Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          QLqoRrF9ZQngiwbzXIP0O0BLdI3ezloZNE1iCvFpAwc=
Subject key identifier:   11:31:61:E1:0C:10:3A:D8:D3:BC:CB:66:2E:88:1D:22:F6:38:E4:A7
Certificate issuer:       /CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
Certificate serial:       5CDB76168AB48630FFDD94F36601829499412640
Authority key identifier: 57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 25 Jul 2023 19:13:55 +0000
ROA not before:           Tue 25 Jul 2023 19:08:55 +0000
ROA not after:            Tue 23 Jul 2024 19:13:55 +0000
asID:                     267513
IP address blocks:        168.194.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:db:76:16:8a:b4:86:30:ff:dd:94:f3:66:01:82:94:99:41:26:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
        Validity
            Not Before: Jul 25 19:08:55 2023 GMT
            Not After : Jul 23 19:13:55 2024 GMT
        Subject: CN=113161E10C103AD8D3BCCB662E881D22F638E4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:dd:c5:c1:d9:88:d6:7f:7c:a9:3c:99:43:
                    ac:0d:9a:3a:7d:5c:db:61:df:c1:84:98:71:b2:54:
                    ca:5f:e8:06:97:1b:04:4f:09:01:81:a3:31:b8:29:
                    24:25:65:c3:48:49:bf:90:64:0b:da:c6:c9:46:43:
                    cd:f8:cd:2d:02:69:b2:43:76:52:1c:d2:7a:d2:4f:
                    c1:d9:20:38:69:da:b0:42:29:d4:8c:04:67:a9:01:
                    0f:49:0e:3d:99:27:d0:8a:ab:46:bb:81:a4:89:f2:
                    82:2b:10:87:0d:05:c6:eb:3c:b4:75:3f:16:32:d0:
                    41:92:2a:b2:d5:bd:ff:42:56:eb:d3:a6:c1:c9:3b:
                    ca:81:8c:e6:c1:83:2b:e4:b3:76:74:34:a0:d2:06:
                    a0:4c:93:c7:d2:6a:eb:3b:14:41:21:85:ec:c3:f7:
                    34:6c:c8:18:56:fc:b0:ac:d3:ce:04:3f:cf:4f:35:
                    6b:5f:ed:d3:a4:21:87:ee:47:98:0f:be:47:69:0e:
                    a4:ec:9d:f8:2b:30:df:13:e7:69:9c:9d:a6:3f:28:
                    40:f2:32:cc:c3:ce:c5:1b:78:2e:1d:80:c7:94:36:
                    30:73:76:f4:07:cc:f2:32:55:89:e8:de:33:ad:c2:
                    e6:dd:14:6e:ec:a1:25:e7:89:0c:20:36:48:28:24:
                    c7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:31:61:E1:0C:10:3A:D8:D3:BC:CB:66:2E:88:1D:22:F6:38:E4:A7
            X509v3 Authority Key Identifier:
                keyid:57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35372e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:94:97:d2:59:a2:43:49:80:34:45:d8:5c:e8:7c:79:2e:e9:
         dc:69:8d:79:97:bf:f3:a0:72:2b:ea:72:9f:22:cb:a3:68:17:
         33:fb:c6:ef:86:45:af:af:f7:8f:0b:cc:11:ac:e5:08:c6:5c:
         86:28:57:40:bb:a1:a6:83:c7:0d:66:60:ce:64:32:1c:ff:5e:
         c8:7e:80:2d:0a:1a:1d:fe:87:a5:fb:a1:fc:1e:3d:27:f6:5c:
         f2:64:d7:c5:72:de:85:9c:67:43:47:05:90:e3:55:8d:1f:70:
         c4:82:29:e6:f7:70:02:69:72:0f:6b:10:9a:c8:0c:b5:e5:9c:
         55:a5:c7:6f:0e:a6:40:9b:53:6d:df:5b:f9:3e:1e:49:2d:cd:
         17:00:dc:b4:f3:94:f5:9d:77:76:c3:bf:85:86:2b:54:b4:bb:
         c9:0a:bb:15:1d:0d:93:60:ff:2b:1e:c2:c5:29:ee:76:20:54:
         f2:db:24:7a:f8:c0:bb:c1:46:90:bb:fe:6a:e5:a9:d9:bd:44:
         a7:3e:de:fa:47:b4:ca:87:2b:1d:0c:9b:8b:ff:c8:c8:fb:b9:
         72:1f:37:1a:8c:17:d6:f9:9f:ce:4e:9f:45:b9:ba:91:4b:46:
         3f:c3:0b:9f:13:8f:08:fc:f5:7c:ab:42:9b:b2:7c:c9:dd:a4:
         58:5f:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org