Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa
File:                     34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa (raw, json)
Hash identifier:          blsP5JbEF3FbVJx1pCm0H7B/xOkiaNscKhgOBV7HevY=
Subject key identifier:   58:4F:A7:2F:67:A2:28:3E:72:16:44:C3:7B:04:E4:B3:26:12:3D:DF
Certificate issuer:       /CN=41CC1149A395221179532F4A07FA147494164BDB
Certificate serial:       0CF605B9DC8F7A2984EFA930F15E12FB603A1B13
Authority key identifier: 41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa
Signing time:             Mon 24 Jul 2023 13:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:55:00 +0000
ROA not after:            Mon 22 Jul 2024 13:00:00 +0000
asID:                     268518
IP address blocks:        45.162.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f6:05:b9:dc:8f:7a:29:84:ef:a9:30:f1:5e:12:fb:60:3a:1b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41CC1149A395221179532F4A07FA147494164BDB
        Validity
            Not Before: Jul 24 12:55:00 2023 GMT
            Not After : Jul 22 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:c1:ef:a1:5e:61:33:c0:e7:98:d1:7f:0c:
                    0b:da:de:b2:f6:14:4d:19:32:24:7a:99:df:e0:52:
                    9b:46:35:59:d5:c5:80:23:a3:bb:34:8c:a4:e2:3e:
                    ed:3b:84:ec:1b:e4:ac:24:24:41:e4:b3:7a:10:5a:
                    c8:42:a9:6a:9e:f0:bd:2f:a8:0a:2b:ff:06:98:62:
                    82:34:48:96:37:dc:fa:53:4b:d1:e6:fc:82:89:11:
                    cb:f1:09:44:45:04:0d:ec:28:d3:40:da:94:46:eb:
                    3f:9b:d7:72:50:c5:34:e6:a6:af:9c:f0:2c:9a:bb:
                    c8:59:29:fe:c3:62:c8:6b:5e:f9:af:9f:7d:c4:35:
                    c1:e9:68:fb:fc:cd:99:e2:7e:c8:9b:94:ca:a5:2b:
                    f2:1e:ab:63:3d:7a:17:c3:db:15:a8:29:2c:aa:fc:
                    38:b9:8c:3e:61:27:7d:a8:78:98:99:46:f1:8c:01:
                    4b:a6:57:3e:a8:72:69:34:39:97:8c:88:0d:15:09:
                    b3:cf:b2:cc:98:35:ee:1e:19:40:74:39:5a:ba:ab:
                    2e:81:0b:02:ea:a5:dc:b9:62:31:f7:79:7a:dd:7d:
                    46:4b:c9:25:83:1d:25:ce:cd:98:ae:58:be:32:0f:
                    a4:99:04:b6:b2:4b:70:8b:de:0a:ca:8a:a3:ee:df:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4F:A7:2F:67:A2:28:3E:72:16:44:C3:7B:04:E4:B3:26:12:3D:DF
            X509v3 Authority Key Identifier:
                keyid:41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/34352e3136322e3133302e302f32332d3233203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:e2:da:d3:e0:ad:7a:1c:63:f5:8a:a0:2a:9b:cb:00:4c:9b:
         81:15:b5:ff:8c:01:bc:6a:87:05:57:31:50:10:8f:e6:a5:ee:
         60:39:a2:da:e0:46:e7:41:1a:22:eb:2a:94:28:ed:17:65:bb:
         65:0d:1f:0f:53:59:3b:d7:9c:a3:d6:f8:ac:0b:58:80:4b:30:
         38:45:2c:7a:e7:42:64:f7:cd:6f:db:90:7e:1b:6e:15:cd:29:
         ba:1c:03:89:f3:94:e0:b3:2e:be:02:b6:06:08:aa:28:53:0e:
         3a:47:42:5f:3f:c3:04:26:52:5f:93:e4:3d:d7:27:70:e5:75:
