Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3234382e302f32332d3233203d3e20323635343134.roa
File:                     3136382e3139342e3234382e302f32332d3233203d3e20323635343134.roa (raw, json)
Hash identifier:          O9amvx159ImJWyroEAk4bcsJga7dVjrUArYYAdbyY/M=
Subject key identifier:   E5:8E:A0:DD:94:D8:29:0C:42:90:13:C6:9C:97:B1:EE:AA:F0:57:09
Certificate issuer:       /CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
Certificate serial:       2BAB43E2888946D6BB4A949D85718179A73F5286
Authority key identifier: C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3234382e302f32332d3233203d3e20323635343134.roa
Signing time:             Fri 05 May 2023 18:04:20 +0000
ROA not before:           Fri 05 May 2023 17:59:20 +0000
ROA not after:            Fri 03 May 2024 18:04:20 +0000
asID:                     265414
IP address blocks:        168.194.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ab:43:e2:88:89:46:d6:bb:4a:94:9d:85:71:81:79:a7:3f:52:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559E73AC49546C7651D4CF85CAD64308E9041D4
        Validity
            Not Before: May  5 17:59:20 2023 GMT
            Not After : May  3 18:04:20 2024 GMT
        Subject: CN=E58EA0DD94D8290C429013C69C97B1EEAAF05709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:83:ad:6c:0e:e0:ea:d9:46:71:6b:4c:02:
                    6f:25:f8:14:6c:49:84:4c:14:32:ed:d3:b7:5e:8e:
                    24:43:37:33:f0:9f:38:c5:ea:66:04:28:15:bd:be:
                    b7:33:37:4b:30:59:ef:41:e1:b4:af:17:8c:52:64:
                    cc:0a:6c:cf:94:cd:2a:ac:00:a7:5b:52:da:42:a6:
                    29:62:23:63:bb:b9:e0:82:a3:4a:87:c2:e8:1d:64:
                    a7:6b:fd:c1:95:8e:55:5e:a1:a3:44:7c:1e:08:bb:
                    4a:b7:43:dd:c8:22:0b:db:bd:3e:36:8c:3f:49:d7:
                    27:06:9f:38:d7:4e:bc:3e:28:bc:b6:68:19:0a:d7:
                    ae:44:e9:1f:1f:5f:40:e7:4b:76:84:90:83:67:ed:
                    be:e9:b7:f8:f0:56:8f:de:fd:0b:7e:3a:2d:e1:da:
                    c5:08:69:b4:3c:60:51:60:4d:76:4a:1e:83:d8:89:
                    b7:d4:bf:ca:d9:ef:40:59:cd:aa:10:f2:bb:79:fa:
                    28:81:9c:b4:ae:00:37:96:fe:fb:f6:c5:8a:5e:a9:
                    ea:9a:e5:9a:d1:54:92:80:3c:2d:94:51:8d:27:55:
                    31:4e:b3:13:1f:a4:55:0d:d3:d2:04:01:cf:d2:c9:
                    ec:2b:31:e1:5d:65:2c:19:d5:2b:bb:ff:ce:2b:29:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8E:A0:DD:94:D8:29:0C:42:90:13:C6:9C:97:B1:EE:AA:F0:57:09
            X509v3 Authority Key Identifier:
                keyid:C5:59:E7:3A:C4:95:46:C7:65:1D:4C:F8:5C:AD:64:30:8E:90:41:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C559E73AC49546C7651D4CF85CAD64308E9041D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GCRQtyam2tyNfpe7eHUAZEvT2G7bqCAq8zxZHm4vVZy/0/3136382e3139342e3234382e302f32332d3233203d3e20323635343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:70:d7:c7:6e:52:e0:67:b5:4f:48:07:ba:92:fc:12:be:2d:
         2f:89:39:73:34:2d:d3:34:9d:8a:ea:49:bf:09:13:16:bd:82:
         fb:18:06:39:6c:a9:ac:db:83:66:b5:6a:f4:76:9e:fe:6a:50:
         b2:11:e6:b3:b6:02:1a:62:45:ba:de:0b:e8:a6:0f:7d:0b:55:
         21:09:ef:ba:a0:02:83:67:c9:ec:46:f1:35:60:16:11:9d:31:
         22:2a:db:60:4b:34:e5:c4:1c:14:7b:1c:4c:b8:38:d9:45:f6:
         92:d6:99:25:a9:55:ca:e2:e1:04:92:8f:8a:a1:25:22:0f:b8:
         de:ac:7f:af:8c:61:22:5e:85:33:e1:f9:ec:c9:95:a3:e0:0b:
         9d:21:3d:86:ac:ad:95:c6:67:50:39:8d:e1:bb:4b:8a:0f:5d:
         6e:49:d7:18:f8:0a:2c:74:9d:df:81:88:cb:75:f1:66:48:7a:
         5b:b8:30:0f:17:21:e4:cd:d8:60:e2:64:81:c4:d9:6d:b2:3a:
         60:82:3a:55:ac:d5:a0:4a:6e:7c:9f:0e:66:03:8c:d0:54:bb:
         8a:d8:f1:f5:56:3e:2d:c3:05:47:a4:57:c9:e4:f9:90:36:16:
         9b:49:61:70:58:f9:6e:19:65:f4:13:15:c5:8a:e5:ca:b9:fe:
         a6:58:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org