Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/34352e3137392e3231362e302f32322d3232203d3e20323639313933.roa
File:                     34352e3137392e3231362e302f32322d3232203d3e20323639313933.roa (raw, json)
Hash identifier:          AlJpwmIdomVgzGkyvwMMTWIOKb0Vi0PfEMmFNeio82Q=
Subject key identifier:   BD:4E:2A:23:FF:88:6F:47:10:B4:3B:3D:6A:F1:E5:53:B0:62:FA:5F
Certificate issuer:       /CN=7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D
Certificate serial:       3514C790C0F6ED1257DF27075B78C8DFFBCEDB1F
Authority key identifier: 7E:1C:9D:FB:F9:56:AE:58:E2:99:A7:37:FB:B5:A0:A6:D9:B6:E0:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/34352e3137392e3231362e302f32322d3232203d3e20323639313933.roa
Signing time:             Tue 12 Oct 2021 14:20:00 +0000
ROA not before:           Tue 12 Oct 2021 14:15:00 +0000
ROA not after:            Tue 11 Oct 2022 14:20:00 +0000
asID:                     269193
IP address blocks:        45.179.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:14:c7:90:c0:f6:ed:12:57:df:27:07:5b:78:c8:df:fb:ce:db:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D
        Validity
            Not Before: Oct 12 14:15:00 2021 GMT
            Not After : Oct 11 14:20:00 2022 GMT
        Subject: CN=3082010A0282010100D10A20AC340885E6C40386EEB98D737C22654B403BF131B18C8F0397E8ED22FAC796DAB49B1B09AA9D0649C153436367050E145AE9399883755AAB301CB0AE04CF2BA6E121D70E4F2EA9342EC0886E2E7FF2CFDC28EE7D9F77A87B909FA5E0B77B836782CC1801C9B60C736C0E6A13380BD5B0CAC892514ECD1AF1E1CBF32D197C28D55C794A7333F93BD8067A80A824442DFDAED939932E9DD2A05565D11C91D2681052508A54653F5B337AD8354911CD2B8B43E55215B8CB629D84E0E0F9C64724093920767595D875F88D98C0EA240AFBDA7D7E9B2E95D1C89C037A92BD7A37AA25BF9DBBA52E158F106EC4DF34C774ECD1691C5B2C0295125A4DA058FF8B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:20:ac:34:08:85:e6:c4:03:86:ee:b9:8d:
                    73:7c:22:65:4b:40:3b:f1:31:b1:8c:8f:03:97:e8:
                    ed:22:fa:c7:96:da:b4:9b:1b:09:aa:9d:06:49:c1:
                    53:43:63:67:05:0e:14:5a:e9:39:98:83:75:5a:ab:
                    30:1c:b0:ae:04:cf:2b:a6:e1:21:d7:0e:4f:2e:a9:
                    34:2e:c0:88:6e:2e:7f:f2:cf:dc:28:ee:7d:9f:77:
                    a8:7b:90:9f:a5:e0:b7:7b:83:67:82:cc:18:01:c9:
                    b6:0c:73:6c:0e:6a:13:38:0b:d5:b0:ca:c8:92:51:
                    4e:cd:1a:f1:e1:cb:f3:2d:19:7c:28:d5:5c:79:4a:
                    73:33:f9:3b:d8:06:7a:80:a8:24:44:2d:fd:ae:d9:
                    39:93:2e:9d:d2:a0:55:65:d1:1c:91:d2:68:10:52:
                    50:8a:54:65:3f:5b:33:7a:d8:35:49:11:cd:2b:8b:
                    43:e5:52:15:b8:cb:62:9d:84:e0:e0:f9:c6:47:24:
                    09:39:20:76:75:95:d8:75:f8:8d:98:c0:ea:24:0a:
                    fb:da:7d:7e:9b:2e:95:d1:c8:9c:03:7a:92:bd:7a:
                    37:aa:25:bf:9d:bb:a5:2e:15:8f:10:6e:c4:df:34:
                    c7:74:ec:d1:69:1c:5b:2c:02:95:12:5a:4d:a0:58:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:2A:23:FF:88:6F:47:10:B4:3B:3D:6A:F1:E5:53:B0:62:FA:5F
            X509v3 Authority Key Identifier:
                keyid:7E:1C:9D:FB:F9:56:AE:58:E2:99:A7:37:FB:B5:A0:A6:D9:B6:E0:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E1C9DFBF956AE58E299A737FBB5A0A6D9B6E04D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfbAA81sCyYPqAxgjrCJWmr6vy6tCX2iSi77nHLdqRD6/0/34352e3137392e3231362e302f32322d3232203d3e20323639313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:cb:9f:85:36:99:b6:a1:70:db:f0:ec:9f:dd:d3:2d:73:6e:
         d3:96:1b:7e:79:ad:56:60:b5:e2:e2:36:db:fa:d5:40:f0:bb:
         07:e9:47:4d:39:76:8b:d0:4a:f7:c9:55:a6:1c:60:08:22:98:
         5a:ba:34:d0:83:fe:6b:0f:04:f7:c3:27:d1:67:6d:75:a9:28:
         b0:2e:26:c5:30:1d:6a:fd:80:d9:77:3a:5f:ec:0a:d4:ce:93:
         ac:fa:0a:f6:32:a2:ee:e6:bd:0a:6b:cf:ec:5e:45:5f:30:ee:
         73:f2:c1:09:1a:71:f2:1f:ef:6a:64:d7:81:f4:58:37:9a:8a:
         66:85:a9:a0:f2:43:3e:db:76:b9:3a:18:43:05:6d:29:6d:4b:
         bb:85:8b:7a:3d:d4:29:de:96:33:1d:68:d4:41:4b:ad:02:db:
         df:70:45:a1:f1:dc:5e:21:6a:82:50:ba:13:a5:d2:20:ca:39:
         c8:d5:db:40:e9:e9:ef:73:00:c8:f0:8a:4e:c9:ed:d0:b4:37:
         a7:4b:ba:a6:5f:37:55:c4:6c:b1:5e:76:f6:0f:e4:13:5b:ca:
         6e:cd:04:21:eb:8c:77:80:48:a0:98:e8:62:26:b9:21:fc:ac:
         a0:3e:c8:77:67:4a:9f:47:f5:a5:4a:8e:e4:4c:b2:de:a5:9e:
         8a:55:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org