Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32332d3233203d3e20323632353530.roa
File:                     3136382e3139372e342e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          f7uH8ox70af+pM0tZ6ZzgNIfBRrVCkVZyPU3jCdKBdA=
Subject key identifier:   5A:1C:CB:B7:8C:63:41:20:B0:A0:26:5B:FE:FD:D4:6C:F4:5B:F4:FA
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       6AD2B6C90A9E5AA2E21ABC67E104A46199130017
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:01 +0000
ROA not before:           Tue 14 Mar 2023 18:55:01 +0000
ROA not after:            Tue 12 Mar 2024 19:00:01 +0000
asID:                     262550
IP address blocks:        168.197.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d2:b6:c9:0a:9e:5a:a2:e2:1a:bc:67:e1:04:a4:61:99:13:00:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:01 2023 GMT
            Not After : Mar 12 19:00:01 2024 GMT
        Subject: CN=5A1CCBB78C634120B0A0265BFEFDD46CF45BF4FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:72:d5:1e:9f:f1:93:b2:97:4a:7e:cd:5f:
                    09:e8:0b:96:d4:00:5d:80:3d:3e:5f:76:e8:e0:f1:
                    db:fb:5a:9f:d5:70:89:91:ce:d6:b0:1e:91:97:c1:
                    81:0a:fd:c9:3b:57:a6:d5:83:94:7d:c4:cc:9a:cc:
                    7e:ae:92:41:3c:fa:ee:68:a7:58:11:39:d9:ff:1f:
                    72:f3:1b:ab:a9:a9:41:48:d0:c9:9c:ad:ff:8f:43:
                    08:d6:32:ef:25:16:aa:df:a5:28:bf:92:74:d4:3a:
                    55:c8:67:aa:c0:e2:20:be:b9:a7:8e:51:86:b4:44:
                    f9:74:c2:07:93:d1:0d:65:20:f4:22:ba:ec:bf:a4:
                    01:39:41:05:db:97:4b:bb:cf:40:49:da:c8:b0:ad:
                    ee:1c:ce:81:1f:3e:09:68:a1:7b:68:75:91:fe:c8:
                    ab:30:b6:fb:eb:0b:b3:27:bc:96:48:5a:6e:8f:46:
                    82:48:ee:b1:9a:7e:9f:49:0a:97:fd:5d:79:ab:4a:
                    bb:30:5b:7b:f2:ad:4b:c9:1d:1b:42:9e:6f:89:42:
                    7f:c2:13:71:9b:f3:d2:1f:72:da:67:b5:54:37:86:
                    4d:93:98:64:b7:18:4f:97:51:3a:02:76:b8:8e:dc:
                    bb:a4:a7:ae:76:48:ed:40:40:f5:b1:d5:a4:86:0d:
                    69:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:CB:B7:8C:63:41:20:B0:A0:26:5B:FE:FD:D4:6C:F4:5B:F4:FA
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e342e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:05:10:45:8e:64:75:ca:6b:93:0a:c6:90:1c:b6:c7:9b:6b:
         51:58:e2:83:27:df:16:46:e3:fa:64:20:02:c5:66:d8:b3:86:
         f9:35:e3:c7:4b:28:a2:b5:ac:b3:5e:14:50:24:42:54:09:4c:
         78:66:14:20:72:c9:18:eb:7b:6e:81:30:3a:95:a1:bd:c9:d3:
         e8:eb:f1:77:11:a7:7a:26:bb:7c:39:fb:1d:c8:ed:30:ae:da:
         26:22:df:35:ab:a6:16:98:3c:6d:0a:6d:84:e6:31:71:a4:e6:
         b8:2b:a6:4a:0e:7f:c3:8a:7a:13:20:f7:49:ac:a5:ce:17:fa:
         cf:41:35:ab:78:37:1c:6e:b0:e4:88:c2:5b:d3:a4:67:cd:07:
         bd:10:1a:58:a9:e2:95:23:06:d9:0e:91:23:bb:46:fd:37:d4:
         87:51:8e:87:b1:19:8b:71:27:99:e8:a8:80:3b:27:39:ff:6a:
         49:3f:18:57:73:5c:42:37:5a:9d:f7:48:75:33:2e:56:f2:98:
         69:a3:92:ff:37:f9:23:90:b3:64:f8:72:3e:db:bb:bc:7c:95:
         86:f3:1f:89:78:bb:02:62:fa:cb:ab:0f:99:e9:7c:c1:14:f1:
         1e:e4:27:af:fc:c3:8a:8c:30:7b:35:73:e4:89:fb:67:f2:7d:
         7b:fb:ea:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org