         f6:47:d2:b9:f7:38:5c:4c:ed:b5:d1:fe:2f:61:21:bd:27:e4:
         af:24:6b:0b:b7:c9:a2:8f:48:71:02:5d:cc:9c:e0:17:ec:a7:
         fb:f5:7b:3f:bd:8f:c5:07:91:2d:72:0d:2c:cd:01:44:e1:f5:
         96:1c:e1:9e:2e:c6:f5:ec:48:37:5c:e4:a9:f8:ed:95:8a:0c:
         76:dc:7f:ca:19:fd:1d:46:c5:2a:61:9a:f5:b0:ce:5e:3d:28:
         f4:14:51:5f:72:56:25:57:6c:47:20:71:f7:d5:33:25:44:8b:
         19:a3:27:c9:1c:57:0d:d5:1b:e6:af:93:6c:23:62:bb:9e:10:
         f1:ca:8e:76
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDPYFudyPeimE76kw8V4S+2A6GxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFDQzExNDlBMzk1MjIxMTc5NTMyRjRBMDdGQTE0NzQ5
NDE2NEJEQjAeFw0yMzA3MjQxMjU1MDBaFw0yNDA3MjIxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkY4M0MxRUZBMTVFNjEzM0Mw
RTc5OEQxN0YwQzBCREFERUIyRjYxNDREMTkzMjI0N0E5OURGRTA1MjlCNDYzNTU5
RDVDNTgwMjNBM0JCMzQ4Q0E0RTIzRUVEM0I4NEVDMUJFNEFDMjQyNDQxRTRCMzdB
MTA1QUM4NDJBOTZBOUVGMEJEMkZBODBBMkJGRjA2OTg2MjgyMzQ0ODk2MzdEQ0ZB
NTM0QkQxRTZGQzgyODkxMUNCRjEwOTQ0NDUwNDBERUMyOEQzNDBEQTk0NDZFQjNG
OUJENzcyNTBDNTM0RTZBNkFGOUNGMDJDOUFCQkM4NTkyOUZFQzM2MkM4NkI1RUY5
QUY5RjdEQzQzNUMxRTk2OEZCRkNDRDk5RTI3RUM4OUI5NENBQTUyQkYyMUVBQjYz
M0Q3QTE3QzNEQjE1QTgyOTJDQUFGQzM4Qjk4QzNFNjEyNzdEQTg3ODk4OTk0NkYx
OEMwMTRCQTY1NzNFQTg3MjY5MzQzOTk3OEM4ODBEMTUwOUIzQ0ZCMkNDOTgzNUVF
MUUxOTQwNzQzOTVBQkFBQjJFODEwQjAyRUFBNURDQjk2MjMxRjc3OTdBREQ3RDQ2
NEJDOTI1ODMxRDI1Q0VDRDk4QUU1OEJFMzIwRkE0OTkwNEI2QjI0QjcwOEJERTBB
Q0E4QUEzRUVERjZBMzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv4PB76FeYTPA55jRfwwL2t6y9hRNGTIkepnf4FKbRjVZ1cWAI6O7
NIyk4j7tO4TsG+SsJCRB5LN6EFrIQqlqnvC9L6gKK/8GmGKCNEiWN9z6U0vR5vyC
iRHL8QlERQQN7CjTQNqURus/m9dyUMU05qavnPAsmrvIWSn+w2LIa175r599xDXB
6Wj7/M2Z4n7Im5TKpSvyHqtjPXoXw9sVqCksqvw4uYw+YSd9qHiYmUbxjAFLplc+
qHJpNDmXjIgNFQmzz7LMmDXuHhlAdDlauqsugQsC6qXcuWIx93l63X1GS8klgx0l
zs2Yrli+Mg+kmQS2sktwi94Kyoqj7t9qNwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFhPpy9noig+chZEw3sE5LMmEj3fMB8GA1UdIwQYMBaAFEHMEUmjlSIReVMvSgf6
FHSUFkvbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JDQVBYVVZvZFNhMlZL
ak1YMVhhVEE5M3Z2dHI3TkJXYmZYZGQyQkxyS1F1LzEvNDFDQzExNDlBMzk1MjIx
MTc5NTMyRjRBMDdGQTE0NzQ5NDE2NEJEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MUNDMTE0OUEzOTUyMjExNzk1MzJGNEEwN0ZBMTQ3NDk0MTY0
QkRCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CQ0FQWFVWb2RTYTJWS2pNWDFY
YVRBOTN2dnRyN05CV2JmWGRkMkJMcktRdS8xLzM0MzUyZTMxMzYzMjJlMzEzMzMw
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4MzUzMTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LaKCMA0GCSqGSIb3DQEBCwUAA4IBAQA74trT4K16HGP1iqAqm8sATJuBFbX/jAG8
aocFVzFQEI/mpe5gOaLa4EbnQRoi6yqUKO0XZbtlDR8PU1k715yj1visC1iASzA4
RSx650Jk981v25B+G24VzSm6HAOJ85Tgsy6+ArYGCKooUw46R0JfP8MEJlJfk+Q9
1ydw5XX2R9K59zhcTO210f4vYSG9J+SvJGsLt8mij0hxAl3MnOAX7Kf79Xs/vY/F
B5Etcg0szQFE4fWWHOGeLsb17Eg3XOSp+O2Vigx23H/KGf0dRsUqYZr1sM5ePSj0
FFFfclYlV2xHIHH31TMlRIsZoyfJHFcN1Rvmr5NsI2K7nhDxyo52
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org