Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137302e302f32332d3233203d3e20323632353530.roa
File:                     3137372e37322e3137302e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          ZkUPC1KBoPCfpdWI3lLW+JOrU/g7g/XcDKs4qjpO8io=
Subject key identifier:   0B:EE:61:F5:14:12:C2:4E:AB:D6:90:8C:9C:44:16:D7:1E:5D:29:1A
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       3E7B165D6880B648E9E6978BD436447161771197
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137302e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:00 +0000
ROA not before:           Tue 14 Mar 2023 18:55:00 +0000
ROA not after:            Tue 12 Mar 2024 19:00:00 +0000
asID:                     262550
IP address blocks:        177.72.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:16:5d:68:80:b6:48:e9:e6:97:8b:d4:36:44:71:61:77:11:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:00 2023 GMT
            Not After : Mar 12 19:00:00 2024 GMT
        Subject: CN=0BEE61F51412C24EABD6908C9C4416D71E5D291A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:d1:a8:09:ef:3c:54:68:5a:87:d9:c1:b4:
                    12:53:10:74:ce:ca:5b:a1:75:36:03:36:2a:6e:e7:
                    c8:3e:7c:6b:0d:d4:a7:c8:e1:e5:b6:e5:83:f7:f4:
                    82:d9:52:90:44:7d:cb:20:98:91:37:43:f5:c1:b5:
                    02:2b:c9:6f:b0:6f:d5:0f:e2:d6:2b:dc:b1:f9:cd:
                    10:53:86:85:d3:7b:3b:25:0f:bd:4b:e8:b8:9e:47:
                    9a:98:30:c1:14:6a:08:77:11:9b:0a:eb:70:b6:af:
                    66:46:65:31:3d:68:2e:66:8e:a4:ee:b7:c0:8b:d5:
                    c9:53:8a:de:33:bd:59:77:78:a2:7a:2f:8f:29:ee:
                    26:73:1b:e2:75:90:ea:ae:10:91:99:c6:c7:40:ba:
                    31:42:af:e1:68:31:17:02:b5:6f:89:c0:87:3c:40:
                    44:dd:18:26:1c:86:a8:88:b1:b6:65:34:b0:2f:54:
                    41:4f:30:4e:8d:a2:c5:db:2d:f9:a5:69:f3:05:d3:
                    b4:4e:fb:69:15:78:ed:6b:d1:d3:32:50:62:bc:51:
                    85:4b:a6:8a:a0:9e:1b:62:a9:18:9c:e4:7d:cf:c2:
                    ab:ba:9a:8f:03:a7:b8:f3:bc:70:77:72:0a:84:87:
                    00:72:b5:b6:00:61:6c:8b:d6:fd:e5:a9:f1:fd:ce:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EE:61:F5:14:12:C2:4E:AB:D6:90:8C:9C:44:16:D7:1E:5D:29:1A
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137302e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:1b:d5:1f:b5:d9:55:e3:59:5b:25:ee:03:e2:37:99:d5:
         be:34:47:9a:af:58:25:c5:e1:8e:3d:c5:2c:2a:60:14:87:5c:
         b9:f2:f9:d7:cb:e5:cc:49:83:b5:ba:8e:d3:e1:bf:c5:29:36:
         ec:75:d5:3b:07:95:74:fa:d3:c3:57:d9:a5:c9:07:e3:33:af:
         26:70:70:ff:db:78:01:4d:f1:df:7f:12:29:01:d3:66:6c:d6:
         24:04:21:20:7b:51:ed:6d:8b:2f:5c:cd:a5:8f:7a:ab:72:e7:
         5b:3e:af:1e:cc:1c:0e:e5:b6:32:97:aa:bb:7d:da:b0:5b:da:
         6d:38:1e:5b:f0:6a:f2:ed:65:5d:d6:c0:59:2b:26:4b:3e:bb:
         37:04:bf:39:4c:c2:41:d1:b8:0e:30:30:a6:b8:ad:54:bf:1d:
         83:63:77:5d:dd:1b:bd:27:c6:ca:4a:6f:90:c5:09:18:3b:fb:
         54:e8:dd:ae:6f:58:2c:5c:75:fa:aa:cd:a9:2f:8b:80:ce:ed:
         f9:f6:c0:11:00:c9:68:43:dd:3b:3b:fd:69:5b:de:2d:72:ca:
         c7:cd:ba:55:e0:a3:54:83:cb:70:c9:bf:d0:c1:38:9b:de:0c:
         df:ff:25:ee:1e:8c:bf:a1:ed:27:25:f6:d4:c7:2f:83:e0:ca:
         47:f8:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org