Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32322d3232203d3e20323634353632.roa
File:                     3136382e3233322e38342e302f32322d3232203d3e20323634353632.roa (raw, json)
Hash identifier:          S9Ux0LbKbFhH1cDB1Bw6rk/AQETYTFz/bmnfqbMNqSg=
Subject key identifier:   3D:E3:50:4B:56:A4:B0:4C:52:5C:F9:2A:21:8D:E4:66:BA:D6:69:34
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       1B133C149351EC98D76D0A16C0325B62A1E3A522
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32322d3232203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:32 +0000
ROA not before:           Fri 05 May 2023 19:10:32 +0000
ROA not after:            Fri 03 May 2024 19:15:32 +0000
asID:                     264562
IP address blocks:        168.232.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:13:3c:14:93:51:ec:98:d7:6d:0a:16:c0:32:5b:62:a1:e3:a5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:32 2023 GMT
            Not After : May  3 19:15:32 2024 GMT
        Subject: CN=3DE3504B56A4B04C525CF92A218DE466BAD66934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f9:3b:59:97:d3:ce:79:a0:e2:b4:45:f2:0e:
                    85:fa:67:37:3d:eb:ec:3e:1a:47:81:75:d3:33:d3:
                    a6:46:cd:91:23:59:52:7a:da:f9:2b:f4:c7:de:04:
                    80:55:1f:3a:ca:45:a6:05:2b:c2:e1:d8:ce:32:a1:
                    e0:c8:19:60:e3:94:fa:7e:99:59:80:30:61:dd:c4:
                    09:a9:f6:cc:e0:2f:0c:ca:45:4d:9f:62:b3:c5:74:
                    7e:bf:f3:d8:f7:e6:7a:04:c9:f4:12:38:9e:f7:0e:
                    b7:65:d3:98:52:1d:02:fa:ff:2e:6d:a9:2c:39:63:
                    b8:75:bc:09:77:f5:9c:c2:0f:33:ab:d6:05:89:e9:
                    4a:a0:fb:10:ac:6e:d6:80:33:54:e8:df:a0:25:12:
                    de:a8:24:49:1b:1a:21:bb:2c:c1:08:d7:ef:e2:21:
                    aa:97:da:75:60:63:91:fb:5e:23:b1:6d:5c:a3:a1:
                    36:86:11:18:a4:d2:be:ce:b1:d7:d7:19:51:65:2c:
                    66:9a:00:0e:cb:8b:9c:e1:02:6a:cc:5e:49:6d:17:
                    4c:2f:4e:ca:24:5b:27:15:ff:29:33:20:b6:b3:e1:
                    09:38:14:d1:ed:f3:07:3b:a7:96:a4:eb:07:cb:49:
                    5b:bc:84:42:2c:ee:fa:d8:11:a5:ae:09:54:82:7a:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E3:50:4B:56:A4:B0:4C:52:5C:F9:2A:21:8D:E4:66:BA:D6:69:34
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38342e302f32322d3232203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:b0:17:72:6e:ba:48:95:f9:a8:5c:5b:63:ad:2e:9f:8e:e2:
         ac:31:01:2b:10:ae:9a:01:e8:29:19:bc:b4:ee:16:89:89:3e:
         80:52:da:2d:9b:2d:8a:25:16:32:7b:73:73:c7:b7:f4:c4:84:
         d9:5e:f3:c3:16:bf:9c:fa:1b:ea:2f:be:31:1e:ee:58:c7:62:
         82:78:1e:ed:75:34:be:10:28:69:25:b5:4a:4e:09:96:16:b1:
         07:42:5a:19:39:ed:8a:9f:8d:1a:4a:c9:44:dc:e0:80:25:25:
         e5:4e:79:de:e4:17:15:fa:34:33:a8:03:83:7f:b5:ab:10:d2:
         77:06:4c:3a:ce:d3:b0:03:fd:39:50:93:ce:ad:30:01:ca:b1:
         3c:18:2a:41:85:71:b7:98:25:f6:62:d2:c2:06:35:61:08:1a:
         04:12:1f:26:de:1e:2e:ca:4d:c0:11:01:c2:d9:9f:53:16:93:
         ee:3d:f1:f0:8d:8a:5b:96:82:a6:f6:68:ec:ae:23:c4:7d:bf:
         ff:e8:15:56:b7:16:e3:a4:d7:e3:dc:d8:62:cd:55:2c:64:0a:
         41:22:13:17:5b:13:18:eb:27:e9:55:16:c0:10:49:68:c1:f9:
         69:d2:29:d5:ba:24:2d:48:39:01:68:5d:d7:1f:95:12:d3:6a:
         52:7a:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org