Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e302e302f32332d3233203d3e20323638333837.roa
File:                     34352e3136302e302e302f32332d3233203d3e20323638333837.roa (raw, json)
Hash identifier:          bOmy1hZCQIbIDtRnJzMMfnFWIsge2rufxDj3lIvfZkU=
Subject key identifier:   C7:8C:17:E5:A3:58:DE:DB:BC:94:B9:EC:D9:60:4A:77:E6:1D:9C:21
Certificate issuer:       /CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
Certificate serial:       1913F9A16534E264FE0842733111D95A32564D9C
Authority key identifier: 49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e302e302f32332d3233203d3e20323638333837.roa
Signing time:             Mon 12 Jul 2021 20:25:09 +0000
ROA not before:           Mon 12 Jul 2021 20:20:09 +0000
ROA not after:            Mon 11 Jul 2022 20:25:09 +0000
asID:                     268387
IP address blocks:        45.160.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:13:f9:a1:65:34:e2:64:fe:08:42:73:31:11:d9:5a:32:56:4d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Validity
            Not Before: Jul 12 20:20:09 2021 GMT
            Not After : Jul 11 20:25:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:91:35:bf:40:ff:ac:e2:7b:75:5c:58:4f:
                    b5:1c:60:b2:78:45:5f:d6:41:39:c6:04:78:33:fe:
                    e5:91:10:e8:b9:c1:d2:a2:cd:8a:1c:99:2b:c9:9a:
                    2a:bd:54:f5:f6:f3:91:9f:2c:bb:01:c4:b0:be:64:
                    d2:29:b0:4a:2f:4c:43:d7:30:7d:ea:a1:8b:27:19:
                    7e:3d:f9:82:32:5d:f8:a1:33:67:51:22:e5:bc:6b:
                    6b:d0:e9:aa:90:06:84:c1:b5:00:43:54:1a:28:9e:
                    a8:0f:9f:09:fb:cd:43:fe:b2:2e:ee:0a:60:c2:2e:
                    ce:00:6a:8b:13:95:87:97:af:fe:4a:91:6c:7f:15:
                    1c:45:ed:40:b1:46:a3:08:e6:7d:a1:26:24:42:56:
                    92:79:58:b6:50:f4:45:84:56:c5:17:c4:ff:a1:29:
                    c7:3c:32:04:4e:cd:6b:da:15:5c:1b:fe:94:13:e8:
                    f1:74:e9:e4:99:ce:a2:d6:58:3b:4c:68:77:73:02:
                    a5:ac:ff:6f:fd:ea:6b:a8:dd:67:8f:49:6c:07:c1:
                    7a:e7:5f:98:41:d3:92:d9:ef:01:c9:e4:89:89:3c:
                    1c:f7:77:7a:51:2e:24:d2:bc:03:52:47:37:bf:e1:
                    c7:06:74:14:26:a6:03:47:9c:52:a2:bb:b6:dc:31:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:17:E5:A3:58:DE:DB:BC:94:B9:EC:D9:60:4A:77:E6:1D:9C:21
            X509v3 Authority Key Identifier:
                keyid:49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e302e302f32332d3233203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:01:36:86:b7:67:47:f8:3a:ad:c1:2e:56:91:02:ad:97:15:
         50:c5:26:ca:82:90:8b:3f:3f:cf:9f:6f:7f:ec:3f:05:04:38:
         25:ea:2c:9d:49:7d:df:fa:b3:fb:5d:0b:b2:a3:68:cd:06:e2:
         96:9f:e9:23:8f:d5:d0:db:18:97:b8:3c:4f:30:9c:02:dd:81:
         a2:af:10:82:d0:3b:d1:c2:6e:ec:d8:d9:4b:4e:53:06:2f:11:
         7d:1b:79:0c:bd:b7:96:57:9e:75:c8:a8:a0:7b:11:59:2f:03:
         c4:28:2e:81:1e:2d:71:dc:01:d8:33:c8:f3:21:cf:26:8c:48:
         a7:77:8b:20:2a:ac:f0:d4:fd:43:2c:ed:ba:2a:75:d8:59:1e:
         70:45:2d:6b:18:f1:8c:bf:a7:5f:1a:44:28:af:40:71:c2:8e:
         90:49:de:cb:67:23:f5:31:51:d0:b4:bd:76:a0:f2:73:3c:31:
         84:4b:3b:db:0e:da:98:98:de:16:62:29:05:d5:55:a5:f6:3c:
         9f:b2:15:05:5f:22:fc:2f:9d:91:c3:a8:0a:1b:44:ec:8a:60:
         8a:57:f1:ba:73:61:33:07:d8:9b:55:fb:02:36:b1:8e:41:4e:
         19:b6:42:13:37:13:da:89:b6:a1:c4:73:26:ca:f0:75:19:c5:
         29:47:23:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org