Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e312e302f32342d3234203d3e20323638333837.roa
File:                     34352e3136302e312e302f32342d3234203d3e20323638333837.roa (raw, json)
Hash identifier:          bXDLBChgqXF9usb23x5/JpcH2Q/1+/Bi0jb22BQGbSU=
Subject key identifier:   56:1D:73:04:D2:10:79:36:CE:7C:B6:CA:AC:EF:01:44:68:55:7D:58
Certificate issuer:       /CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
Certificate serial:       1658D136F876460C856B36C539C7C413A6DDFDF6
Authority key identifier: 49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e312e302f32342d3234203d3e20323638333837.roa
Signing time:             Mon 12 Jul 2021 20:25:08 +0000
ROA not before:           Mon 12 Jul 2021 20:20:08 +0000
ROA not after:            Mon 11 Jul 2022 20:25:08 +0000
asID:                     268387
IP address blocks:        45.160.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:58:d1:36:f8:76:46:0c:85:6b:36:c5:39:c7:c4:13:a6:dd:fd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Validity
            Not Before: Jul 12 20:20:08 2021 GMT
            Not After : Jul 11 20:25:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:ac:02:b0:5b:c7:37:a4:ce:b5:57:2e:8d:
                    88:17:1c:a1:24:77:d9:91:f5:c4:0e:a0:00:d4:4d:
                    df:9d:7b:c8:69:a4:07:ac:6c:9a:28:3b:2e:70:18:
                    02:62:c5:4c:91:24:b0:59:81:0f:06:f9:29:22:cf:
                    74:00:19:86:2d:f5:f2:d0:93:93:d9:43:53:39:92:
                    65:7d:cd:85:af:9b:a4:81:ac:14:c5:25:4b:64:2a:
                    38:15:be:99:0c:f8:d2:0d:89:00:67:83:9a:94:e0:
                    5d:b2:f9:5c:b8:ca:a8:13:12:5f:b1:a1:62:49:20:
                    8a:3d:38:19:16:d1:17:da:78:d0:c5:dd:ad:84:60:
                    f9:5e:e1:cf:a6:60:77:44:64:33:8b:d1:4a:6d:d0:
                    d5:fc:54:1d:f8:7a:af:a0:e5:e4:52:a4:e8:4d:03:
                    3b:4e:0e:1b:9d:cc:41:3b:e1:bf:43:51:a8:72:0e:
                    bc:a1:67:74:f7:5a:af:af:94:08:a6:c1:eb:6c:97:
                    b5:50:2d:df:6e:2f:bd:d9:72:fb:e4:71:8b:4c:f1:
                    24:03:bc:be:12:05:9a:2d:c0:16:b9:d6:fa:4a:00:
                    0e:e3:76:96:a5:b6:a4:df:24:c4:68:a6:f8:d4:a6:
                    26:cf:03:15:93:60:36:f8:5c:dc:42:a9:ec:5f:14:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1D:73:04:D2:10:79:36:CE:7C:B6:CA:AC:EF:01:44:68:55:7D:58
            X509v3 Authority Key Identifier:
                keyid:49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e312e302f32342d3234203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:0a:41:8e:f7:98:b8:cc:88:c0:91:47:f2:56:42:7d:ff:
         a2:e4:05:d1:25:8d:98:f1:7b:e8:75:16:b6:05:f8:66:a1:42:
         cd:93:9e:b4:0e:6f:4b:50:8c:2b:ba:2c:4e:60:78:14:c6:a5:
         cc:b5:d2:f7:01:1b:1b:b4:ec:17:89:2b:be:8b:bb:23:42:ec:
         43:64:21:c8:51:b8:0a:eb:ee:aa:a6:11:6c:56:60:24:a0:b1:
         0b:c3:db:00:be:df:01:64:80:a8:6d:e4:2d:d7:e0:b8:a1:98:
         aa:0e:59:66:15:22:da:6c:0e:00:27:43:e9:48:61:06:33:71:
         87:24:46:d4:f8:b6:9c:2b:ea:c8:25:fd:e8:85:0d:7b:e7:4e:
         89:7f:0e:6a:7a:9f:14:ca:ef:ca:6b:56:a7:25:2b:ea:67:7c:
         56:3f:ee:f6:ad:88:1e:6b:27:26:c0:c3:e4:5d:b2:0f:46:2d:
         b9:cd:85:67:dc:72:d4:4e:e1:c1:8a:82:e3:b1:ea:72:5e:d2:
         c8:49:b7:24:ef:af:08:4e:64:e2:30:0f:bb:6c:fa:55:69:a4:
         10:ed:86:94:16:89:a7:a5:44:5a:8f:5e:8e:21:71:cc:1e:1e:
         ff:47:35:96:5c:b3:fa:0d:c7:98:ad:f7:54:80:63:4d:74:d5:
         cc:e4:38:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org