Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa (raw, json)
Hash identifier:          FmFC6PtMbzDlyw0sgZ8YKtjiP5Ez9iBgF1/pWe6aBfQ=
Subject key identifier:   E9:D8:05:F7:72:B5:5D:57:3E:C2:28:52:5A:DF:3D:FF:A5:6E:D0:69
Certificate issuer:       /CN=41CC1149A395221179532F4A07FA147494164BDB
Certificate serial:       243AA0880D9282318D4D22C8615D825DEACF16DA
Authority key identifier: 41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa
Signing time:             Mon 24 Jul 2023 13:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:55:00 +0000
ROA not after:            Mon 22 Jul 2024 13:00:00 +0000
asID:                     268518
IP address blocks:        45.162.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3a:a0:88:0d:92:82:31:8d:4d:22:c8:61:5d:82:5d:ea:cf:16:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CC1149A395221179532F4A07FA147494164BDB
        Validity
            Not Before: Jul 24 12:55:00 2023 GMT
            Not After : Jul 22 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:cb:03:53:d4:ef:4a:0a:37:08:b4:90:0f:
                    a5:ec:ca:8f:f2:25:9b:f7:62:da:8e:d6:4d:69:85:
                    43:ff:80:8a:0c:21:a9:83:24:e7:84:82:02:39:5b:
                    e7:10:32:9f:19:11:b1:bd:23:c8:02:31:42:d0:fe:
                    5f:51:d2:21:33:93:b8:32:d6:59:bb:c9:97:22:71:
                    72:ff:98:d8:1f:3e:85:0b:8c:b5:7d:62:53:d7:e6:
                    67:38:fc:ee:b3:1c:48:de:80:45:16:4c:3c:3c:30:
                    8c:62:ae:cd:44:f5:1b:21:dd:18:17:f6:d7:76:c8:
                    06:f5:82:a7:2d:51:19:00:32:5d:4e:f4:06:d6:25:
                    f4:68:74:2a:5d:be:1e:c2:bd:41:e2:7c:3d:cf:c7:
                    ff:3b:a0:36:55:59:56:0c:06:5c:44:36:01:ea:3a:
                    97:71:52:da:58:8d:93:80:38:b2:4f:26:22:5b:b4:
                    b7:b7:1a:a1:00:83:af:06:f1:8f:56:e1:5b:c6:14:
                    e6:bd:c9:65:88:c2:8d:6d:6f:99:68:09:c1:28:c4:
                    f0:01:4e:a4:f2:5c:c8:e6:d6:1f:bf:52:be:c2:00:
                    c6:ad:09:c0:72:95:b6:b0:18:39:53:16:35:8b:09:
                    89:d3:68:67:95:9e:2d:2e:9e:1b:12:05:ac:56:86:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D8:05:F7:72:B5:5D:57:3E:C2:28:52:5A:DF:3D:FF:A5:6E:D0:69
            X509v3 Authority Key Identifier:
                keyid:41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32322d3232203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:e0:01:72:9f:c9:b6:93:87:51:00:dc:01:89:0d:ca:a6:
         ba:c0:c1:ea:3d:e6:5b:87:f1:17:ac:83:94:41:25:00:cc:f0:
         43:34:e5:42:bf:27:ad:c1:b6:3c:ca:fc:f3:c1:71:51:88:96:
         a7:62:2f:0f:17:6e:dc:5f:03:b9:dc:67:bf:85:12:9f:48:e6:
         8e:e7:18:11:a6:24:b0:eb:91:ff:ca:81:ba:88:2d:20:c6:b2:
         50:21:89:5d:ef:fd:26:f2:2a:d7:ee:94:97:7e:95:3d:1f:b6:
         4e:58:b2:53:d0:06:fc:5a:9c:19:02:11:b3:74:47:4f:45:ff:
         1b:2f:2a:a7:6f:64:17:3b:50:20:8d:93:c5:2c:d4:0f:26:01:
