Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38352e302f32342d3234203d3e20323634353632.roa
File:                     3136382e3233322e38352e302f32342d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          M+HSKNWfVNesA6hjvEg2au+vBMwkjPF+Vhv93Qs3+Wg=
Subject key identifier:   CB:B2:5A:04:56:42:22:F7:FD:6A:3A:0D:E7:00:D6:D5:D3:6C:D1:EB
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       5512E1AB22F91223510E4A4B112C36F6164EFA9C
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38352e302f32342d3234203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:45 +0000
ROA not before:           Fri 26 Apr 2024 19:23:45 +0000
ROA not after:            Fri 25 Apr 2025 19:28:45 +0000
asID:                     264562
IP address blocks:        168.232.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:12:e1:ab:22:f9:12:23:51:0e:4a:4b:11:2c:36:f6:16:4e:fa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:45 2024 GMT
            Not After : Apr 25 19:28:45 2025 GMT
        Subject: CN=CBB25A04564222F7FD6A3A0DE700D6D5D36CD1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:02:ae:9e:26:c3:54:c8:a4:41:32:77:ea:
                    03:19:23:db:6e:e4:4b:fd:e4:48:6f:08:db:91:ee:
                    1b:2e:47:b0:63:9c:98:1e:bb:db:63:21:6f:70:c9:
                    18:ac:53:35:e2:9c:ec:ba:f7:c2:75:9f:aa:2e:58:
                    f3:e7:15:30:76:02:a3:ae:e6:28:50:27:9e:90:e6:
                    c9:b2:5a:33:c0:ac:66:0e:c2:f8:ee:59:be:f6:a5:
                    1e:d7:83:9e:c0:d6:bc:64:02:a8:06:a2:c6:c1:7a:
                    f7:72:6c:80:1b:a9:62:b3:a0:ec:73:2b:21:36:1b:
                    5e:ae:86:08:b0:b2:88:2d:ad:e5:6b:9d:73:f8:27:
                    1c:9b:52:10:9d:43:bc:c1:85:5e:25:33:57:e7:c4:
                    3a:e5:42:19:30:26:2b:6a:a9:91:1b:6c:87:91:1d:
                    49:1f:3a:34:9f:7f:0a:fc:3b:06:85:d5:de:fc:59:
                    e4:0a:53:b8:71:b0:29:97:cf:69:9a:e5:1c:39:37:
                    3f:45:c4:8b:69:50:16:fa:85:db:a3:a2:dd:15:a3:
                    1b:9a:82:d4:f7:bd:6c:d9:28:3f:10:1d:d2:6c:7f:
                    84:5c:f0:83:11:6e:89:1c:39:3d:f8:ba:91:4f:75:
                    82:e9:a2:70:2d:55:05:13:23:4f:6e:20:aa:63:f3:
                    4e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:5A:04:56:42:22:F7:FD:6A:3A:0D:E7:00:D6:D5:D3:6C:D1:EB
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38352e302f32342d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:32:45:ba:f8:05:f1:58:bb:46:c2:97:8f:e6:10:ad:ec:0c:
         2f:39:3c:24:f3:fa:2f:2e:20:b8:a1:96:65:88:ab:51:ed:e7:
         de:b7:02:64:cb:b2:b9:54:b6:70:26:2c:cc:44:f3:03:b5:4e:
         b0:c0:48:5b:32:3e:13:48:25:30:e1:bf:d8:a2:e4:31:bd:c1:
         c9:02:f4:26:60:3e:a4:f6:a2:0c:56:14:8b:c3:0a:59:2a:27:
         f0:4e:be:a6:d8:24:ed:41:fe:a5:f4:a4:e5:ab:63:87:3f:12:
         6e:0d:91:0d:02:eb:4c:fb:bf:33:e5:35:a1:8f:8c:bc:7b:f5:
         31:ca:72:e1:86:b4:ae:cc:9c:2d:b5:3f:8a:64:68:9f:83:81:
         e2:e0:db:58:b4:b8:d5:8e:58:19:1b:26:ca:44:de:0d:4b:de:
         d9:6a:cc:0a:56:85:9d:de:9b:19:9b:67:f7:ba:9f:9b:6f:4b:
         7b:4e:38:57:fc:19:bf:28:6e:47:a5:95:a0:48:5f:9c:21:84:
         ee:87:0d:70:e4:bb:bc:da:20:0a:fb:5f:a9:77:3b:0f:0d:3b:
         8a:1a:ee:c6:00:1d:ed:ad:42:e0:5e:5d:97:c0:2a:65:d0:1e:
         c9:59:cb:e7:f5:2a:58:c2:f6:1e:bb:72:14:37:1f:a4:a9:47:
         d3:c8:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org