bd:ab:6b:
                    de:bb:0b:4b:04:3c:56:e0:51:ce:50:87:d4:ac:8b:
                    65:a0:ea:82:47:24:41:ec:74:a9:8c:35:62:55:1c:
                    81:37:dd:de:bf:a0:f7:46:34:07:cd:95:0d:0c:4d:
                    90:2a:2b:d3:54:87:32:cd:3e:24:10:63:2e:72:c2:
                    f0:31:4e:e9:3b:55:ed:33:c4:5d:01:76:ae:2c:5b:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4F:F3:B7:57:08:BF:B7:2E:EC:1E:CE:38:38:64:9F:FD:FB:8A:8D
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133302e302f32342d3234203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:36:7b:72:c1:64:e2:66:84:e0:9a:65:ad:94:bc:44:44:41:
         4a:dc:30:3e:75:c1:39:83:45:35:b1:44:ef:49:d4:49:da:6f:
         9e:6c:0b:73:d9:30:81:44:9d:8f:32:56:68:36:a8:8b:46:4c:
         13:8a:50:8b:28:a0:8e:60:fa:3f:88:16:ab:04:53:aa:20:c7:
         53:5e:2b:4e:09:a6:b9:0b:0b:1c:52:f5:67:ea:38:e4:bd:02:
         b2:fb:0d:0f:33:02:ab:97:0a:97:12:48:34:bd:44:b9:c3:f2:
         22:c2:ed:9a:26:bb:b5:34:dd:d5:72:a0:ea:98:71:7b:46:f2:
         f7:06:10:df:43:81:27:93:cf:98:8b:3e:02:9c:47:d4:4d:59:
         1b:45:77:c4:47:28:fe:67:2a:1b:8f:c3:84:01:bf:1e:71:c0:
         49:a2:b4:d7:1b:47:00:38:30:57:8f:b8:40:15:76:4b:61:fc:
         fa:86:d5:38:26:3d:99:20:87:16:15:5d:db:9b:f8:38:74:e0:
         39:b5:75:5f:03:b9:b2:a0:a1:80:dd:4c:5c:92:e3:27:a1:d7:
         3f:14:c6:7f:38:a9:f3:4c:3f:af:a2:74:98:59:b7:ad:78:99:
         90:54:30:65:1f:bf:10:4c:b3:d4:ce:58:1b:1e:a6:ac:71:a4:
         3b:58:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org