Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e322e302f32332d3233203d3e20323638333837.roa
File:                     34352e3136302e322e302f32332d3233203d3e20323638333837.roa (raw, json)
Hash identifier:          mW+VzrIfA9aox3PKh/ViMXk2F6Ymf1NcpfkxQy4u5m4=
Subject key identifier:   DA:97:5A:E5:BF:74:AF:9B:71:2D:47:65:3E:71:41:FB:CB:EA:8F:90
Certificate issuer:       /CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
Certificate serial:       7F284D0B326950E95E4FFAA8D8D34936089E2588
Authority key identifier: 49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e322e302f32332d3233203d3e20323638333837.roa
Signing time:             Mon 12 Jul 2021 20:25:09 +0000
ROA not before:           Mon 12 Jul 2021 20:20:09 +0000
ROA not after:            Mon 11 Jul 2022 20:25:09 +0000
asID:                     268387
IP address blocks:        45.160.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:4d:0b:32:69:50:e9:5e:4f:fa:a8:d8:d3:49:36:08:9e:25:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Validity
            Not Before: Jul 12 20:20:09 2021 GMT
            Not After : Jul 11 20:25:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:c3:71:56:b2:4f:bb:94:15:0d:02:25:4c:
                    d9:ad:69:d1:eb:fa:29:a5:df:05:5e:79:85:13:f9:
                    53:9c:bd:6e:7f:c7:7d:4f:b4:c4:da:a9:48:2b:ef:
                    71:86:a9:53:1c:fb:4c:79:0e:d9:7b:d0:1e:f8:0b:
                    db:d2:71:da:bf:cf:78:eb:2c:28:ca:6d:cc:2e:43:
                    ac:4c:47:29:06:ea:1c:af:ca:66:fb:24:25:ba:1c:
                    82:49:d3:1d:b4:03:fe:04:99:4e:99:82:e6:6e:14:
                    71:80:9a:ff:73:62:1a:89:63:5f:00:70:a2:df:45:
                    8b:4c:41:1a:8b:2b:28:28:33:08:24:d0:bb:01:7f:
                    8e:82:53:04:ba:88:19:99:c7:13:e8:fb:72:ee:05:
                    a1:a6:9c:f7:93:51:47:02:2d:4b:9f:dd:a5:fe:1c:
                    a7:f8:53:17:e7:35:d6:c3:95:0c:0c:66:ed:41:e6:
                    6b:24:5a:33:9c:d3:ab:00:94:61:e1:67:4b:8d:44:
                    be:31:0b:41:3c:2d:df:0b:fa:e0:08:05:f2:5f:73:
                    76:81:38:e2:77:0a:70:fc:d8:4f:51:9e:e7:f5:ec:
                    34:af:e0:83:d2:ff:83:99:1d:b7:0c:97:a6:f4:ad:
                    b7:11:c4:33:68:e6:64:d0:8c:a4:ac:f1:b4:de:b8:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:5A:E5:BF:74:AF:9B:71:2D:47:65:3E:71:41:FB:CB:EA:8F:90
            X509v3 Authority Key Identifier:
                keyid:49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e322e302f32332d3233203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:6e:a3:b4:c3:79:2d:3a:5f:c7:3f:7c:2f:5b:e9:b3:c1:
         92:ab:0b:40:6c:dc:40:73:12:5e:17:9a:91:13:37:51:c4:71:
         b8:6c:52:8c:19:dd:ac:7e:2c:fc:8a:e0:c6:4e:29:c3:a3:bb:
         0c:fb:ed:70:c0:66:1d:fe:db:8c:c2:8f:f1:04:19:bc:e5:c0:
         e4:18:85:71:f6:f2:be:bc:a9:35:9e:a0:5e:a3:41:2d:47:e5:
         91:bc:af:d6:eb:30:1d:1b:90:52:cd:e6:39:4f:cb:b5:b2:d2:
         ca:d6:45:5a:ed:ad:26:ad:6e:30:fc:42:f8:ae:08:86:e0:de:
         58:3d:3f:3f:c7:f0:e2:5d:25:2c:29:a5:69:12:fa:df:44:15:
         8b:d7:6c:10:8d:58:ae:3b:a1:76:68:d4:a4:84:d8:01:ed:35:
         d4:43:cd:2b:6c:fb:f3:85:ee:ac:b0:ae:fb:a7:35:1f:8e:b7:
         5f:d5:1c:a2:e6:e6:01:ee:68:e8:68:e5:ac:ce:30:bd:2c:21:
         a5:79:d8:57:2b:b2:bc:c2:a8:c9:6d:38:b8:25:c7:0f:68:6b:
         5f:17:3a:59:19:0d:a5:65:f2:05:ae:b8:a1:89:a6:e0:18:50:
         bb:2e:62:6a:6a:80:54:81:18:01:58:78:97:0b:92:c8:9f:da:
         2b:3d:f0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org