Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32332d3233203d3e20323632353530.roa
File:                     3134332e302e34302e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          ryuESWR9NC/PegD2cN/mke7qUFdSNUwzich5/xUhzhg=
Subject key identifier:   37:A7:31:15:94:FF:74:8E:71:F0:2A:67:D4:EC:A5:F7:48:BC:05:38
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       347E6E8ED06B3D99FD4958998A7C54DBFEFE0769
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:01 +0000
ROA not before:           Tue 14 Mar 2023 18:55:01 +0000
ROA not after:            Tue 12 Mar 2024 19:00:01 +0000
asID:                     262550
IP address blocks:        143.0.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7e:6e:8e:d0:6b:3d:99:fd:49:58:99:8a:7c:54:db:fe:fe:07:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:01 2023 GMT
            Not After : Mar 12 19:00:01 2024 GMT
        Subject: CN=37A7311594FF748E71F02A67D4ECA5F748BC0538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:50:e5:73:32:a7:12:d9:8f:48:75:b4:70:
                    90:b8:42:24:e8:da:ed:c7:c9:a1:0f:1c:b4:7f:b4:
                    1f:91:5b:bd:1e:88:04:78:a1:e8:d1:67:5a:76:aa:
                    01:59:43:b3:75:50:1e:02:06:f6:93:3c:8b:92:a4:
                    f5:f5:d6:00:64:8b:be:83:2f:0d:1b:a2:8a:83:89:
                    77:85:0f:fa:be:50:85:a4:cc:f6:29:4a:e0:52:ba:
                    f4:77:04:fa:43:41:b6:18:eb:c3:40:92:0e:47:a0:
                    74:d7:92:82:de:33:f2:e3:92:50:1e:14:a2:84:4a:
                    2f:c6:08:63:98:33:1c:b1:f8:9a:4b:38:20:12:c0:
                    4b:34:e9:38:cb:a6:95:7f:c2:11:fa:f8:e1:4d:c1:
                    0a:c3:06:32:41:31:63:17:34:60:56:d3:2b:c8:1a:
                    34:7d:43:32:52:24:da:b8:3e:af:c9:a4:ea:d2:5f:
                    b8:f8:88:50:f0:b9:8b:2f:3e:47:78:99:88:d1:ed:
                    33:5e:6c:2a:b2:30:c2:68:e2:95:ca:12:dd:48:dc:
                    cb:9e:89:5b:1f:0a:70:4d:6d:d6:e9:a9:a9:f9:ae:
                    bb:5a:0c:75:76:c4:bb:6a:38:20:f7:37:d9:a7:97:
                    52:1a:1d:ae:f2:e8:4d:29:a8:b4:a0:6d:6d:d5:4c:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A7:31:15:94:FF:74:8E:71:F0:2A:67:D4:EC:A5:F7:48:BC:05:38
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:81:f6:6a:77:c6:67:d1:18:d3:db:3c:e3:f3:31:a4:2d:e3:
         a2:9f:36:4f:c6:2a:60:64:27:a0:05:c8:5c:1c:9c:30:09:3d:
         04:28:f3:07:53:54:32:33:56:e3:13:8d:a4:11:3e:f8:90:74:
         56:5b:06:2f:74:9f:d0:52:b2:ac:42:ba:70:5c:0a:12:60:83:
         05:45:82:f8:65:80:66:fe:62:f5:90:65:dc:2b:ba:93:de:19:
         ff:a9:86:da:c8:95:bb:0d:1a:06:c5:03:1e:94:7d:49:8c:f8:
         9a:7d:a5:f5:53:19:9b:e1:f2:04:1f:5b:d5:e7:24:f0:99:f8:
         6c:2f:83:eb:fc:2d:01:87:7c:60:09:e4:6d:3d:a4:52:93:4c:
         ac:73:3b:a2:fd:d4:46:3e:3c:74:fd:56:50:3a:4a:21:76:0b:
         24:82:28:2a:d4:ad:f2:cc:b3:cc:53:6a:19:8e:27:3d:f7:08:
         f2:f7:57:87:e4:55:cf:d3:a6:dc:cc:65:0d:de:13:80:ba:e3:
         a1:0e:56:72:83:70:fa:3c:59:fd:06:05:fc:00:d3:88:21:19:
         c8:fd:b1:33:56:42:89:c7:40:2d:5e:03:a7:08:b7:d9:2a:3a:
         4f:a5:b0:dd:2a:df:88:38:3d:c8:01:2e:35:f1:ab:e0:4a:2c:
         cc:ef:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org