Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa
File:                     3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          O5Qrm5oIh4smBFAEb80yq8oh6kVGFfMl3HcgMBeoKnI=
Subject key identifier:   9C:73:3B:33:CD:84:AD:3B:55:9E:B9:E7:0E:A3:24:5F:E2:05:D4:C9
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       59759742F7C8C14DFE89F708758F4E962A88719E
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:45 +0000
ROA not before:           Fri 26 Apr 2024 19:23:45 +0000
ROA not after:            Fri 25 Apr 2025 19:28:45 +0000
asID:                     264562
IP address blocks:        168.232.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:75:97:42:f7:c8:c1:4d:fe:89:f7:08:75:8f:4e:96:2a:88:71:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:45 2024 GMT
            Not After : Apr 25 19:28:45 2025 GMT
        Subject: CN=9C733B33CD84AD3B559EB9E70EA3245FE205D4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:1b:1c:0c:b6:8f:0f:88:8d:e5:16:25:75:
                    53:55:e6:07:57:6d:07:09:c3:89:30:23:01:c3:4b:
                    8c:13:fd:38:9f:76:53:75:41:f0:f9:8b:1d:fb:27:
                    00:42:32:5c:00:03:29:b1:3f:ce:3c:64:9a:72:91:
                    56:65:6d:ef:73:f1:1b:3c:79:23:c5:9e:11:74:b7:
                    84:2a:62:d7:5f:dd:40:e5:9a:dc:c4:60:71:ca:f0:
                    9d:0c:ba:25:49:59:1d:14:6d:22:37:b8:09:53:3e:
                    9f:44:cf:0a:ca:c3:47:47:d2:51:f0:70:da:ea:e3:
                    c4:2b:04:f9:cf:4e:78:ed:70:49:13:4c:c8:c5:cb:
                    cb:9f:d8:85:6c:59:b9:ed:03:01:3a:16:59:78:ec:
                    8a:67:49:2d:68:87:fa:fc:ea:4d:bb:41:96:5f:9a:
                    31:6a:ff:73:43:60:d3:91:ed:21:44:86:0b:43:13:
                    bc:4d:94:99:5a:4c:4f:ca:4e:88:41:8c:d4:a2:dc:
                    17:16:af:66:c9:e5:9a:2e:fc:ac:e0:9a:3b:c3:48:
                    a5:59:5d:f7:33:35:1a:7c:b0:9d:5f:10:78:92:e8:
                    9c:f0:1d:d8:23:90:71:e1:b0:71:79:18:87:1b:17:
                    4d:61:3e:3a:74:c8:c1:93:b8:bf:fc:0c:bc:58:8d:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:3B:33:CD:84:AD:3B:55:9E:B9:E7:0E:A3:24:5F:E2:05:D4:C9
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38362e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:a6:fa:88:1a:91:92:83:7a:fd:dc:22:7e:45:03:54:b0:75:
         04:a3:1f:2a:d8:63:b5:3a:be:b4:93:10:c0:15:24:25:37:76:
         5e:e3:e9:f2:99:fe:37:c0:94:70:1b:74:88:58:0a:30:26:91:
         5a:ae:5d:d2:b1:b6:fd:e4:c2:fa:ec:47:3a:1b:3e:0f:08:4a:
         ca:95:bb:ea:30:af:eb:86:f2:d2:32:52:ca:31:2b:7d:e8:ec:
         be:77:e2:be:a9:4b:de:23:bb:c3:13:46:9f:6c:af:6a:49:8f:
         9a:d4:38:d8:7e:10:6c:b6:fe:b6:40:71:b5:31:4c:13:6a:0a:
         fd:54:cb:08:5b:b2:c0:b7:4c:18:95:81:26:ff:9e:c2:7a:93:
         eb:59:a9:d6:61:a2:fc:ce:74:32:47:cd:e9:3a:cf:77:ef:c7:
         1f:d8:7c:31:21:4a:4d:e2:70:c4:af:28:3d:0c:a3:6f:5d:99:
         4d:e6:c7:c1:54:3d:f3:05:f2:88:1e:6a:e9:3b:77:a9:b9:ed:
         5d:7e:bd:92:c8:01:f7:b3:5e:73:16:84:be:0e:b1:10:af:20:
         ce:75:79:9b:19:64:aa:47:dc:d2:f0:41:7e:cf:f9:69:16:72:
         44:d6:e5:3c:de:6c:9e:78:0c:e3:3b:97:e3:ee:da:d1:0a:7f:
         36:50:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org