Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa
File:                     3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          9QHc4PVcGTzgH3pfza+rJPJZNs2sydu5WdmTav7onZI=
Subject key identifier:   68:9E:FA:6D:70:17:21:6D:C3:7C:88:3C:78:06:C3:0A:99:14:49:53
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       10FD021BA105752623360B2D969110AFCDF651C3
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:34 +0000
ROA not before:           Fri 05 May 2023 19:10:34 +0000
ROA not after:            Fri 03 May 2024 19:15:34 +0000
asID:                     264562
IP address blocks:        168.232.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fd:02:1b:a1:05:75:26:23:36:0b:2d:96:91:10:af:cd:f6:51:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:34 2023 GMT
            Not After : May  3 19:15:34 2024 GMT
        Subject: CN=689EFA6D7017216DC37C883C7806C30A99144953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:cc:a3:e2:aa:a3:c0:ff:cb:fc:10:e0:1d:
                    5c:c6:34:af:b9:fb:c2:e0:79:1c:d4:71:67:8a:a7:
                    f0:f4:91:5e:3f:cf:5e:b0:47:6d:16:d5:47:23:9f:
                    86:36:d0:4e:e8:00:e4:29:53:a4:c6:ff:ab:d6:6a:
                    a3:0b:fb:6d:a3:01:f1:e8:0a:c4:20:e9:26:55:bf:
                    8b:09:ce:14:3c:5e:56:c9:c9:d4:f2:c5:e0:e4:0f:
                    2b:f6:ed:96:e4:fb:cf:69:73:f6:d9:b5:63:55:42:
                    4c:b7:41:08:5f:26:04:79:26:8c:31:84:92:0a:06:
                    a8:84:d5:03:c2:85:31:75:b2:e5:0e:29:65:3b:7d:
                    59:8a:1c:ac:00:86:9c:d5:00:ca:e2:15:39:7a:a5:
                    57:d6:e7:50:72:56:20:d3:8a:da:7c:a7:c9:7c:ba:
                    48:fa:98:0a:ee:11:7d:82:51:79:72:2d:70:08:1b:
                    e5:d5:cd:b8:80:d0:2e:7d:1d:67:3f:e8:a0:af:1f:
                    9c:dc:7a:54:a0:7e:0d:a3:a4:9f:c3:b2:63:2f:6b:
                    a6:e4:13:6b:90:d1:8c:e9:ee:9a:2a:65:ee:a6:43:
                    70:c1:13:d8:96:5f:5b:1d:be:fd:f1:23:2a:06:1b:
                    5f:bd:b0:be:4a:d6:c7:e9:f5:cc:4f:a9:a0:47:cc:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:FA:6D:70:17:21:6D:C3:7C:88:3C:78:06:C3:0A:99:14:49:53
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:40:11:77:65:56:6b:d8:15:b7:99:2f:b8:96:da:9c:09:a2:
         ff:13:e5:79:d7:31:77:40:6d:42:28:d9:db:3c:e3:3d:31:c1:
         09:86:01:55:da:b0:64:e8:98:56:a7:cb:12:4a:dd:12:0d:c3:
         c3:6d:4e:7c:e1:48:c6:6f:cc:8a:cb:2d:61:47:78:76:ce:c3:
         1d:69:52:c7:f9:e3:e2:27:45:04:30:57:d6:a9:92:48:42:9b:
         d0:df:69:44:6e:8f:76:72:0b:24:e4:80:f0:3a:7f:4b:1e:04:
         59:c8:bb:dc:13:4a:41:58:f4:a8:32:d7:15:b7:02:0b:2a:dd:
         59:56:4c:7c:4b:08:59:0e:a9:71:4e:4f:ea:58:98:f6:d5:7e:
         3f:ee:62:de:1d:dc:d9:a8:c5:8a:e7:56:34:26:dc:a1:29:af:
         07:78:ed:7b:4f:c0:bd:ec:5d:df:b2:49:df:92:af:cd:69:6b:
         85:ba:2e:57:54:3c:f2:ea:21:ce:d7:35:d3:f2:92:40:0b:2a:
         db:b4:9b:d0:74:6e:67:67:a4:ce:83:e7:1c:de:54:4a:23:e1:
         17:50:2c:9f:ad:a0:6b:77:e0:ba:db:f9:2f:7d:98:b1:f4:a5:
         9d:5b:28:ef:fe:49:fa:87:6e:96:b0:d5:9a:82:f0:9d:d8:a0:
         3f:6d:04:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEP0CG6EFdSYjNgstlpEQr832UcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGRDQxNEMzMTVBNTFCMjUwM0E3RDFCOUZFMkVBREE1
NzVCQjAzRTAeFw0yMzA1MDUxOTEwMzRaFw0yNDA1MDMxOTE1MzRaMDMxMTAvBgNV
BAMTKDY4OUVGQTZENzAxNzIxNkRDMzdDODgzQzc4MDZDMzBBOTkxNDQ5NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0syj4qqjwP/L/BDgHVzGNK+5
+8LgeRzUcWeKp/D0kV4/z16wR20W1Ucjn4Y20E7oAOQpU6TG/6vWaqML+22jAfHo
CsQg6SZVv4sJzhQ8XlbJydTyxeDkDyv27Zbk+89pc/bZtWNVQky3QQhfJgR5Jowx
hJIKBqiE1QPChTF1suUOKWU7fVmKHKwAhpzVAMriFTl6pVfW51ByViDTitp8p8l8
ukj6mAruEX2CUXlyLXAIG+XVzbiA0C59HWc/6KCvH5zcelSgfg2jpJ/DsmMva6bk
E2uQ0Yzp7poqZe6mQ3DBE9iWX1sdvv3xIyoGG1+9sL5K1sfp9cxPqaBHzF9bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaJ76bXAXIW3DfIg8eAbDCpkUSVMwHwYDVR0j
BBgwFoAUsf1BTDFaUbJQOn0bn+Lq2ldbsD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMC9CMUZENDE0QzMxNUE1MUIyNTAzQTdEMUI5RkUyRUFEQTU3NUJCMDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxRkQ0MTRDMzE1QTUxQjI1
MDNBN0QxQjlGRTJFQURBNTc1QkIwM0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAv
MzEzNjM4MmUzMjMzMzIyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACo6FYwDQYJKoZIhvcNAQELBQADggEBAGJAEXdl
VmvYFbeZL7iW2pwJov8T5XnXMXdAbUIo2ds84z0xwQmGAVXasGTomFanyxJK3RIN
w8NtTnzhSMZvzIrLLWFHeHbOwx1pUsf54+InRQQwV9apkkhCm9DfaURuj3ZyCyTk
gPA6f0seBFnIu9wTSkFY9Kgy1xW3Agsq3VlWTHxLCFkOqXFOT+pYmPbVfj/uYt4d
3NmoxYrnVjQm3KEprwd47XtPwL3sXd+ySd+Sr81pa4W6LldUPPLqIc7XNdPykkAL
Ktu0m9B0bmdnpM6D5xzeVEoj4RdQLJ+toGt34Lrb+S99mLH0pZ1bKO/+SfqHbpaw
1ZqC8J3YoD9tBBA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org