Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34322e302f32332d3233203d3e20323632353530.roa
File:                     3134332e302e34322e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          nZ0N797ljeDUKELK5dEvmNv62vMfKjO8GsSwaeXaQUs=
Subject key identifier:   6C:62:C3:8B:3C:6A:2A:3A:8F:89:4D:48:DF:F7:CE:BE:2A:D9:74:9F
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       3002BB9A6ECF4C85D38833C62BD7100864DED4EE
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34322e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:01 +0000
ROA not before:           Tue 14 Mar 2023 18:55:01 +0000
ROA not after:            Tue 12 Mar 2024 19:00:01 +0000
asID:                     262550
IP address blocks:        143.0.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:bb:9a:6e:cf:4c:85:d3:88:33:c6:2b:d7:10:08:64:de:d4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:01 2023 GMT
            Not After : Mar 12 19:00:01 2024 GMT
        Subject: CN=6C62C38B3C6A2A3A8F894D48DFF7CEBE2AD9749F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:f3:e1:6b:50:bb:a6:c4:55:f7:d6:80:61:
                    05:59:dc:eb:db:2e:e4:f4:4e:be:f4:a9:c2:8a:81:
                    31:b4:3f:0a:4c:6a:a0:1c:bb:c5:70:40:17:71:b9:
                    78:43:7b:35:f3:0d:f2:d9:b8:ca:54:82:db:58:3c:
                    a5:9b:53:ae:ed:63:71:94:b0:ca:3c:d4:4b:5e:3b:
                    a6:0c:5c:49:42:b3:1b:82:60:18:57:e2:1a:be:a3:
                    ac:70:cb:3e:3d:09:8c:10:eb:d5:b2:66:75:ca:f9:
                    33:34:42:57:17:f6:df:50:75:bc:a8:37:dd:2a:b5:
                    4b:05:f5:2a:dc:61:62:50:92:cb:45:f6:b0:df:4d:
                    67:b6:73:b1:af:d2:0e:39:38:3d:9c:a0:e0:a4:46:
                    09:77:c0:c9:1a:83:f6:81:fc:bf:3d:44:15:31:c4:
                    72:6c:de:b8:58:b2:0e:4e:28:86:81:16:60:c8:78:
                    b8:36:ab:7c:ab:6b:de:93:4e:10:70:46:8c:06:97:
                    64:cd:86:2b:c8:c7:78:73:99:9a:b9:bd:99:47:31:
                    d0:91:4d:61:ae:69:00:f5:5d:7c:ab:5c:c3:01:1c:
                    a9:b8:3d:75:22:ae:a8:b1:22:c3:84:94:5b:12:63:
                    d4:50:20:af:8d:87:cb:b2:88:26:6e:da:0c:8b:9e:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:62:C3:8B:3C:6A:2A:3A:8F:89:4D:48:DF:F7:CE:BE:2A:D9:74:9F
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34322e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:67:30:f2:62:6b:99:d6:1d:d3:82:12:01:c8:1d:5b:a2:
         43:bb:05:88:af:22:a4:89:fd:25:14:76:56:51:58:81:77:fd:
         fe:24:dc:43:90:8b:eb:63:02:e5:17:a6:7b:fb:c5:79:95:ef:
         16:d5:f4:29:bf:b8:63:36:7e:f8:ab:dd:08:7d:b9:31:7a:38:
         2d:12:0b:75:e8:a8:09:8d:e2:28:21:29:58:28:01:12:20:6d:
         29:db:fc:6c:ea:1c:d3:4c:7f:b6:46:f9:cc:f1:89:39:56:61:
         7f:b6:89:0f:3e:ea:3d:60:77:34:2e:6a:e4:bf:9f:dd:e0:e1:
         ae:f1:21:74:b7:b8:99:e3:dc:d3:ec:d0:76:2b:e0:53:0f:13:
         9a:2f:4b:11:1a:db:6c:ab:f9:e8:e0:98:39:5a:eb:d3:45:5c:
         66:c3:42:dc:5c:94:81:38:86:57:17:eb:9f:a8:87:17:c6:6d:
         68:97:e1:f2:03:3c:ff:3b:79:e0:43:35:0e:68:28:2b:92:79:
         13:50:91:da:da:1e:5d:bc:80:c0:b3:4a:a5:1d:bd:76:e4:5d:
         57:52:04:83:6b:e9:d6:12:42:55:58:ba:48:31:1e:e5:cb:a8:
         c7:c4:c2:95:25:6a:f6:24:be:b3:a3:e3:d5:31:1d:89:4f:53:
         c8:f2:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org