Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34332e302f32342d3234203d3e20323632353530.roa
File:                     3134332e302e34332e302f32342d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          d1ANfaGp0X/v32TpbR9eBLdauF8P5VWpM86lkrNGIco=
Subject key identifier:   C1:6A:C1:D7:D2:02:2B:68:0F:7E:37:9D:99:10:E4:D1:93:16:82:19
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       0CF9532E248A505F54E311CF4E3D1965AAD5510D
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34332e302f32342d3234203d3e20323632353530.roa
Signing time:             Mon 05 Sep 2022 15:04:25 +0000
ROA not before:           Mon 05 Sep 2022 14:59:25 +0000
ROA not after:            Mon 04 Sep 2023 15:04:25 +0000
asID:                     262550
IP address blocks:        143.0.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f9:53:2e:24:8a:50:5f:54:e3:11:cf:4e:3d:19:65:aa:d5:51:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Sep  5 14:59:25 2022 GMT
            Not After : Sep  4 15:04:25 2023 GMT
        Subject: CN=C16AC1D7D2022B680F7E379D9910E4D193168219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:d7:b7:f7:c1:38:f9:a6:27:59:0e:3f:48:
                    88:8e:3b:95:c8:9f:de:db:1d:04:21:ed:3a:3f:cf:
                    a7:b4:28:5e:17:bd:78:01:4d:58:55:b2:ca:c0:c5:
                    94:c2:43:a6:62:f3:db:1b:7e:fe:49:18:5e:14:f4:
                    3d:7c:1a:55:55:07:e2:fd:17:74:92:29:d0:5f:8e:
                    34:91:24:b3:f0:fa:e1:49:51:29:7d:c2:e6:7e:1c:
                    ab:83:70:dc:53:7b:93:7f:11:2f:d6:68:2e:60:61:
                    e6:39:a8:e5:7a:84:8f:bd:6f:b1:6f:19:00:ec:d3:
                    f8:57:2f:6e:b4:3e:fc:63:78:9c:25:d2:ca:26:f1:
                    30:87:b2:26:b0:4f:95:9c:57:9a:5f:70:e8:ca:6a:
                    d0:7d:5d:73:8e:9e:04:15:e8:2e:e4:3e:fe:ee:46:
                    1a:88:78:7b:93:bc:1b:c2:3c:e0:ef:78:b8:d3:6e:
                    a9:99:0a:da:3a:bb:2e:24:a4:f1:99:fd:ff:58:d5:
                    22:ab:55:5c:d6:fb:04:ab:32:be:3e:5e:d4:73:af:
                    51:97:32:3a:33:47:61:15:cb:7a:93:7d:1b:0e:b4:
                    83:b2:c4:b8:5c:97:fb:6f:1d:e7:64:3d:54:9d:2b:
                    32:e7:d6:68:a0:d3:05:d9:34:7d:69:5a:a6:66:21:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:C1:D7:D2:02:2B:68:0F:7E:37:9D:99:10:E4:D1:93:16:82:19
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34332e302f32342d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:28:61:9f:72:67:5c:62:a8:80:96:8a:a2:54:4e:f6:55:7c:
         30:0b:81:81:58:79:5b:1e:b0:5a:50:bb:67:0b:0c:a3:5c:34:
         ce:0f:78:06:bb:68:cd:4a:ce:cb:f9:2b:9e:78:a2:27:19:c4:
         cc:13:43:f3:1b:84:3c:e4:34:7d:de:7f:94:10:b7:f2:87:3e:
         d2:de:cb:80:72:76:29:e4:11:72:3a:49:75:cf:9c:db:23:b3:
         af:9f:66:d7:de:36:c4:07:55:da:b4:5f:11:c9:3c:75:66:cb:
         6e:7a:ee:65:9c:28:8a:27:2e:c7:e3:99:51:7f:6b:fa:0b:c6:
         bb:28:0b:79:a8:be:d4:78:4e:14:52:09:45:09:a7:6c:7e:35:
         6c:fe:35:56:d8:27:07:c9:cf:0b:e2:1f:fc:d1:5a:6e:a0:98:
         f0:60:76:d1:dc:d9:89:9d:3d:8b:51:1f:27:ae:1f:c3:9d:ad:
         cd:2d:72:96:3f:21:76:88:ff:9f:c6:10:67:31:70:e2:ab:a1:
         56:34:97:23:90:39:85:41:e2:c0:c9:a0:e1:8d:17:85:44:cf:
         98:4d:7a:00:82:cd:f7:1e:60:a9:8b:18:11:47:e9:11:0f:19:
         88:7e:f3:6e:66:3c:b0:d3:39:b6:7a:af:32:30:e8:82:0e:b1:
         90:50:d3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org