Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133312e302f32342d3234203d3e20323638353138.roa
File:                     34352e3136322e3133312e302f32342d3234203d3e20323638353138.roa (raw, json)
Hash identifier:          51M/IiKPNyDFViS4FvwwROiHXBkh672yXob/E26t3ko=
Subject key identifier:   83:1A:73:4B:13:86:4D:2A:60:0C:D4:4A:27:14:EA:71:36:A0:0B:40
Certificate issuer:       /CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
Certificate serial:       752FB39193AC7F129F98774A8DA5B8453AEA86C2
Authority key identifier: 01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133312e302f32342d3234203d3e20323638353138.roa
Signing time:             Mon 18 Oct 2021 14:26:33 +0000
ROA not before:           Mon 18 Oct 2021 14:21:33 +0000
ROA not after:            Mon 17 Oct 2022 14:26:33 +0000
asID:                     268518
IP address blocks:        45.162.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:2f:b3:91:93:ac:7f:12:9f:98:77:4a:8d:a5:b8:45:3a:ea:86:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Validity
            Not Before: Oct 18 14:21:33 2021 GMT
            Not After : Oct 17 14:26:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:a8:3b:19:2f:0a:d5:cf:e9:a1:bb:3a:a4:
                    dc:bb:ee:75:ef:f0:10:50:0b:9e:8d:19:94:52:74:
                    64:5b:3b:34:3c:08:65:08:a1:fe:a4:40:e3:2c:3c:
                    e7:e4:fb:69:26:1c:ff:ee:6b:cf:2b:ab:c2:13:2d:
                    a7:8f:e8:34:e2:c6:7f:38:08:62:23:bb:a6:a9:8d:
                    91:f3:5a:fc:f6:48:b4:d0:81:cd:84:a3:cf:8e:da:
                    d7:1c:cd:5a:e5:e8:50:ed:3c:96:1b:76:fa:3a:87:
                    95:16:52:50:92:ad:15:4b:01:18:16:23:21:23:26:
                    c3:8c:e1:e7:c0:3a:1a:42:96:9f:77:93:00:b9:1e:
                    bc:81:14:22:4c:57:00:ab:f3:b5:b2:a7:a5:c2:07:
                    44:00:04:a8:12:28:74:c7:7e:89:97:7c:a4:a9:4b:
                    4d:2e:87:9e:ee:5b:7b:bc:80:80:0a:15:a4:91:1a:
                    93:bd:64:d0:85:af:60:b9:11:4e:90:b9:95:07:a8:
                    40:6c:79:40:c3:66:56:bb:fc:1c:11:7c:ff:7f:1b:
                    73:c0:69:4c:e0:5e:d1:d4:52:12:d4:ee:e8:d3:6b:
                    b0:fd:9e:a7:4d:31:7c:fc:38:e5:cb:9a:12:ba:ee:
                    f5:74:60:9a:f2:dc:7d:f4:60:ec:c1:f9:83:b2:85:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1A:73:4B:13:86:4D:2A:60:0C:D4:4A:27:14:EA:71:36:A0:0B:40
            X509v3 Authority Key Identifier:
                keyid:01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3133312e302f32342d3234203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:30:67:17:b2:90:f2:7f:3a:40:01:43:29:ff:c5:88:5d:8e:
         db:b8:9e:44:62:6e:34:39:ad:9b:e8:26:24:cc:5b:9a:a7:a5:
         31:9e:1a:3c:aa:1b:26:28:47:d9:66:be:18:65:e9:6f:60:4a:
         8b:ce:70:22:d7:dd:96:b6:82:b7:5e:8a:df:37:ff:15:a8:1e:
         70:96:89:40:b6:53:53:0e:86:2f:8f:16:89:a2:fe:95:a0:16:
         15:8d:55:d9:32:ca:18:d1:38:1f:16:ef:87:92:3a:a8:38:db:
