Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa (raw, json)
Hash identifier:          C70FMdY4pT/3627DdQlMaiWKC5KLhz7QcqslVUkKHrY=
Subject key identifier:   BA:99:32:79:F8:E3:51:C9:5B:BF:3F:17:4F:5F:FA:30:BD:38:EE:38
Certificate issuer:       /CN=41CC1149A395221179532F4A07FA147494164BDB
Certificate serial:       204ACF667701494C0BC7C11BBA7C57B4DE6AB377
Authority key identifier: 41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa
Signing time:             Mon 24 Jul 2023 13:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:55:00 +0000
ROA not after:            Mon 22 Jul 2024 13:00:00 +0000
asID:                     268518
IP address blocks:        45.162.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4a:cf:66:77:01:49:4c:0b:c7:c1:1b:ba:7c:57:b4:de:6a:b3:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CC1149A395221179532F4A07FA147494164BDB
        Validity
            Not Before: Jul 24 12:55:00 2023 GMT
            Not After : Jul 22 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:22:dd:de:5d:ba:cb:8a:2e:f4:c1:ef:5e:cb:
                    d0:43:64:a9:df:43:da:5b:5e:ad:2c:ee:23:93:47:
                    30:80:1d:1f:59:1c:3c:f1:78:d8:6e:8a:de:cf:6b:
                    75:93:23:72:cd:55:54:6c:05:cc:65:64:9e:df:0d:
                    b0:08:96:b3:10:d6:0c:88:16:93:10:58:51:a4:15:
                    e9:4d:bb:12:12:a4:55:af:60:28:b0:b6:f9:22:80:
                    6e:38:c0:07:2e:2b:d3:dc:8c:9f:8f:30:68:36:76:
                    b6:ea:24:79:ef:6e:38:36:6c:80:b1:69:a1:7b:51:
                    60:04:6c:cd:57:35:97:7b:be:09:a2:63:75:10:08:
                    c8:3c:ff:a6:15:51:2e:00:7e:55:a2:04:83:d7:ce:
                    79:f1:ba:ce:eb:ed:61:35:14:71:98:c4:aa:3b:cd:
                    1a:71:ee:8d:9a:bd:5c:2f:29:db:30:e5:f1:e9:0c:
                    72:4b:0e:7e:ba:53:52:e5:2a:79:44:5a:6a:48:0f:
                    91:d9:53:8f:ee:29:0a:57:cb:75:fd:cc:d7:00:e8:
                    eb:e5:5a:a6:09:0e:42:90:68:22:9d:44:67:cd:c1:
                    3f:b6:f9:69:65:c0:97:1a:3a:3d:3a:7e:26:bc:19:
                    13:f1:34:50:1a:97:8f:38:eb:08:ba:a9:b7:7d:6a:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:99:32:79:F8:E3:51:C9:5B:BF:3F:17:4F:5F:FA:30:BD:38:EE:38
            X509v3 Authority Key Identifier:
                keyid:41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32332d3233203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:e9:46:8a:32:d5:cb:71:99:cb:90:a2:3f:f6:17:fd:0a:
         19:08:2d:84:76:76:70:17:61:51:18:1a:6e:b4:67:6a:c6:ad:
         9a:bb:7a:13:da:4a:16:06:a5:0e:f4:ad:5d:06:5b:07:41:41:
         f5:60:36:cb:22:7d:bf:a7:71:ed:77:7f:9f:ab:e9:24:c4:ee:
         f8:44:37:e2:db:22:24:58:1f:4e:86:3b:6b:e1:30:f7:65:07:
         7e:76:fe:6d:f6:04:8e:bd:7c:64:4d:61:c2:88:b1:96:c0:51:
         db:38:64:9b:40:a9:3f:97:3b:d8:9e:74:13:e7:9d:29:31:d8:
         4a:59:77:84:7d:c2:45:c3:cc:dd:d2:ec:e1:2d:5d:1d:30:1b:
         9c:60:57:03:77:03:43:70:43:63:aa:2b:dc:1c:a6:ae:68:2c:
         ec:91:39:1a:a7:23:db:9f:f4:20:8a:13:cf:ca:84:e8:86:1d:
         52:a9:6d:d3:7a:76:e4:13:99:8f:a8:cd:4e:c9:94:44:5d:5f:
         c6:3c:4b:3c:46:93:56:0d:55:bc:eb:d8:2a:bc:3d:6e:d1:ed:
         26:b3:d7:f1:ff:85:2e:0c:96:7d:76:45:c4:3e:b4:0f:c3:6f:
         fb:13:df:6e:ba:20:31:db:ab:38:66:3c:40:ae:84:c1:8f:fe:
         33:f8:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:17 2024 by rpki-client on console-fra.rpki-client.org