Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          SJcu24JK/x68uotkmCh2/TCulGnGIm3Dl6dLGRAYKHo=
Subject key identifier:   10:57:09:7D:1C:9A:F1:CE:47:19:A5:20:51:CE:DF:60:01:B3:D6:35
Certificate issuer:       /CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
Certificate serial:       43A75706DA1DE2CEC7E2A5136D018E9EB8C4E6A1
Authority key identifier: 57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa
Signing time:             Wed 27 Dec 2023 11:52:46 +0000
ROA not before:           Wed 27 Dec 2023 11:47:46 +0000
ROA not after:            Wed 25 Dec 2024 11:52:46 +0000
asID:                     267513
IP address blocks:        168.194.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:57:06:da:1d:e2:ce:c7:e2:a5:13:6d:01:8e:9e:b8:c4:e6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
        Validity
            Not Before: Dec 27 11:47:46 2023 GMT
            Not After : Dec 25 11:52:46 2024 GMT
        Subject: CN=1057097D1C9AF1CE4719A52051CEDF6001B3D635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:2b:1f:a9:bc:16:ed:19:25:93:d7:c7:50:
                    e6:3a:09:f6:de:5b:8a:b1:a2:8f:08:c4:76:1f:f6:
                    e4:4d:a3:19:b6:be:fa:34:48:b9:05:03:f9:9b:0f:
                    ba:0e:14:83:cf:ff:41:23:de:be:e7:89:aa:25:42:
                    d0:a4:55:f1:ec:e8:72:96:8a:12:dd:23:9e:7d:e9:
                    84:14:49:4b:15:a0:d0:f0:7d:42:76:1e:99:f5:64:
                    52:d9:4d:be:24:d8:52:23:2e:8a:6b:4a:52:c1:24:
                    c9:e4:ac:b3:bf:f5:a5:ca:1e:ec:ad:ab:b5:46:92:
                    9d:25:6f:99:c4:ad:62:fc:a4:d0:f0:e1:2d:eb:b0:
                    af:33:29:85:4e:65:f5:c8:8b:85:58:7d:1f:02:7f:
                    88:eb:52:78:bf:b5:18:42:b3:4b:2b:b4:33:c8:8d:
                    e6:15:92:6d:de:54:44:2d:50:0e:33:43:92:9c:6a:
                    3e:ff:b9:1f:97:f5:9d:b8:c8:13:db:44:c7:27:da:
                    7e:ca:60:5b:be:e4:81:1a:c0:96:04:6f:54:29:e8:
                    a9:32:52:ef:01:e7:c1:ef:9e:eb:77:72:3c:c1:81:
                    9a:97:e0:91:d7:82:08:e9:19:df:2d:52:0d:bd:1b:
                    a4:fb:0f:49:f0:9c:ec:92:d7:58:65:ae:61:bb:86:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:09:7D:1C:9A:F1:CE:47:19:A5:20:51:CE:DF:60:01:B3:D6:35
            X509v3 Authority Key Identifier:
                keyid:57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35382e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:fd:38:f0:10:2e:14:18:79:6e:04:33:8e:fc:18:78:73:39:
         7e:a2:02:ee:3b:ad:58:71:e8:87:b7:99:f4:5d:87:97:15:a0:
         a5:c5:1f:04:f5:57:29:ed:43:bd:b4:12:78:82:6c:45:63:9e:
         cd:3c:da:8c:31:38:8e:c7:bf:01:6b:05:dc:89:52:ad:37:f6:
         bf:65:3f:3c:62:b8:32:95:f7:22:6d:ef:3a:50:83:c5:21:e6:
         f6:39:b6:39:09:a5:d8:64:33:d3:0a:7b:9d:b4:0b:ca:6b:27:
         88:e0:9b:67:66:c2:15:3b:26:55:3e:21:61:1b:c9:53:b0:b6:
         7b:b6:38:c3:d0:90:6b:ac:64:bc:25:6f:e2:68:64:e4:a3:b9:
         b0:67:49:bd:c4:8a:28:af:f2:5a:71:8a:d0:5f:a6:ef:79:29:
         97:78:6c:7f:6b:d0:75:45:4a:9f:b4:79:e6:ef:00:69:09:03:
         00:93:40:51:b5:f5:7a:f6:3a:1a:7a:e8:fc:de:27:05:b9:6a:
         95:3f:fb:c1:6f:25:d2:50:cc:72:7b:f9:b9:04:26:2f:f5:7b:
         6b:45:49:16:28:5c:4b:82:90:89:78:aa:72:c9:29:3f:fb:46:
         8e:b7:b9:62:7e:fc:b8:ef:a1:46:06:c1:0b:8d:76:ae:de:98:
         c9:51:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org