Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa (raw, json)
Hash identifier:          oAAlDwDZ4AlnmGSAnERA86zsp2MStw0K1jz++4woRgM=
Subject key identifier:   E8:82:9F:0F:7A:32:92:23:62:27:40:AB:5A:20:84:D0:DD:F0:69:41
Certificate issuer:       /CN=41CC1149A395221179532F4A07FA147494164BDB
Certificate serial:       671745E5497EABBEDB1661F72B9DA71FC1B83632
Authority key identifier: 41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa
Signing time:             Mon 24 Jul 2023 13:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:55:00 +0000
ROA not after:            Mon 22 Jul 2024 13:00:00 +0000
asID:                     268518
IP address blocks:        45.162.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:17:45:e5:49:7e:ab:be:db:16:61:f7:2b:9d:a7:1f:c1:b8:36:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CC1149A395221179532F4A07FA147494164BDB
        Validity
            Not Before: Jul 24 12:55:00 2023 GMT
            Not After : Jul 22 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:f0:38:36:c7:c7:7c:01:ac:48:da:56:8a:
                    56:a5:26:be:f6:e6:81:ea:87:c4:cb:fe:2c:81:5e:
                    a4:31:34:93:c2:b3:11:a3:c2:07:b8:a5:e5:04:ee:
                    70:0c:b1:0d:5d:a2:35:f5:1e:a1:24:54:14:9b:7d:
                    1c:66:ae:65:2a:05:d7:b9:da:85:2d:98:a9:66:bc:
                    00:50:52:c4:52:a8:99:74:e0:d2:a2:16:ef:c2:db:
                    48:b4:52:25:95:8c:ff:0c:7b:8a:a8:f0:49:e1:ec:
                    2a:64:b5:ae:fa:02:16:8c:52:27:dd:57:c1:4c:f9:
                    f3:a4:ee:33:70:86:2f:f1:ec:d8:70:b5:ce:a3:c0:
                    a8:c4:b4:52:11:d5:36:0a:cf:b4:2b:84:57:50:95:
                    e2:b3:d4:17:21:6b:ed:79:a6:0e:f5:92:8b:57:b4:
                    9c:ba:a7:99:65:9e:0f:99:63:da:46:a2:87:a4:e4:
                    2e:e0:a2:49:e6:22:be:86:49:55:0c:da:b2:7c:a1:
                    cb:2f:d9:e1:d4:af:19:d8:b4:88:ae:41:ec:a9:6f:
                    15:a6:5e:30:de:f1:9f:b9:eb:39:79:5e:8d:37:36:
                    55:f6:10:26:77:ba:c5:3c:50:a3:07:24:2b:29:e9:
                    54:89:4c:0a:87:8c:2c:95:39:61:c3:8b:6b:bb:4e:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:82:9F:0F:7A:32:92:23:62:27:40:AB:5A:20:84:D0:DD:F0:69:41
            X509v3 Authority Key Identifier:
                keyid:41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132382e302f32342d3234203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:db:b0:ad:aa:2b:98:29:d9:86:28:92:f5:1e:3a:2d:9a:c1:
         c0:b4:25:bc:8c:be:8a:5a:6b:49:55:8b:ae:5a:a3:0f:43:04:
         bd:a3:a3:a3:10:60:01:40:bd:98:d6:0b:33:79:67:e4:ea:f1:
         b4:4e:c7:97:f9:28:7a:a4:85:0c:fc:ea:8b:25:84:8b:fd:6f:
         9e:26:49:e2:ed:ae:54:4e:0d:f4:b9:ba:f9:7c:80:e5:4f:12:
         50:61:d3:d1:3e:6e:7c:94:99:e9:3d:dc:57:95:e6:d3:d7:d8:
         4a:dc:ef:07:b3:03:a0:4c:7b:68:84:ae:85:62:09:d2:1a:64:
         a3:06:83:16:94:6a:ec:b5:5e:b5:4e:9d:55:94:0c:2a:4c:11:
         53:b6:c2:d6:ae:81:f1:75:8e:e0:84:3c:f2:2a:7f:71:81:4d:
         5f:c6:d7:97:81:6e:54:a4:0c:b1:3a:c6:d1:9c:58:94:78:f7:
         57:13:74:e2:ec:2a:af:a4:b3:96:84:3f:12:9a:dd:be:1a:a2:
         b9:44:61:76:3d:c5:a2:25:98:9f:1f:17:db:99:38:8e:77:79:
         07:74:2a:63:a3:f4:4e:f7:30:bd:1e:d8:a0:e0:a8:11:be:30:
         e5:1c:59:e7:c7:db:cc:35:bd:53:a6:2a:e7:0e:d5:0f:5e:99:
         eb:d8:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org