Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32332d3234203d3e20323634353936.roa
File:                     3133382e35392e34302e302f32332d3234203d3e20323634353936.roa (raw, json)
Hash identifier:          tNR1XssrwIDtFc6udbDUBXngeE2akFgAGslXqpbIVEk=
Subject key identifier:   3A:8F:C1:46:D4:EB:11:FB:29:2B:52:46:B2:D8:9E:17:7E:99:3B:25
Certificate issuer:       /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial:       41D0799F8A3CC0431E8451DA986EEB2FF11A16FC
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32332d3234203d3e20323634353936.roa
Signing time:             Tue 05 Mar 2024 16:05:35 +0000
ROA not before:           Tue 05 Mar 2024 16:00:35 +0000
ROA not after:            Tue 04 Mar 2025 16:05:35 +0000
asID:                     264596
IP address blocks:        138.59.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d0:79:9f:8a:3c:c0:43:1e:84:51:da:98:6e:eb:2f:f1:1a:16:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
        Validity
            Not Before: Mar  5 16:00:35 2024 GMT
            Not After : Mar  4 16:05:35 2025 GMT
        Subject: CN=3A8FC146D4EB11FB292B5246B2D89E177E993B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cd:25:11:da:da:1a:c2:e6:00:2f:ca:85:24:
                    0d:4c:fe:79:7a:3f:69:ca:a6:39:d5:08:7f:b3:32:
                    af:db:d9:ec:43:f8:63:f4:7e:82:4d:af:c9:3d:73:
                    59:8d:17:f9:88:3c:d3:05:13:34:b1:39:14:cd:a4:
                    7d:3d:85:2f:54:0b:4d:01:d4:43:9d:1c:06:91:bf:
                    40:c7:b4:a5:ae:27:db:6c:91:e3:3a:40:2b:47:59:
                    a5:73:4f:42:6e:2c:20:d3:e6:9e:75:70:b7:63:0e:
                    7d:91:86:00:2e:bd:59:7d:40:6b:80:45:4a:7a:cf:
                    d6:d8:c9:a0:1e:f8:c8:b1:56:f1:1e:f2:f5:13:1d:
                    e7:d6:33:22:0d:58:12:12:fb:8c:2c:d7:40:b3:f0:
                    b4:23:0c:e1:ca:f7:bd:63:2a:74:27:67:60:49:9b:
                    23:b1:e4:24:f8:9e:39:3a:4b:d0:f7:ef:13:ff:ed:
                    2e:3d:2b:4c:5d:5b:ce:0a:1c:89:aa:21:13:96:0d:
                    89:ab:03:73:4d:e2:3f:23:b6:7d:34:46:3a:04:49:
                    29:46:56:15:c2:34:5b:95:eb:ee:82:bc:ed:e9:e3:
                    b7:a5:f6:0b:f7:c3:f1:f6:5f:52:99:a2:12:0e:a1:
                    28:ca:39:bc:c7:7f:a7:c8:e4:f0:a3:a7:0d:87:87:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8F:C1:46:D4:EB:11:FB:29:2B:52:46:B2:D8:9E:17:7E:99:3B:25
            X509v3 Authority Key Identifier:
                keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32332d3234203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:7f:9e:a3:8c:12:ef:0e:d7:1a:19:92:a5:c3:55:d5:b4:
         3b:e3:ad:fc:c3:42:5a:02:75:35:af:a6:fc:65:05:f7:50:7e:
         34:81:30:0b:9c:21:17:c1:4e:e5:33:b2:45:d4:9e:95:45:f0:
         ff:73:b5:53:90:17:6b:0a:e6:9a:35:e1:8c:91:b6:bf:4e:49:
         c4:c4:65:18:6c:e8:f0:df:9a:c3:2c:d2:ed:cc:5c:f5:23:68:
         e9:f8:de:fb:40:cb:2c:77:dc:a6:dc:5e:95:4b:87:eb:2c:2e:
         64:db:06:e3:23:ce:a6:d1:59:3c:e8:35:22:27:4f:e3:41:1e:
         5e:d7:5d:6a:30:12:d1:ba:63:c0:9c:55:b9:67:17:02:40:57:
         b8:b4:50:68:59:b6:86:7b:83:ea:2c:35:1d:37:0a:2b:16:42:
         ba:de:2d:82:b8:13:0b:1a:86:8c:dd:d9:0d:ab:eb:bc:3d:6c:
         4e:07:cb:0b:da:14:83:52:44:2f:2a:c9:89:7c:5e:14:c2:21:
         42:41:9c:67:7b:e7:3f:9e:63:20:bf:e1:b5:8a:c7:f7:ad:24:
         a7:9f:68:d6:a0:be:83:2b:8a:07:52:b0:87:85:d4:20:59:7d:
         3c:24:4e:db:64:15:b0:54:fc:d1:f6:f0:72:2a:6f:78:96:8e:
         66:69:77:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org