Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa
File:                     3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          we68TZJ/roFMigs81RhJr6byIrUMEzAe5RREhl1K2bo=
Subject key identifier:   CD:8B:E8:93:86:1B:28:AA:3F:D0:7E:8A:DC:A2:18:30:45:3B:45:A3
Certificate issuer:       /CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
Certificate serial:       7D3C73A43210BA55D7E8BB48A8AA1309036D682D
Authority key identifier: 57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa
Signing time:             Wed 27 Dec 2023 11:48:28 +0000
ROA not before:           Wed 27 Dec 2023 11:43:28 +0000
ROA not after:            Wed 25 Dec 2024 11:48:28 +0000
asID:                     267513
IP address blocks:        168.194.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3c:73:a4:32:10:ba:55:d7:e8:bb:48:a8:aa:13:09:03:6d:68:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
        Validity
            Not Before: Dec 27 11:43:28 2023 GMT
            Not After : Dec 25 11:48:28 2024 GMT
        Subject: CN=CD8BE893861B28AA3FD07E8ADCA21830453B45A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:28:e1:aa:da:a8:db:67:4a:27:04:73:fe:31:
                    b0:a3:19:cb:fb:5a:c8:8b:c7:f2:7a:65:6e:83:ad:
                    cf:24:77:e0:f1:f2:b1:af:69:99:7a:0c:98:61:c5:
                    99:9c:47:4f:be:5c:b5:6b:6c:63:d5:bb:44:3c:cc:
                    99:d6:59:2d:44:99:0f:ed:e8:89:42:f1:d3:ba:8c:
                    01:99:12:86:9c:a0:64:96:d8:ee:e5:46:72:7f:95:
                    ee:73:b6:ce:6b:89:0c:fd:e3:29:6a:1d:34:e2:3a:
                    8b:7e:33:c1:bc:dd:ca:04:97:7c:23:3f:eb:62:78:
                    ff:a1:11:52:9f:8d:90:35:fa:bb:0e:6f:ea:b2:ee:
                    e4:ae:51:cb:97:26:08:8f:eb:e4:9a:bc:b3:66:eb:
                    75:2d:54:6c:d2:f6:d9:3f:a3:84:6f:c5:7a:89:1e:
                    93:74:77:07:13:df:0a:6e:3d:1e:cc:a8:63:16:4b:
                    3d:0c:ef:1f:de:d3:da:6f:87:32:5c:c7:31:ce:c7:
                    c0:ae:89:6c:ea:e8:35:21:4e:cf:2c:6a:dd:a4:21:
                    a4:75:0d:52:8e:7a:df:b5:c5:40:ce:19:c9:55:28:
                    50:5e:7e:75:73:74:19:df:ff:4a:43:47:6e:25:a4:
                    bf:b0:e0:53:de:39:18:74:17:19:c7:e7:28:f3:12:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8B:E8:93:86:1B:28:AA:3F:D0:7E:8A:DC:A2:18:30:45:3B:45:A3
            X509v3 Authority Key Identifier:
                keyid:57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3136382e3139342e35392e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:3c:d8:ed:cd:e2:75:a2:b7:c2:58:60:24:3b:a9:1c:bb:
         5f:2e:ab:fa:87:e9:bc:1e:9f:3e:36:4e:e9:f4:d2:75:c2:9a:
         91:a8:6a:15:be:fc:a8:32:d9:d7:02:2a:89:03:37:8b:da:e8:
         36:00:4b:b8:25:69:23:2f:b7:c7:a2:01:0c:96:c3:a1:c5:f3:
         5a:38:8e:b0:08:b8:98:7a:54:d3:c1:89:68:3e:49:2f:74:5c:
         f8:d3:63:2b:64:76:b0:eb:a4:9c:29:a6:62:21:dd:6e:9b:44:
         ca:c1:d3:61:da:27:d2:52:ee:d8:64:14:e9:c4:e7:a1:9b:28:
         9a:9a:46:85:4c:06:9d:fc:4d:55:69:14:93:29:55:34:96:d6:
         6c:41:aa:02:2f:a4:09:1b:da:72:fc:c3:03:7f:fc:2f:21:e2:
         16:b8:65:37:08:0e:5a:1b:16:34:1b:fe:ab:30:c4:9b:a7:2d:
         86:91:e5:ff:dc:5e:65:48:01:62:5e:37:59:94:0b:5d:2a:f4:
         aa:8b:96:e5:91:eb:7b:4f:60:25:ec:04:19:ca:2e:c9:d6:4a:
         2c:e5:0e:6f:cd:98:35:fb:3c:54:39:f2:56:fe:6e:5f:1b:81:
         47:bf:f3:1e:98:1b:39:dc:fb:6a:8e:99:88:c4:ec:e8:84:9e:
         f0:e9:b7:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfTxzpDIQulXX6LtIqKoTCQNtaC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2QzE0RUQ5QkE4NTdGOTNFNzgzQTVBQkUwNzE4NDZG
NTRDREUyMTAeFw0yMzEyMjcxMTQzMjhaFw0yNDEyMjUxMTQ4MjhaMDMxMTAvBgNV
BAMTKENEOEJFODkzODYxQjI4QUEzRkQwN0U4QURDQTIxODMwNDUzQjQ1QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKOGq2qjbZ0onBHP+MbCjGcv7
WsiLx/J6ZW6Drc8kd+Dx8rGvaZl6DJhhxZmcR0++XLVrbGPVu0Q8zJnWWS1EmQ/t
6IlC8dO6jAGZEoacoGSW2O7lRnJ/le5zts5riQz94ylqHTTiOot+M8G83coEl3wj
P+tieP+hEVKfjZA1+rsOb+qy7uSuUcuXJgiP6+SavLNm63UtVGzS9tk/o4RvxXqJ
HpN0dwcT3wpuPR7MqGMWSz0M7x/e09pvhzJcxzHOx8CuiWzq6DUhTs8sat2kIaR1
DVKOet+1xUDOGclVKFBefnVzdBnf/0pDR24lpL+w4FPeORh0FxnH5yjzEgl1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzYvok4YbKKo/0H6K3KIYMEU7RaMwHwYDVR0j
BBgwFoAUV2wU7ZuoV/k+eDpavgcYRvVM3iEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC81NzZDMTRFRDlCQTg1N0Y5M0U3ODNBNUFCRTA3MTg0NkY1NENERTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3NkMxNEVEOUJBODU3Rjkz
RTc4M0E1QUJFMDcxODQ2RjU0Q0RFMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzNjM4MmUzMTM5MzQyZTM1MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACowjswDQYJKoZIhvcNAQELBQADggEBAE1yPNjt
zeJ1orfCWGAkO6kcu18uq/qH6bwenz42Tun00nXCmpGoahW+/Kgy2dcCKokDN4va
6DYAS7glaSMvt8eiAQyWw6HF81o4jrAIuJh6VNPBiWg+SS90XPjTYytkdrDrpJwp
pmIh3W6bRMrB02HaJ9JS7thkFOnE56GbKJqaRoVMBp38TVVpFJMpVTSW1mxBqgIv
pAkb2nL8wwN//C8h4ha4ZTcIDlobFjQb/qswxJunLYaR5f/cXmVIAWJeN1mUC10q
9KqLluWR63tPYCXsBBnKLsnWSizlDm/NmDX7PFQ58lb+bl8bgUe/8x6YGznc+2qO
mYjE7OiEnvDpt10=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org