Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa
File:                     3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          ZbDID7gJtHAXLYsXoAq0qfDgQQcs2/VTQPFpnbVGNG0=
Subject key identifier:   BE:46:CE:98:37:E0:95:63:0F:AF:F1:EA:4F:9B:E1:E4:71:E4:CF:52
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       02410C747BF1E78D527EA987B9257E72793580E7
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:44 +0000
ROA not before:           Fri 26 Apr 2024 19:23:44 +0000
ROA not after:            Fri 25 Apr 2025 19:28:44 +0000
asID:                     264562
IP address blocks:        168.232.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:41:0c:74:7b:f1:e7:8d:52:7e:a9:87:b9:25:7e:72:79:35:80:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:44 2024 GMT
            Not After : Apr 25 19:28:44 2025 GMT
        Subject: CN=BE46CE9837E095630FAFF1EA4F9BE1E471E4CF52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:82:7e:92:1a:f4:86:52:c9:91:32:cf:cd:
                    b5:26:81:d0:93:17:38:1c:85:39:b3:71:9c:1e:e5:
                    71:b8:db:34:14:80:f4:20:b3:1f:b9:a1:b8:2b:6e:
                    bc:b2:e3:71:55:73:45:f2:91:05:f6:07:48:2b:8f:
                    ee:a4:39:86:f8:6d:46:40:51:b7:db:b1:99:bd:40:
                    3f:20:a1:e2:2c:a6:e2:1c:00:1f:d2:9d:ae:f3:2d:
                    dc:4e:f5:26:3d:90:78:fa:3a:07:3c:8b:f1:0c:43:
                    26:ed:fc:f9:01:51:10:de:f2:de:68:47:42:f1:2a:
                    78:43:4f:6c:af:44:20:3f:d7:20:ee:40:92:a5:34:
                    44:e7:d4:3d:7a:c6:ef:df:77:7f:90:a6:79:7b:e8:
                    8a:07:9c:39:9d:fa:53:f9:a6:dd:ae:08:d2:ae:85:
                    0e:64:fa:50:0f:ad:93:6c:40:7b:17:ea:85:f0:b1:
                    db:1f:dd:6d:ed:27:bc:0e:33:1a:bb:11:92:67:3f:
                    6b:ef:69:b8:3b:eb:eb:5a:7e:50:26:cd:7c:2d:3a:
                    78:ef:0d:87:e6:16:ef:51:8b:83:f0:56:b6:ed:b6:
                    95:5a:6c:bc:6c:de:5d:93:5a:dc:7b:8d:98:da:ca:
                    ce:33:60:39:db:8f:92:9a:e8:ab:10:e8:b6:26:b4:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:46:CE:98:37:E0:95:63:0F:AF:F1:EA:4F:9B:E1:E4:71:E4:CF:52
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3136382e3233322e38362e302f32342d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:84:f9:bd:cb:58:88:bd:20:93:03:4e:bb:6a:f5:4b:b5:
         b3:ad:6f:60:db:5b:be:4a:52:a5:87:db:8f:90:dd:02:ff:5c:
         48:44:f6:e2:e6:f5:fe:7c:40:fb:3f:82:5d:1b:b3:9b:0a:23:
         fe:a8:cb:96:2b:e4:d0:82:f8:00:bd:e0:e6:ac:62:93:5b:b1:
         10:3b:95:52:6b:3a:fd:f2:97:54:6a:42:b6:bc:72:e4:70:31:
         c4:11:e1:4d:77:ba:a3:4d:0d:e1:39:fb:92:ec:25:49:6b:10:
         ab:9d:83:7e:de:f3:ec:3f:e2:31:e5:cc:37:98:0d:b0:8d:e0:
         0e:bd:0d:0d:13:88:56:5e:40:1d:5f:8b:a6:1a:e2:45:68:e6:
         e4:85:82:f4:b7:df:e3:db:be:2f:9c:06:61:65:c4:64:b7:cd:
         e1:ea:d6:b9:61:d7:a5:e2:f8:5d:db:59:d4:d7:96:94:06:f1:
         24:2d:11:2a:31:b2:f6:7e:48:d1:a8:eb:24:26:e4:3c:69:5f:
         10:ee:6c:c8:08:2f:6e:f4:9b:1a:e3:6c:e4:25:b8:02:48:4b:
         fe:57:ef:e3:6d:07:4a:7d:0f:68:07:45:d1:e0:2e:db:f9:b7:
         10:ae:00:9b:b9:33:93:e6:c0:69:60:df:c7:72:97:a0:ad:57:
         bf:14:e6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org