Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e362e302f32332d3233203d3e20323632353530.roa
File:                     3136382e3139372e362e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          qwNCuk5PgSgbnp7fIcg4olf+rQ6mDs9j/xv3+6l4wSE=
Subject key identifier:   C8:EA:97:AB:64:C1:F8:42:23:D2:C6:61:9C:1A:9E:E3:0E:BF:67:2B
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       0381B28968CD88B5F0B9A2F665891EB9E123B990
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e362e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:00 +0000
ROA not before:           Tue 14 Mar 2023 18:55:00 +0000
ROA not after:            Tue 12 Mar 2024 19:00:00 +0000
asID:                     262550
IP address blocks:        168.197.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:81:b2:89:68:cd:88:b5:f0:b9:a2:f6:65:89:1e:b9:e1:23:b9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:00 2023 GMT
            Not After : Mar 12 19:00:00 2024 GMT
        Subject: CN=C8EA97AB64C1F84223D2C6619C1A9EE30EBF672B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:30:25:fa:3a:d8:91:11:1d:bd:3e:da:8b:
                    63:5a:85:81:82:e4:03:c8:62:17:38:97:29:1c:a2:
                    2c:35:ec:d4:86:5b:9f:68:78:b9:31:2e:6e:a8:4e:
                    ea:26:2c:64:f9:11:da:a1:4d:05:93:75:0b:8d:af:
                    b3:70:28:7b:dc:86:90:5a:fa:3e:ca:26:e5:53:1b:
                    9a:9b:87:92:bb:7b:51:a9:be:1d:a7:89:a0:6a:74:
                    77:d1:2c:9c:aa:74:53:04:4b:93:d6:ab:6e:99:d0:
                    a8:7d:37:ee:16:3c:63:07:98:9b:27:c8:c7:e9:f9:
                    7b:4f:14:7c:84:47:ff:99:74:89:ad:45:1a:ff:a5:
                    29:31:53:1f:91:3f:b4:de:d3:d8:93:60:80:06:73:
                    88:24:16:f2:b5:94:a3:26:ff:4f:62:45:d5:36:0f:
                    fa:e5:e4:73:fb:8b:f6:6d:87:80:f0:b3:99:ae:91:
                    21:8b:fb:50:de:32:e1:7a:0c:d2:05:67:e9:3e:ab:
                    f9:29:ec:ab:fb:af:28:65:a8:2f:db:97:4a:ba:ba:
                    e5:d5:9a:3b:eb:21:f5:69:98:0b:6a:e3:8c:c1:a2:
                    cc:14:25:11:af:ad:ce:6a:7b:39:97:70:00:fd:2a:
                    bf:ff:37:54:14:c5:4d:82:8b:fb:9d:20:6e:ac:68:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:97:AB:64:C1:F8:42:23:D2:C6:61:9C:1A:9E:E3:0E:BF:67:2B
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e362e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:e4:66:bb:0d:c8:e1:d0:87:bc:dd:b0:6d:e9:4e:ca:1e:22:
         3a:cc:58:58:b3:73:9b:a3:86:54:e8:fe:e0:2b:8a:47:99:6b:
         20:2d:21:93:91:54:ea:23:ad:a7:b8:c6:58:de:71:58:96:4d:
         e0:11:1c:48:e6:af:5a:21:c7:ed:56:cc:ab:cd:4a:ef:75:7d:
         b2:4f:a2:52:11:ce:aa:21:df:95:b6:de:94:f6:f4:c8:6d:a7:
         9d:2b:9b:a5:be:8d:8f:4c:88:3b:92:38:77:91:99:57:87:7d:
         8c:2f:7e:1d:20:d3:31:83:62:ef:f3:a1:64:e1:c8:ad:6f:27:
         38:db:6b:0d:69:28:48:92:67:5a:39:bd:a6:f3:f2:27:a2:1b:
         7a:e0:b8:e0:a3:b9:4b:f9:fe:23:39:00:1a:bb:b1:36:5c:d6:
         8f:58:e3:55:5a:ff:e3:ef:c9:45:40:cd:1c:78:df:36:2c:03:
         29:d1:89:07:0c:63:14:15:e7:d1:bd:67:af:1f:15:0f:e9:0d:
         fd:58:18:eb:fa:3e:69:c1:c5:38:24:ae:2a:60:3c:47:89:3e:
         63:62:cb:7d:c5:2f:4c:0d:38:a0:4d:38:2d:91:31:45:2e:82:
         0b:a7:c6:a5:05:3d:28:83:4d:21:65:09:36:97:37:39:ec:c5:
         28:c0:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org