Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa
File:                     3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          2mgSrLUt0Ub7wsHbwDe/OspdRnN7iQYTw/iSVqu632g=
Subject key identifier:   FB:88:F6:14:7F:A5:59:3C:0C:13:D4:61:20:D1:E4:F7:79:4C:1E:51
Certificate issuer:       /CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
Certificate serial:       550937E85866E734548C11397E3982CEDB5A64AA
Authority key identifier: 59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa
Signing time:             Thu 23 Nov 2023 14:23:14 +0000
ROA not before:           Thu 23 Nov 2023 14:18:14 +0000
ROA not after:            Thu 21 Nov 2024 14:23:14 +0000
asID:                     52631
IP address blocks:        200.229.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:09:37:e8:58:66:e7:34:54:8c:11:39:7e:39:82:ce:db:5a:64:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59BFA2FF28275A2F301C7FB1117398C02B8E40A3
        Validity
            Not Before: Nov 23 14:18:14 2023 GMT
            Not After : Nov 21 14:23:14 2024 GMT
        Subject: CN=FB88F6147FA5593C0C13D46120D1E4F7794C1E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:19:c4:af:a9:31:c3:7e:84:35:d2:69:c3:
                    66:d2:d6:b4:ea:14:5b:b4:d0:d2:00:a7:90:50:b8:
                    d0:96:53:f6:ab:df:fe:52:af:eb:34:81:f1:aa:23:
                    4e:a7:2f:66:93:2b:8b:e0:c3:ae:86:85:27:d1:19:
                    ff:2d:07:61:91:b0:b8:95:0b:1d:3d:c6:48:9c:af:
                    e6:be:00:60:c5:10:10:5d:cd:a0:af:f2:d8:40:3b:
                    17:7e:88:ce:b6:34:1f:4e:4a:8f:9a:98:f4:e4:24:
                    e6:7a:08:8d:2e:4b:68:86:56:06:6a:9d:ec:97:8b:
                    c5:38:cd:1c:58:75:9b:50:d1:67:36:e5:42:29:78:
                    dd:e0:60:ae:c9:12:bf:ab:92:ce:2b:7f:9b:c4:7c:
                    99:fd:7c:db:64:63:a3:9f:80:b7:a5:c0:6d:a0:91:
                    65:44:03:4f:12:a1:26:c1:44:c9:f0:78:c5:8e:fa:
                    c0:79:41:1e:66:1f:79:73:18:1d:cd:cc:1a:eb:95:
                    03:23:52:39:44:aa:2d:bd:63:18:14:51:cb:28:84:
                    b9:84:49:a8:21:87:02:fe:b6:64:93:71:bb:92:e4:
                    6d:7b:b1:56:3b:d0:9d:09:d4:3a:e8:c3:23:16:41:
                    62:af:6e:a6:6f:7b:83:dd:05:91:dc:cd:6c:92:8d:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:88:F6:14:7F:A5:59:3C:0C:13:D4:61:20:D1:E4:F7:79:4C:1E:51
            X509v3 Authority Key Identifier:
                keyid:59:BF:A2:FF:28:27:5A:2F:30:1C:7F:B1:11:73:98:C0:2B:8E:40:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59BFA2FF28275A2F301C7FB1117398C02B8E40A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJPRzitPeifEeKG5wiJCe6xEJNUJxrA4yJxWtzrcjNFp/0/3230302e3232392e3234352e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:34:85:b6:97:42:93:0d:10:f4:22:81:b0:8c:e0:f2:d7:cd:
         b0:a5:06:c0:e7:42:44:ca:8e:13:93:be:9e:80:e3:97:b8:ff:
         35:a0:0b:b3:8d:e1:7d:a1:c4:35:a0:46:9a:cc:74:63:f4:0f:
         6f:4b:ce:41:77:43:a2:30:15:40:3a:d9:55:b1:7b:39:32:f9:
         67:6d:74:10:53:62:f9:27:bd:54:e7:b9:7a:b2:3c:ca:69:d0:
         03:06:51:aa:91:70:80:b8:5b:88:05:a0:9a:ee:e6:c2:d4:c8:
         24:00:0e:b3:05:2e:80:2d:12:76:75:5e:3e:d2:eb:41:04:8d:
         00:1a:8e:21:49:c4:d9:57:2a:3e:2d:b6:53:dd:97:6a:8e:d6:
         dc:dc:43:2c:8f:f3:19:2d:9e:21:5d:d3:68:86:25:ff:06:4d:
         d1:f0:df:ab:ee:1d:4b:4d:7d:e8:8e:24:05:90:c3:1f:7f:50:
         da:8f:b2:01:ce:04:46:7c:ec:b6:35:78:2e:9b:cf:6f:2b:85:
         2d:d4:7b:9b:c0:81:ba:00:04:b1:c4:d7:e1:a1:cf:9b:90:8a:
         4a:65:c8:cf:d2:ae:df:91:3d:aa:b0:64:be:02:c2:5c:25:8f:
         3f:fd:b6:98:a0:13:a9:6b:94:c3:44:0e:ae:b3:d1:42:b7:20:
         f2:0c:01:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org