         c8:01:35:ef:40:f6:9a:2d:66:71:16:42:23:b2:ca:45:f3:23:
         12:db:96:ca:83:eb:e5:c3:8c:a6:e9:6d:1d:eb:9e:23:02:0d:
         08:a2:a7:50:d2:86:35:d6:56:72:86:bf:c9:81:85:62:8c:f8:
         7c:a8:ef:3f:47:31:d1:16:c0:cf:05:79:ae:e7:9d:fd:35:f0:
         02:b3:f0:5d:00:d7:0c:79:a4:c8:25:95:4d:5b:f0:07:0e:00:
         26:6f:67:cc:f7:7d:f2:9b:01:c8:63:23:82:e7:50:dd:d3:34:
         1e:ea:89:97
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUJDqgiA2SgjGNTSLIYV2CXerPFtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFDQzExNDlBMzk1MjIxMTc5NTMyRjRBMDdGQTE0NzQ5
NDE2NEJEQjAeFw0yMzA3MjQxMjU1MDBaFw0yNDA3MjIxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjNGN0NCMDM1M0Q0RUY0QTBB
MzcwOEI0OTAwRkE1RUNDQThGRjIyNTlCRjc2MkRBOEVENjRENjk4NTQzRkY4MDhB
MEMyMUE5ODMyNEU3ODQ4MjAyMzk1QkU3MTAzMjlGMTkxMUIxQkQyM0M4MDIzMTQy
RDBGRTVGNTFEMjIxMzM5M0I4MzJENjU5QkJDOTk3MjI3MTcyRkY5OEQ4MUYzRTg1
MEI4Q0I1N0Q2MjUzRDdFNjY3MzhGQ0VFQjMxQzQ4REU4MDQ1MTY0QzNDM0MzMDhD
NjJBRUNENDRGNTFCMjFERDE4MTdGNkQ3NzZDODA2RjU4MkE3MkQ1MTE5MDAzMjVE
NEVGNDA2RDYyNUY0Njg3NDJBNURCRTFFQzJCRDQxRTI3QzNEQ0ZDN0ZGM0JBMDM2
NTU1OTU2MEMwNjVDNDQzNjAxRUEzQTk3NzE1MkRBNTg4RDkzODAzOEIyNEYyNjIy
NUJCNEI3QjcxQUExMDA4M0FGMDZGMThGNTZFMTVCQzYxNEU2QkRDOTY1ODhDMjhE
NkQ2Rjk5NjgwOUMxMjhDNEYwMDE0RUE0RjI1Q0M4RTZENjFGQkY1MkJFQzIwMEM2
QUQwOUMwNzI5NUI2QjAxODM5NTMxNjM1OEIwOTg5RDM2ODY3OTU5RTJEMkU5RTFC
MTIwNUFDNTY4NkEzNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs/fLA1PU70oKNwi0kA+l7MqP8iWb92LajtZNaYVD/4CKDCGpgyTn
hIICOVvnEDKfGRGxvSPIAjFC0P5fUdIhM5O4MtZZu8mXInFy/5jYHz6FC4y1fWJT
1+ZnOPzusxxI3oBFFkw8PDCMYq7NRPUbId0YF/bXdsgG9YKnLVEZADJdTvQG1iX0
aHQqXb4ewr1B4nw9z8f/O6A2VVlWDAZcRDYB6jqXcVLaWI2TgDiyTyYiW7S3txqh
AIOvBvGPVuFbxhTmvclliMKNbW+ZaAnBKMTwAU6k8lzI5tYfv1K+wgDGrQnAcpW2
sBg5UxY1iwmJ02hnlZ4tLp4bEgWsVoajWQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOnYBfdytV1XPsIoUlrfPf+lbtBpMB8GA1UdIwQYMBaAFEHMEUmjlSIReVMvSgf6
FHSUFkvbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JDQVBYVVZvZFNhMlZL
ak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzEvNDFDQzExNDlBMzk1MjIx
MTc5NTMyRjRBMDdGQTE0NzQ5NDE2NEJEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MUNDMTE0OUEzOTUyMjExNzk1MzJGNEEwN0ZBMTQ3NDk0MTY0
QkRCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CQ0FQWFVWb2RTYTJWS2pNWDFY
YVRBOTN2dnRyN05CV2JmWGRkMkJMcktRdS8xLzM0MzUyZTMxMzYzMjJlMzEzMjM4
MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4MzUzMTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LaKAMA0GCSqGSIb3DQEBCwUAA4IBAQBZauABcp/JtpOHUQDcAYkNyqa6wMHqPeZb
h/EXrIOUQSUAzPBDNOVCvyetwbY8yvzzwXFRiJanYi8PF27cXwO53Ge/hRKfSOaO
5xgRpiSw65H/yoG6iC0gxrJQIYld7/0m8irX7pSXfpU9H7ZOWLJT0Ab8WpwZAhGz
dEdPRf8bLyqnb2QXO1AgjZPFLNQPJgHIATXvQPaaLWZxFkIjsspF8yMS25bKg+vl
w4ym6W0d654jAg0IoqdQ0oY11lZyhr/JgYVijPh8qO8/RzHRFsDPBXmu5539NfAC
s/BdANcMeaTIJZVNW/AHDgAmb2fM933ymwHIYyOC51Dd0zQe6omX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org