Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e362e302f32332d3233203d3e20323635323431.roa
File:                     3136382e302e362e302f32332d3233203d3e20323635323431.roa (raw, json)
Hash identifier:          tfUtXI+Vlrfb7qwpfZqIO8RofF/YZgOqn0BH2er5ZC4=
Subject key identifier:   98:47:19:CA:C7:86:0C:52:CA:82:6F:12:F5:57:80:30:11:FE:E3:1B
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       245636DFCE1358A8FBBA6E10079A538DE9B6C19C
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e362e302f32332d3233203d3e20323635323431.roa
Signing time:             Tue 17 May 2022 23:48:06 +0000
ROA not before:           Tue 17 May 2022 23:43:06 +0000
ROA not after:            Tue 16 May 2023 23:48:06 +0000
asID:                     265241
IP address blocks:        168.0.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:56:36:df:ce:13:58:a8:fb:ba:6e:10:07:9a:53:8d:e9:b6:c1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: May 17 23:43:06 2022 GMT
            Not After : May 16 23:48:06 2023 GMT
        Subject: CN=984719CAC7860C52CA826F12F557803011FEE31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2e:d3:d6:66:70:5a:61:b1:7e:b6:fa:4f:99:
                    68:fc:6f:4b:8f:57:50:81:c1:66:1c:21:bf:c9:90:
                    1f:32:cb:f3:27:17:c9:4a:0d:dd:5d:15:d2:8e:19:
                    de:8e:ed:3a:36:3c:ef:27:55:ac:cb:be:09:f2:25:
                    c5:bc:f6:2b:89:41:ea:f1:38:b7:ca:eb:83:28:b3:
                    bf:18:cb:0c:5c:e8:7a:25:31:0b:9b:a6:eb:3d:71:
                    ad:16:65:8d:d8:38:0f:4c:84:22:75:84:9d:2c:5c:
                    90:87:1e:90:c2:46:03:24:6b:69:06:9d:e7:ed:d8:
                    75:30:c3:61:13:d7:8a:95:2a:2d:e1:08:e5:12:b4:
                    66:d6:98:f7:51:d3:4f:bc:6b:0f:c2:fa:0c:ec:45:
                    4f:d1:d7:c4:39:d2:eb:da:84:ff:39:f2:41:1e:66:
                    f2:dc:39:cc:74:5f:7f:07:6c:6c:73:0b:84:61:bf:
                    ea:5f:15:e5:9c:ab:45:17:71:d6:e1:b1:96:08:48:
                    5f:06:7d:a9:32:30:35:e7:c7:79:91:4f:69:68:cb:
                    a2:ed:1c:56:21:fe:0f:d3:d9:e6:c3:c0:62:7c:4c:
                    97:c4:89:96:b2:5b:b6:ec:98:0f:a2:1b:a8:48:cb:
                    5f:b4:c4:3c:d4:42:a8:31:70:c6:f7:76:2f:6d:fd:
                    dc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:47:19:CA:C7:86:0C:52:CA:82:6F:12:F5:57:80:30:11:FE:E3:1B
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e362e302f32332d3233203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:04:7d:87:e0:2d:2e:38:4a:1b:7c:aa:f4:d4:b1:1f:e3:18:
         a2:07:ab:17:36:01:12:93:44:5e:f4:65:f2:7e:d1:4c:dc:d3:
         5a:67:b0:10:83:7f:c7:5f:0e:7b:82:04:c0:93:f6:5b:6b:fc:
         b9:0a:33:99:87:fc:78:cf:70:bc:24:e9:cb:14:c9:dc:a1:e3:
         dc:bd:37:0d:ae:33:6a:2f:5d:37:e0:7b:1d:05:5f:69:75:34:
         a3:b4:07:78:c4:7e:5e:7a:f7:5e:2f:a4:be:ea:e1:a3:1f:67:
         df:6a:50:05:fb:a1:55:86:c1:d2:a3:c3:b9:75:29:9a:f7:55:
         94:f8:1d:b2:fd:ab:9a:4d:37:d3:46:4d:a5:c1:7b:42:2a:0d:
         fd:54:d7:32:87:34:62:ba:f3:9d:ac:5b:54:4b:da:4b:24:5a:
         5d:00:98:ef:9d:74:ef:ea:ff:2a:eb:26:2c:be:ea:62:0d:94:
         e4:47:0a:51:e6:25:67:35:13:3f:f5:4a:b2:7f:4c:6c:49:66:
         55:ed:a6:82:ec:59:88:1e:0a:ff:ec:0d:d3:8e:50:d4:7d:55:
         e7:cb:47:7f:5a:74:1a:c4:ba:0f:1b:15:ae:a4:3a:03:5c:31:
         f7:f2:3e:76:2f:11:06:09:58:d4:1c:60:37:1b:c0:8c:cc:10:
         e9:5f:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org