Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e372e302f32342d3234203d3e20323635323431.roa
File:                     3136382e302e372e302f32342d3234203d3e20323635323431.roa (raw, json)
Hash identifier:          WrhhCkeaDyLAWK9Iexc9IHv4QKa3A2r/jA+ADP04FqQ=
Subject key identifier:   5F:C1:71:08:89:D4:BB:05:9D:44:20:92:61:8F:3A:CB:A8:9B:DD:15
Certificate issuer:       /CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
Certificate serial:       4102AF4BC4850D8C6BED3819F0814F6A1472EBC6
Authority key identifier: 59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e372e302f32342d3234203d3e20323635323431.roa
Signing time:             Wed 23 Feb 2022 22:59:41 +0000
ROA not before:           Wed 23 Feb 2022 22:54:41 +0000
ROA not after:            Wed 22 Feb 2023 22:59:41 +0000
asID:                     265241
IP address blocks:        168.0.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:02:af:4b:c4:85:0d:8c:6b:ed:38:19:f0:81:4f:6a:14:72:eb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B08A61D0AC559F86B98780FBFB3EEB7699B2EB
        Validity
            Not Before: Feb 23 22:54:41 2022 GMT
            Not After : Feb 22 22:59:41 2023 GMT
        Subject: CN=5FC1710889D4BB059D442092618F3ACBA89BDD15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:07:37:9c:f0:a4:be:23:aa:86:77:0a:ea:76:
                    d0:56:42:a9:b9:ba:55:fc:b1:6b:bb:1d:10:a0:e3:
                    d6:d0:f5:8f:26:69:2e:af:75:27:ea:96:fb:6d:94:
                    62:a0:60:4e:cc:dc:77:59:a8:78:ba:2e:a9:a8:fb:
                    22:f0:14:e9:3c:72:ce:54:f0:2e:2c:60:ae:95:a4:
                    2e:88:be:07:0b:ec:f8:ab:00:45:16:c0:c0:4e:4c:
                    d5:04:02:44:d5:1a:87:f8:c2:c0:65:1f:35:9c:05:
                    c5:a7:76:9d:a5:28:23:d3:2e:e5:37:74:c8:ba:b1:
                    46:e0:40:22:81:1e:2e:a9:4a:00:12:3f:29:5f:d4:
                    5a:0d:11:e1:12:7f:30:b6:71:b8:a5:c1:37:69:cc:
                    72:bd:bb:e4:5e:e1:a9:ae:3c:f1:c1:35:89:0b:ae:
                    26:69:31:b8:af:bf:8d:43:82:f4:0a:2e:be:b3:c9:
                    f7:7e:91:b2:3d:2e:c3:13:89:a7:97:02:ea:3f:a4:
                    e9:91:14:30:42:23:b3:3a:b4:59:be:6e:e9:19:38:
                    9d:0e:4d:16:ec:8c:44:df:d5:62:4e:67:8b:6d:31:
                    d8:c9:79:9b:3c:5a:43:81:5c:ac:7f:16:b0:af:55:
                    bd:42:4b:53:26:3e:ec:d2:f3:fe:1d:ff:21:2a:e1:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:71:08:89:D4:BB:05:9D:44:20:92:61:8F:3A:CB:A8:9B:DD:15
            X509v3 Authority Key Identifier:
                keyid:59:B0:8A:61:D0:AC:55:9F:86:B9:87:80:FB:FB:3E:EB:76:99:B2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59B08A61D0AC559F86B98780FBFB3EEB7699B2EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/3136382e302e372e302f32342d3234203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:94:a1:53:1b:15:f8:38:5e:8c:61:d3:78:19:7f:8d:8d:82:
         3f:c6:a0:62:ac:63:ff:d3:33:0c:45:bb:62:4c:dc:50:3d:bb:
         7d:5f:ce:37:4f:60:04:e0:c6:7d:f5:5f:0e:af:c0:67:2f:b0:
         ca:a5:63:74:a4:38:9a:e1:19:d6:bf:44:8e:ff:df:e0:de:2d:
         c0:cf:6f:dd:d1:ca:8b:fd:3c:f6:5a:2c:c1:95:ca:b2:f9:36:
         75:ea:06:1d:ac:11:b2:f4:de:b1:9f:f3:b2:e6:b4:b9:67:d4:
         83:c0:b5:55:21:f0:27:e5:32:60:ee:49:34:a5:70:9b:bd:ea:
         c0:10:13:7e:05:9f:6a:14:19:c6:23:cf:aa:98:51:d7:b0:e3:
         44:2a:d6:98:10:0c:e6:b4:56:a4:04:a1:57:69:cf:af:21:c5:
         54:81:f3:5c:b8:f8:0f:dc:d9:d4:a5:c3:cb:f9:54:d7:f3:37:
         f4:ec:dc:76:a5:7c:f9:dd:fe:c7:0e:3f:f7:77:73:19:f4:0e:
         4e:ac:0d:58:de:d0:84:f6:76:7c:c5:74:b4:32:ee:f4:e4:f1:
         32:78:2a:e9:20:ab:ed:f6:ce:ce:fc:ba:a8:3d:ce:37:e1:34:
         5b:02:96:ee:dd:c3:cd:fd:05:ba:34:53:a5:7e:07:56:07:c3:
         76:5c:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-fra.rpki-client.org