         58:da:02:ba:4f:d5:8b:34:92:d4:c9:19:9b:9f:9b:48:27:58:
         82:aa:3e:e1:2c:88:30:8e:71:2f:75:a7:b7:68:52:8a:d1:12:
         e4:24:d0:19:e9:de:84:7b:ae:b2:e0:f8:dc:84:3d:b4:e7:64:
         7b:c8:f0:8e:08:f1:66:df:1d:09:a2:7a:67:1f:b9:ac:3d:7b:
         68:c4:84:ba:86:4c:d1:8e:0d:de:d6:05:ba:22:4b:89:58:ab:
         10:72:16:00:86:f9:f3:df:a4:38:86:17:3c:23:a1:c2:3c:3f:
         6d:44:2d:95:8b:81:63:f1:38:62:e4:34:81:6d:53:15:c6:a0:
         c4:68:ab:d8:67:c3:a4:b2:54:36:4a:39:f5:16:de:6b:c6:ea:
         10:9a:db:3f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUdS+zkZOsfxKfmHdKjaW4RTrqhsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDMzA0RDk1MDJFMDdCQzE1OEUwRkQ0MjJFQzI2QkRF
OUVDODY1MTAeFw0yMTEwMTgxNDIxMzNaFw0yMjEwMTcxNDI2MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzAxN0E4M0IxOTJGMEFENUNG
RTlBMUJCM0FBNERDQkJFRTc1RUZGMDEwNTAwQjlFOEQxOTk0NTI3NDY0NUIzQjM0
M0MwODY1MDhBMUZFQTQ0MEUzMkMzQ0U3RTRGQjY5MjYxQ0ZGRUU2QkNGMkJBQkMy
MTMyREE3OEZFODM0RTJDNjdGMzgwODYyMjNCQkE2QTk4RDkxRjM1QUZDRjY0OEI0
RDA4MUNEODRBM0NGOEVEQUQ3MUNDRDVBRTVFODUwRUQzQzk2MUI3NkZBM0E4Nzk1
MTY1MjUwOTJBRDE1NEIwMTE4MTYyMzIxMjMyNkMzOENFMUU3QzAzQTFBNDI5NjlG
Nzc5MzAwQjkxRUJDODExNDIyNEM1NzAwQUJGM0I1QjJBN0E1QzIwNzQ0MDAwNEE4
MTIyODc0Qzc3RTg5OTc3Q0E0QTk0QjREMkU4NzlFRUU1QjdCQkM4MDgwMEExNUE0
OTExQTkzQkQ2NEQwODVBRjYwQjkxMTRFOTBCOTk1MDdBODQwNkM3OTQwQzM2NjU2
QkJGQzFDMTE3Q0ZGN0YxQjczQzA2OTRDRTA1RUQxRDQ1MjEyRDRFRUU4RDM2QkIw
RkQ5RUE3NEQzMTdDRkMzOEU1Q0I5QTEyQkFFRUY1NzQ2MDlBRjJEQzdERjQ2MEVD
QzFGOTgzQjI4NTc2MTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwBeoOxkvCtXP6aG7OqTcu+517/AQUAuejRmUUnRkWzs0PAhlCKH+
pEDjLDzn5PtpJhz/7mvPK6vCEy2nj+g04sZ/OAhiI7umqY2R81r89ki00IHNhKPP
jtrXHM1a5ehQ7TyWG3b6OoeVFlJQkq0VSwEYFiMhIybDjOHnwDoaQpafd5MAuR68
gRQiTFcAq/O1sqelwgdEAASoEih0x36Jl3ykqUtNLoee7lt7vICAChWkkRqTvWTQ
ha9guRFOkLmVB6hAbHlAw2ZWu/wcEXz/fxtzwGlM4F7R1FIS1O7o02uw/Z6nTTF8
/Djly5oSuu71dGCa8tx99GDswfmDsoV2EQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIMac0sThk0qYAzUSicU6nE2oAtAMB8GA1UdIwQYMBaAFAHDBNlQLge8FY4P1CLs
Jr3p7IZRMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JDQVBYVVZvZFNhMlZL
ak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzAvMDFDMzA0RDk1MDJFMDdC
QzE1OEUwRkQ0MjJFQzI2QkRFOUVDODY1MS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wMUMzMDREOTUwMkUwN0JDMTU4RTBGRDQyMkVDMjZCREU5RUM4
NjUxLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CQ0FQWFVWb2RTYTJWS2pNWDFY
YVRBOTN2dnRyN05CV2JmWGRkMkJMcktRdS8wLzM0MzUyZTMxMzYzMjJlMzEzMzMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4MzUzMTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LaKDMA0GCSqGSIb3DQEBCwUAA4IBAQCRMGcXspDyfzpAAUMp/8WIXY7buJ5EYm40
Oa2b6CYkzFuap6Uxnho8qhsmKEfZZr4YZelvYEqLznAi192WtoK3XorfN/8VqB5w
lolAtlNTDoYvjxaJov6VoBYVjVXZMsoY0TgfFu+HkjqoONtY2gK6T9WLNJLUyRmb
n5tIJ1iCqj7hLIgwjnEvdae3aFKK0RLkJNAZ6d6Ee66y4PjchD2052R7yPCOCPFm
3x0JonpnH7msPXtoxIS6hkzRjg3e1gW6IkuJWKsQchYAhvnz36Q4hhc8I6HCPD9t
RC2Vi4Fj8Thi5DSBbVMVxqDEaKvYZ8OkslQ2Sjn1Ft5rxuoQmts/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org