Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32332d3233203d3e20323632353530.roa
File:                     3137372e37322e3137322e302f32332d3233203d3e20323632353530.roa (raw, json)
Hash identifier:          /JmvTLf+QC1nQ183VUJDxK9weWguMcj8qKd+z8I0pXY=
Subject key identifier:   D3:2C:C7:2A:19:72:71:AA:8A:5A:70:E6:AB:12:57:0C:AA:73:66:19
Certificate issuer:       /CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
Certificate serial:       10124D3AFBD76D95931128C304F06A25E9AF708F
Authority key identifier: 59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32332d3233203d3e20323632353530.roa
Signing time:             Tue 14 Mar 2023 19:00:01 +0000
ROA not before:           Tue 14 Mar 2023 18:55:01 +0000
ROA not after:            Tue 12 Mar 2024 19:00:01 +0000
asID:                     262550
IP address blocks:        177.72.172.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:12:4d:3a:fb:d7:6d:95:93:11:28:c3:04:f0:6a:25:e9:af:70:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1
        Validity
            Not Before: Mar 14 18:55:01 2023 GMT
            Not After : Mar 12 19:00:01 2024 GMT
        Subject: CN=D32CC72A197271AA8A5A70E6AB12570CAA736619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d6:87:84:b2:5e:ae:99:8f:c2:c9:ac:8d:1e:
                    10:14:c3:87:80:27:6c:ac:e9:81:8a:67:b8:22:aa:
                    46:3d:e9:d7:7e:0d:c8:d2:64:86:83:3b:62:55:7c:
                    93:2f:f1:37:ef:81:ed:63:b1:a6:4a:55:d5:3e:a1:
                    59:b4:53:80:b3:96:ec:81:d8:07:92:fe:4c:12:6b:
                    a6:d8:ff:41:91:8a:27:e2:f9:d0:fb:3d:0d:60:50:
                    f1:e9:2b:1f:50:f3:d7:58:f1:54:89:a0:dc:2c:f7:
                    9c:f8:e1:8d:d5:64:ec:26:36:61:18:bf:27:71:cc:
                    d5:b9:e7:4c:d2:44:d3:35:48:7a:a3:77:e8:e3:3a:
                    b2:35:54:4d:58:d5:0d:6a:af:ed:a4:a5:2e:de:5d:
                    7a:f3:59:27:fa:1e:e3:c5:32:a4:d8:e6:ec:e4:f4:
                    75:c8:6c:8a:82:0c:10:50:c4:3e:a3:94:e6:08:bd:
                    67:ce:9b:55:6f:ae:ed:4c:2b:e1:96:87:b9:7a:41:
                    c1:59:32:3b:15:eb:e4:04:71:30:05:e1:0b:2f:ab:
                    62:52:d4:bc:93:da:56:61:91:64:01:c0:72:14:7d:
                    3f:08:d2:dd:88:5e:91:c2:8e:34:96:d0:58:92:13:
                    3a:fb:ae:6e:b2:dc:0a:3b:76:28:08:b1:37:56:b6:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:C7:2A:19:72:71:AA:8A:5A:70:E6:AB:12:57:0C:AA:73:66:19
            X509v3 Authority Key Identifier:
                keyid:59:E5:42:AC:3F:5F:9A:BF:7D:B8:F1:AF:7F:24:0E:42:D8:26:54:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E542AC3F5F9ABF7DB8F1AF7F240E42D82654D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3137372e37322e3137322e302f32332d3233203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:29:b1:76:65:b0:5c:c2:5c:a9:74:0b:8a:7c:65:f5:ea:72:
         66:70:07:93:ac:de:af:fe:c1:ff:3f:5d:7b:90:63:2e:79:6c:
         04:85:bc:01:86:8c:8a:cb:e5:f1:32:75:a0:09:8b:28:be:5b:
         ce:df:ee:53:2f:9a:1c:8f:2d:78:3e:fc:a8:cb:a1:1a:d2:49:
         5e:e4:4f:ba:63:50:2e:3c:72:93:04:fd:dc:0a:5d:83:6c:39:
         1d:68:03:ea:ee:0a:68:d2:ae:77:a2:54:68:ab:7d:e1:41:22:
         3b:b9:4a:aa:ef:74:3c:f9:44:11:12:36:9c:b8:c9:25:8b:d6:
         d9:22:08:8a:62:c7:3c:01:3e:a0:f6:e6:e5:55:70:2e:ec:55:
         63:af:7d:d7:46:12:97:21:3f:0e:93:08:66:e6:16:3c:63:51:
         d0:2e:b8:52:99:64:ac:ba:7e:f2:07:85:4c:3a:10:42:e7:41:
         26:60:c9:00:a1:ae:c6:1f:50:55:ba:9d:3e:1d:99:a7:74:ed:
         e0:78:c6:56:d8:a0:e3:8a:1d:d6:49:36:55:7e:1d:f1:f9:d0:
         03:5c:4f:f4:31:ff:36:5b:2c:da:23:81:a4:88:30:15:8c:95:
         d9:b2:2e:89:27:4f:dc:3d:24:72:67:b3:21:75:6e:16:63:76:
         9d:f6:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org