Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32332d3233203d3e20323632353530.roa
File:                     3137372e37322e3136382e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          W0LmQP6CWGjBfFzqcubn2dNjljRjwew8y3vF2vf0Kpw=
Subject key identifier:   01:DA:D2:6D:54:BB:0B:88:B6:D7:4E:39:30:0F:B3:01:2B:D3:11:3F
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       417ABC22828FCE18E1AF2022D38D93353BD9CAF6
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:01 +0000
ROA not before:           Tue 14 Mar 2023 18:55:01 +0000
ROA not after:            Tue 12 Mar 2024 19:00:01 +0000
asID:                     262550
IP address blocks:        177.72.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7a:bc:22:82:8f:ce:18:e1:af:20:22:d3:8d:93:35:3b:d9:ca:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:01 2023 GMT
            Not After : Mar 12 19:00:01 2024 GMT
        Subject: CN=01DAD26D54BB0B88B6D74E39300FB3012BD3113F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:4e:43:8c:38:73:c7:f4:3f:11:67:f6:5f:
                    7b:5b:ed:ad:ef:05:52:cb:f4:48:7f:41:a0:e1:d8:
                    a2:66:43:02:2d:66:eb:6f:ef:6c:e8:a3:a4:fb:e1:
                    ea:de:b9:f5:e9:30:db:0a:e7:8c:06:aa:96:3e:53:
                    f2:bd:8c:d0:7e:d7:a1:d7:a1:9f:0e:dd:4f:59:82:
                    e7:f4:bb:27:68:dc:ff:de:b8:a3:78:c9:36:46:7a:
                    2e:87:0d:05:a9:d2:c0:99:07:c3:02:40:bf:bd:c0:
                    6e:ef:7e:28:a7:a3:2d:97:5b:1c:de:85:8e:87:85:
                    3d:e1:59:28:06:27:7a:dd:5a:f7:60:e6:ba:d0:9e:
                    9b:c8:d7:64:8e:b6:ab:df:e3:9f:55:0b:99:05:ae:
                    59:77:c3:d5:8d:9b:f4:87:21:1d:ef:93:92:52:ab:
                    da:ef:26:9f:ff:0a:60:24:dd:db:d8:64:61:0b:2d:
                    35:c0:96:34:9b:15:21:ca:64:75:b8:bf:83:3e:29:
                    1c:e4:d9:75:1f:19:1a:3f:e6:44:a8:cd:2b:f0:ad:
                    e1:45:5a:92:c1:da:b1:da:a6:42:0f:db:be:da:61:
                    c4:04:61:be:7b:6e:d7:00:60:03:81:f2:71:b9:09:
                    70:46:b5:a6:e9:1f:a3:11:2c:79:0b:ee:35:e7:29:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:D2:6D:54:BB:0B:88:B6:D7:4E:39:30:0F:B3:01:2B:D3:11:3F
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3136382e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:ff:71:cd:e0:dc:17:ef:79:88:a1:86:df:54:82:ef:cf:85:
         40:0c:62:13:f4:d3:38:a6:5b:88:7d:17:b5:9f:e2:33:a4:1b:
         b9:df:ff:c1:e8:97:44:67:bb:f0:cd:44:93:ea:73:e1:0f:c0:
         85:44:27:e4:2f:80:b7:b3:60:86:b8:61:4a:cd:d6:1a:03:25:
         4e:47:25:27:bf:94:0d:0c:5d:45:3a:2b:c1:37:a6:35:42:c3:
         f3:7b:7c:80:4c:ba:71:d9:39:37:77:0d:a4:ca:a5:6c:30:75:
         e5:ad:a0:be:41:32:22:ac:45:84:04:cb:0d:2e:66:c7:88:7a:
         39:43:6a:56:82:1e:44:36:3a:0a:07:73:f7:4c:0b:14:8a:c5:
         d9:90:6a:6c:fd:0e:e0:e1:14:97:85:40:b8:bb:97:69:f3:bd:
         01:4e:f9:dc:f2:54:4f:86:06:a6:7e:c0:8c:2c:50:5c:c8:bc:
         d3:99:71:2b:d7:5e:68:dd:40:87:ce:80:32:bc:80:07:0e:b4:
         72:cb:4a:86:47:5f:d6:ba:58:07:5a:5d:be:35:3c:35:44:de:
         ac:56:7a:15:53:f7:7d:7b:02:8b:27:33:03:1b:43:b8:a0:79:
         d0:cc:38:4a:a3:1b:1e:54:89:54:f1:a5:89:51:39:3f:17:5e:
         70:97:4c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org