Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e322e302f32342d3234203d3e20323638333837.roa
File:                     34352e3136302e322e302f32342d3234203d3e20323638333837.roa (raw, json)
Hash identifier:          gRIpg5VkOJRFmMa8GwimBVvmIz2ysbdnsD4JRu+4hbY=
Subject key identifier:   C8:42:89:3F:F5:B2:90:97:BA:E0:E2:5F:41:11:E7:25:0A:C4:36:E0
Certificate issuer:       /CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
Certificate serial:       23BBA670ED00C702420C5EF8FC5DBAE5DF6A8A4F
Authority key identifier: 49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e322e302f32342d3234203d3e20323638333837.roa
Signing time:             Mon 12 Jul 2021 20:25:09 +0000
ROA not before:           Mon 12 Jul 2021 20:20:09 +0000
ROA not after:            Mon 11 Jul 2022 20:25:09 +0000
asID:                     268387
IP address blocks:        45.160.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bb:a6:70:ed:00:c7:02:42:0c:5e:f8:fc:5d:ba:e5:df:6a:8a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493BD81D90C34CC49537D9CE366E9059D99EBD2D
        Validity
            Not Before: Jul 12 20:20:09 2021 GMT
            Not After : Jul 11 20:25:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:9f:3d:9f:d6:ca:4a:b4:f9:35:36:a4:c2:
                    ac:fe:b4:53:7c:6a:05:d9:52:8f:54:4a:24:15:60:
                    ce:54:eb:eb:ca:19:33:d9:80:44:76:06:0a:66:fa:
                    d3:19:fc:e2:67:52:66:88:fc:18:18:51:63:93:5a:
                    3d:7b:58:a3:a0:3f:2e:bc:66:6d:3f:9d:13:a2:4a:
                    0d:4f:ca:e5:36:b2:35:c7:81:77:3a:ce:23:86:ee:
                    32:42:69:10:d9:44:86:dc:62:fd:d0:75:b9:1f:98:
                    55:dc:27:2e:62:50:b9:dc:2f:43:5d:6a:ed:82:59:
                    a2:f7:56:aa:4b:1b:48:dc:6f:b6:72:bc:fa:83:7d:
                    60:45:1a:7b:6d:8f:bb:cd:c0:ba:17:a6:6f:23:0a:
                    63:02:a7:91:9d:a4:16:2b:b0:48:72:7a:eb:65:c8:
                    da:6a:3b:14:28:e5:bd:12:22:32:bd:5d:cd:8d:c5:
                    ee:3b:4b:a4:f6:bd:33:09:2f:ac:39:85:c6:59:52:
                    e2:fe:7d:67:ce:7e:da:91:1d:8d:0c:e7:d2:cd:29:
                    d9:cd:3c:a9:6a:cd:dd:65:20:a6:12:39:c1:80:a2:
                    60:e7:66:5d:3e:0a:fe:24:d6:34:ae:00:28:cd:1c:
                    51:97:04:4e:a8:74:5c:88:90:dc:5d:62:b2:da:5a:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:42:89:3F:F5:B2:90:97:BA:E0:E2:5F:41:11:E7:25:0A:C4:36:E0
            X509v3 Authority Key Identifier:
                keyid:49:3B:D8:1D:90:C3:4C:C4:95:37:D9:CE:36:6E:90:59:D9:9E:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/493BD81D90C34CC49537D9CE366E9059D99EBD2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFg5NtmjML3dYPVMKdHSoLVDcUC4ykB8sRpjQXqibACM/0/34352e3136302e322e302f32342d3234203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:de:4f:37:d2:5f:59:e2:bc:b4:1b:e0:70:f6:ee:1a:b3:b2:
         49:7a:45:46:71:60:11:13:00:28:d5:c5:5b:0d:68:9c:85:f5:
         c5:b2:37:c9:4d:41:f0:73:e5:a4:c5:b2:8e:3f:f2:f0:e5:cd:
         84:52:ec:34:50:01:2a:9b:f1:d1:ad:d4:8e:55:9c:ff:13:17:
         23:3d:54:38:4f:9b:ec:32:a5:37:ef:e3:54:fb:2b:dd:6d:02:
         cc:af:16:bd:c3:5b:aa:98:41:f6:53:b0:9e:86:c3:e1:36:32:
         bd:ab:61:65:12:bd:13:c6:93:50:12:a0:6a:15:65:7d:44:48:
         74:20:d5:e0:5b:6a:73:41:6b:0d:01:f2:81:dc:4e:a2:0c:d9:
         bb:ad:c6:d5:60:ac:2b:05:42:30:98:80:ee:b2:ef:37:ac:4d:
         4f:70:9f:5c:c5:21:63:39:04:b3:08:e3:2f:a6:1c:da:1b:5f:
         31:25:be:8d:1d:11:e7:c4:0a:68:7a:59:24:c6:bf:2f:e0:6d:
         c2:2a:20:56:17:57:2b:5f:e3:d9:88:3d:5c:1f:14:2f:bf:5f:
         92:51:07:c4:81:32:47:6a:15:1d:72:d6:b6:d6:49:b2:3b:19:
         4f:d1:40:1c:8b:6f:67:c1:2f:95:fd:e0:47:5d:c9:26:60:30:
         1d:37:45:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org