Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa
File:                     34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa (raw, json)
Hash identifier:          oFCUDncQknDp9TrT//dtlynN6N8UiziqP5U9pSqTXSE=
Subject key identifier:   CB:19:8C:20:84:55:8C:73:E4:A3:5A:B4:5B:95:A8:87:AB:AF:C0:E6
Certificate issuer:       /CN=41CC1149A395221179532F4A07FA147494164BDB
Certificate serial:       4B40F24D259535F5AEEAA515D50D95A1B91C902A
Authority key identifier: 41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa
Signing time:             Mon 24 Jul 2023 13:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:55:00 +0000
ROA not after:            Mon 22 Jul 2024 13:00:00 +0000
asID:                     268518
IP address blocks:        45.162.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:40:f2:4d:25:95:35:f5:ae:ea:a5:15:d5:0d:95:a1:b9:1c:90:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CC1149A395221179532F4A07FA147494164BDB
        Validity
            Not Before: Jul 24 12:55:00 2023 GMT
            Not After : Jul 22 13:00:00 2024 GMT
        Subject: CN=3082010A0282010100ADDC5B5525100D600F1D1CBF88102DCE229A2EB772246E453F2D0EA28A015BEB71FD117D7161FCA0EEE63D6BAE89F203BBE6B819BF2A599CAE538E6AA5FB8E69CCEF6E6800A6CF25520BD9D7D0100D07362507531DAE1A2FB2573BF69CBE51512D42277860C434FC852BFF647F52780B7CD0C12B72AE9F7F8C1E38E0B07B7527739F0364357862165D3A7666CB2474E05068B1F047503FF0E02B3A0DF128AE4164068CC7AB65C3D4F48D3A8822715269A1D3BDF51984BB9E0FE87934F85CD69E73696A006D410A1860F0C36AC150DF17F79D1D45F30CB95144B0A6BDE17EF30FC65882DF15152A0620CCAEC9B4D86053508695D5FA2683145E54318B172873F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:5b:55:25:10:0d:60:0f:1d:1c:bf:88:10:
                    2d:ce:22:9a:2e:b7:72:24:6e:45:3f:2d:0e:a2:8a:
                    01:5b:eb:71:fd:11:7d:71:61:fc:a0:ee:e6:3d:6b:
                    ae:89:f2:03:bb:e6:b8:19:bf:2a:59:9c:ae:53:8e:
                    6a:a5:fb:8e:69:cc:ef:6e:68:00:a6:cf:25:52:0b:
                    d9:d7:d0:10:0d:07:36:25:07:53:1d:ae:1a:2f:b2:
                    57:3b:f6:9c:be:51:51:2d:42:27:78:60:c4:34:fc:
                    85:2b:ff:64:7f:52:78:0b:7c:d0:c1:2b:72:ae:9f:
                    7f:8c:1e:38:e0:b0:7b:75:27:73:9f:03:64:35:78:
                    62:16:5d:3a:76:66:cb:24:74:e0:50:68:b1:f0:47:
                    50:3f:f0:e0:2b:3a:0d:f1:28:ae:41:64:06:8c:c7:
                    ab:65:c3:d4:f4:8d:3a:88:22:71:52:69:a1:d3:bd:
                    f5:19:84:bb:9e:0f:e8:79:34:f8:5c:d6:9e:73:69:
                    6a:00:6d:41:0a:18:60:f0:c3:6a:c1:50:df:17:f7:
                    9d:1d:45:f3:0c:b9:51:44:b0:a6:bd:e1:7e:f3:0f:
                    c6:58:82:df:15:15:2a:06:20:cc:ae:c9:b4:d8:60:
                    53:50:86:95:d5:fa:26:83:14:5e:54:31:8b:17:28:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:8C:20:84:55:8C:73:E4:A3:5A:B4:5B:95:A8:87:AB:AF:C0:E6
            X509v3 Authority Key Identifier:
                keyid:41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3132392e302f32342d3234203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:1c:d1:d4:e6:a8:73:b3:07:c1:96:65:c8:94:57:16:ae:
         0c:bb:da:6a:65:45:68:96:fe:ae:46:ac:95:98:f0:52:e0:b8:
         2a:74:14:67:ae:44:1b:16:52:75:63:5f:ea:0b:cd:56:2f:a5:
         82:38:3a:bd:2c:1f:65:93:dc:57:70:af:24:85:d6:58:62:b2:
         e9:25:60:e5:2c:b1:7c:96:15:b2:78:dd:98:f0:2a:0e:bc:79:
         09:5f:cd:b0:37:32:91:51:f1:3c:11:77:06:f4:f0:d3:31:3f:
         b9:a6:8e:b2:f5:b2:43:d9:1b:5d:20:3c:26:85:ba:18:0e:85:
         01:fc:0d:48:c1:98:1a:47:b2:dc:6d:cb:0d:56:bb:8c:08:d0:
         1f:7f:fb:78:7b:ec:6d:70:01:8a:9c:48:3e:65:d4:ac:4d:10:
         fc:8d:3b:66:19:3a:24:9f:f2:bf:fa:7b:e7:61:b7:9e:9d:d4:
         43:df:21:26:ee:58:3f:13:ac:6d:81:61:32:38:80:a5:09:ed:
         75:ba:e4:c9:91:08:3a:39:07:ba:95:02:c3:24:d4:fe:16:0a:
         0b:39:c3:88:3c:48:ca:cb:d0:60:5e:5b:4d:a7:c4:68:42:f2:
         dd:c3:8f:28:c5:73:a9:a2:47:2f:7b:ae:7e:a8:7e:20:9a:3a:
         01:29:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org