Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131322e302f32322d3232203d3e203238363036.roa
File:                     3133382e35392e3131322e302f32322d3232203d3e203238363036.roa (raw, json)
Hash identifier:          uVxR341CYEVl4SfxwZkvo81luOKvZJi97o/SughnTK0=
Subject key identifier:   8E:3A:CF:47:DE:47:7F:56:17:52:CC:AF:02:F5:E0:25:3D:AF:FD:31
Certificate issuer:       /CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Certificate serial:       2D5EA5A2840292ACD6B192B67CD2C9DDD185A361
Authority key identifier: D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131322e302f32322d3232203d3e203238363036.roa
Signing time:             Wed 06 Mar 2024 21:12:32 +0000
ROA not before:           Wed 06 Mar 2024 21:07:32 +0000
ROA not after:            Wed 05 Mar 2025 21:12:32 +0000
asID:                     28606
IP address blocks:        138.59.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:a5:a2:84:02:92:ac:d6:b1:92:b6:7c:d2:c9:dd:d1:85:a3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
        Validity
            Not Before: Mar  6 21:07:32 2024 GMT
            Not After : Mar  5 21:12:32 2025 GMT
        Subject: CN=8E3ACF47DE477F561752CCAF02F5E0253DAFFD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:d1:6b:05:c7:f7:4d:b2:8f:60:55:86:e3:
                    24:d3:27:d5:57:c3:12:57:56:b3:46:3f:c1:4d:75:
                    3b:0f:6d:1a:28:d6:2a:17:c0:2f:2a:e1:0b:88:20:
                    e1:15:bd:10:a2:15:d2:c7:a7:58:b0:a6:af:84:2f:
                    d6:d1:cc:a1:1b:30:a8:b8:38:f0:3a:1d:e9:a2:f5:
                    75:46:26:45:96:48:60:72:66:27:59:b2:c9:52:85:
                    59:de:24:9b:8e:48:a9:c6:fe:7f:18:f9:dd:1e:5d:
                    d4:fd:2c:e4:3d:90:56:e7:15:8d:55:bd:f2:2a:58:
                    d4:9c:e1:7a:11:7a:f8:65:b3:8f:95:28:94:3b:b9:
                    78:98:73:0a:13:d5:68:cc:83:3d:4f:3a:9c:4d:0c:
                    71:e4:f4:5a:db:29:2e:e7:22:45:20:bb:ad:c8:b6:
                    49:fc:39:54:80:9c:2a:2b:ac:aa:43:f1:1b:19:5f:
                    9c:05:78:43:ef:c6:9b:20:cc:81:dc:00:1c:0a:dc:
                    14:c3:f0:ed:f1:98:63:d0:94:6b:f0:da:22:84:85:
                    11:6d:6b:aa:1b:c9:68:4c:f8:d3:80:0a:f2:93:ee:
                    02:98:f0:65:cc:f3:83:50:d4:8d:3e:f7:29:17:04:
                    a0:65:13:fb:e5:f6:fc:11:28:09:a9:ac:3f:ad:95:
                    46:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3A:CF:47:DE:47:7F:56:17:52:CC:AF:02:F5:E0:25:3D:AF:FD:31
            X509v3 Authority Key Identifier:
                keyid:D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131322e302f32322d3232203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:fc:d4:bd:63:69:14:87:d0:e0:e6:1f:7a:28:5c:1f:a1:33:
         a3:47:92:c4:1f:53:37:9a:cb:23:81:d0:b2:e3:62:79:ef:53:
         1c:2a:e4:d4:57:fb:67:3a:76:a0:13:a8:90:62:32:e0:84:69:
         58:51:5f:22:74:9c:0d:7c:a8:dc:0c:5c:c8:e8:59:b8:54:19:
         85:62:4c:1f:77:47:c5:39:d9:16:96:eb:bd:8f:68:c4:fc:43:
         9f:39:14:74:bd:31:21:e3:e8:e7:53:0c:c2:cc:45:73:24:04:
         6f:dc:dd:e7:0d:8c:f3:de:d3:76:95:f9:5c:ad:a2:70:77:d6:
         58:5b:1f:48:0b:78:3c:ba:38:e8:33:34:4a:ed:3e:cc:78:6f:
         6d:f9:cb:5b:31:e2:80:88:ab:65:c8:00:45:54:9b:15:7e:f8:
         56:1c:39:43:5e:fa:e6:e3:21:d4:47:b4:24:9f:94:bf:68:8e:
         e2:39:3e:de:36:dc:9c:61:eb:1b:36:3a:2b:aa:e9:4a:50:72:
         a8:03:de:49:39:90:be:ae:08:84:e9:be:da:58:35:55:d0:fd:
         52:88:3b:39:64:59:4f:0b:ee:c5:2b:b4:59:7c:0c:5f:0c:01:
         b3:44:22:5a:af:b1:62:8d:4b:b0:b2:cd:da:ec:f5:6a:64:55:
         2a:5f:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org