Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32342d3234203d3e20323632353530.roa
File:                     3134332e302e34302e302f32342d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          p4ieK0HqcY7HiVCukJebzkYOQLlM/Hb+5CdfGSX6yRg=
Subject key identifier:   B5:A8:5C:FF:43:07:3A:9E:FA:C9:54:C6:A9:A9:A2:CD:4E:00:0D:F8
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       7B456153381753892E46A2E53241999D37125C8D
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32342d3234203d3e20323632353530.roa
Signing time:             Mon 05 Sep 2022 15:03:33 +0000
ROA not before:           Mon 05 Sep 2022 14:58:33 +0000
ROA not after:            Mon 04 Sep 2023 15:03:33 +0000
asID:                     262550
IP address blocks:        143.0.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:61:53:38:17:53:89:2e:46:a2:e5:32:41:99:9d:37:12:5c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Sep  5 14:58:33 2022 GMT
            Not After : Sep  4 15:03:33 2023 GMT
        Subject: CN=B5A85CFF43073A9EFAC954C6A9A9A2CD4E000DF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:da:6f:7c:cc:2e:59:93:39:4d:ac:ef:37:
                    86:7b:3f:bd:0f:80:a0:4b:93:3d:c9:96:18:9d:8d:
                    79:01:ca:57:8d:10:5b:6b:26:78:3a:ce:79:09:6c:
                    55:94:5b:5c:91:d0:a1:70:f1:d0:b4:7f:1c:37:2c:
                    f7:5d:64:a8:9a:68:57:d5:0b:fc:68:da:a4:ad:54:
                    11:a2:c4:92:3c:91:f3:2c:69:d7:8f:16:a8:0e:63:
                    df:7f:49:c3:43:ee:5e:fb:c4:2f:b4:c7:66:f5:09:
                    4f:7a:51:85:1d:a9:e4:21:42:b5:de:48:79:5b:50:
                    2c:50:5d:8e:4b:04:bf:34:c2:97:28:98:6e:6b:6f:
                    d6:7d:68:2f:1a:29:7a:27:d7:74:49:74:43:bd:79:
                    0c:51:fc:6c:93:6f:b1:ab:31:71:ce:12:0f:57:a5:
                    6c:21:d2:5f:07:61:b3:fd:63:3d:42:2d:d8:be:63:
                    2f:ef:57:20:a7:5e:f9:b9:2b:79:0b:4d:4c:bf:be:
                    fb:1a:c6:07:21:d4:1b:3a:d7:d8:d8:f9:0f:3b:ee:
                    ee:af:98:2b:74:c0:00:77:c7:0d:e9:64:f4:32:97:
                    83:39:9e:2b:02:a8:94:48:30:f2:01:3e:fc:5e:51:
                    3a:18:94:3c:52:6e:4e:5c:0a:e0:f9:59:7b:3b:86:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A8:5C:FF:43:07:3A:9E:FA:C9:54:C6:A9:A9:A2:CD:4E:00:0D:F8
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32342d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:08:28:e9:3d:5e:ca:6a:53:2e:dd:0c:a1:94:20:3e:b9:d8:
         c1:90:c8:76:9c:f0:62:39:f9:56:36:b4:f3:28:13:32:62:2c:
         6e:49:3f:2a:3a:15:f6:2c:5e:08:07:5e:30:94:7a:da:52:3c:
         0d:29:b6:cd:df:2a:11:12:6b:f2:1b:79:a8:aa:b3:d5:8b:c9:
         c7:2f:25:05:c2:27:29:aa:51:ae:d0:5a:53:f9:9a:44:e7:05:
         88:76:f8:43:cd:d6:a5:5c:1e:7f:d2:13:ae:60:79:1c:00:b3:
         40:f4:78:4b:09:e4:67:37:fc:72:9c:38:e9:bd:f6:0d:ac:c3:
         9c:86:7e:94:49:90:de:08:46:6e:71:44:e1:b3:11:cf:3d:25:
         a2:86:2e:05:4e:da:a8:4e:ba:3c:2a:c9:ea:d4:a0:bf:60:1a:
         8f:b5:f6:82:56:bf:b3:6c:8b:fd:be:ed:5d:6a:08:69:cc:14:
         a1:8b:22:a5:d5:ae:65:93:53:24:33:58:d0:c3:9c:15:2c:a3:
         46:ef:62:06:80:80:cc:a8:e6:b6:8c:ab:7b:bc:9b:c9:bd:b7:
         3c:45:76:00:0a:33:b2:b5:c9:95:2d:55:29:6e:3e:11:42:75:
         ce:75:f2:d0:b9:db:93:37:f0:78:15:06:d2:c9:73:41:5e:e9:
         aa:79:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org