Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e372e302f32342d3234203d3e20323632353530.roa
File:                     3136382e3139372e372e302f32342d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          vlw8LFb56s2ZqxP/ZlmmB8s6pv1O0mIoveYRYnH02t0=
Subject key identifier:   85:07:78:E8:15:EE:EB:89:11:03:96:CF:4F:B7:06:42:07:4E:C9:05
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       60B570FA75E292804C9A66179232C4A3B87600E4
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e372e302f32342d3234203d3e20323632353530.roa
Signing time:             Mon 05 Sep 2022 15:05:53 +0000
ROA not before:           Mon 05 Sep 2022 15:00:53 +0000
ROA not after:            Mon 04 Sep 2023 15:05:53 +0000
asID:                     262550
IP address blocks:        168.197.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b5:70:fa:75:e2:92:80:4c:9a:66:17:92:32:c4:a3:b8:76:00:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Sep  5 15:00:53 2022 GMT
            Not After : Sep  4 15:05:53 2023 GMT
        Subject: CN=850778E815EEEB89110396CF4FB70642074EC905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:42:1f:fa:aa:c7:37:47:7a:a9:4c:92:2f:b6:
                    07:8b:e5:40:ea:30:db:28:2d:4a:2e:c8:90:c3:bc:
                    77:4d:e1:62:74:a6:fd:7b:9c:d2:54:a9:7b:41:bc:
                    35:ee:77:56:13:8c:b9:b4:6e:c5:83:05:eb:03:b4:
                    42:4e:bc:e2:b6:c0:14:93:33:42:c1:05:89:b2:93:
                    cd:ff:6f:51:e3:31:d9:99:0a:f5:17:b4:1e:90:ad:
                    03:64:82:d4:92:fb:36:b6:6c:ea:44:1f:31:97:c1:
                    06:0b:97:78:c8:a7:a3:f1:5a:c9:10:5b:2b:97:bf:
                    23:ef:c8:a4:a7:c9:9a:15:d4:39:6c:dd:2c:dd:d3:
                    d7:8d:b8:19:88:bb:75:79:2c:64:4f:08:ce:35:c0:
                    4f:63:0e:58:45:9c:ae:c8:5c:0f:f2:64:fd:71:08:
                    b2:bc:6b:bc:8e:1f:39:d3:3b:a1:af:6c:61:a8:b8:
                    ce:2b:21:03:d5:21:4b:f5:9c:15:1e:a1:f9:e2:d1:
                    4a:bb:a8:8b:e4:30:ee:be:3c:d6:19:8c:ca:11:6f:
                    a1:b9:65:f0:df:5b:93:5e:c2:61:79:94:6e:12:65:
                    ff:69:77:5e:09:ca:5b:e0:d9:06:fa:f0:74:55:69:
                    77:41:e5:55:27:73:d8:11:6c:91:d8:29:fd:e0:47:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:78:E8:15:EE:EB:89:11:03:96:CF:4F:B7:06:42:07:4E:C9:05
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3136382e3139372e372e302f32342d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:a2:fd:56:b0:a9:49:ca:03:fa:19:9a:cf:7b:79:7f:18:
         3c:b3:02:ec:67:59:9f:c1:19:29:01:5c:62:e9:d6:e4:32:3a:
         7a:78:3e:f2:42:52:4d:12:b2:e4:09:6d:a1:b1:e0:79:06:cb:
         93:48:b4:0e:8d:37:2c:88:4d:0b:bd:44:c2:f8:37:5d:61:d9:
         00:e3:2b:c0:c0:28:59:9a:56:ae:90:04:59:60:78:bc:a1:06:
         e0:f2:bb:ce:10:62:74:d5:31:40:c0:2c:f3:a5:5c:d7:60:43:
         ea:12:71:ab:4a:3e:12:15:87:db:fc:84:3c:de:fc:4e:e7:52:
         93:7f:09:d2:f5:29:ba:b6:f3:eb:c5:67:9d:a2:1a:39:df:8f:
         57:18:c6:a1:95:70:bc:b5:e6:9b:93:b2:a9:e5:92:83:f3:3f:
         98:8a:09:05:f1:38:d9:a7:70:ce:4b:c1:12:35:bd:c4:b4:dc:
         f9:25:a0:d5:1d:d9:24:8b:2c:ae:29:84:c8:a1:8d:26:1e:2c:
         47:ad:c2:32:29:cb:c4:97:fa:88:24:c5:fb:84:e9:e2:28:a6:
         7c:e5:b8:1e:33:ef:0a:27:fe:a3:2e:c0:14:e0:17:10:fc:72:
         32:4c:a0:99:9a:13:75:66:7a:d8:6b:bb:80:c1:54:00:04:c2:
         93:b1:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org