Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35362e302f32332d3233203d3e203532363133.roa
File:                     3133382e33362e35362e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          TGYPTPnuQCbX0BIzgJDK68OdF59UtjdgQ9HYV/I8YkQ=
Subject key identifier:   9F:12:BE:65:C9:A6:84:7A:A3:6B:FD:79:E6:8B:A9:C2:02:0C:B5:4D
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       1A9AD54957790A949F6639A34726E63BE05E11BC
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35362e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:57 +0000
ROA not before:           Wed 06 Mar 2024 14:46:57 +0000
ROA not after:            Wed 05 Mar 2025 14:51:57 +0000
asID:                     52613
IP address blocks:        138.36.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9a:d5:49:57:79:0a:94:9f:66:39:a3:47:26:e6:3b:e0:5e:11:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:57 2024 GMT
            Not After : Mar  5 14:51:57 2025 GMT
        Subject: CN=9F12BE65C9A6847AA36BFD79E68BA9C2020CB54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:d2:42:60:dc:e0:e7:15:3b:8d:6f:7b:30:
                    08:98:e9:a1:91:dd:59:2b:cc:82:ff:36:e0:c1:09:
                    79:c7:f3:df:ee:47:d2:35:31:0b:fc:71:7a:9e:3a:
                    44:7a:21:2a:df:d3:ea:97:19:b1:c7:4d:81:24:9f:
                    90:f5:4a:a8:f2:ef:dd:75:9e:04:51:99:43:d6:48:
                    b3:7b:0a:68:e5:70:03:0b:c4:23:e5:c5:bd:ad:23:
                    a1:44:e3:09:c9:81:11:b3:25:4c:f9:be:85:ad:5e:
                    fb:7e:5f:f9:98:99:aa:cb:4d:29:90:18:1f:50:47:
                    8c:61:36:8f:17:3b:f2:4e:b8:6e:1c:04:3b:4b:76:
                    fd:09:22:bc:7f:02:e6:90:1e:66:e5:0b:c1:e2:6d:
                    d6:21:05:a5:b2:03:5c:7a:25:89:69:2a:59:b7:95:
                    28:79:56:65:ce:7c:86:94:c8:3b:4b:89:93:cd:15:
                    9d:b8:6f:3a:38:16:02:e2:ae:0d:83:c7:8c:a3:ea:
                    98:4a:77:a4:f9:40:e6:b7:76:ae:9e:22:83:04:f3:
                    39:b1:fe:33:68:42:b8:0d:b7:3f:7e:b4:40:86:fe:
                    d5:fb:dd:d0:b5:b2:fb:ea:7f:b3:38:c2:98:2a:41:
                    94:20:2f:fb:ad:f8:00:81:a1:62:df:1f:80:e3:0d:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:12:BE:65:C9:A6:84:7A:A3:6B:FD:79:E6:8B:A9:C2:02:0C:B5:4D
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35362e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:d3:60:d8:e0:60:c5:a3:b6:92:ae:a1:68:0b:49:47:28:
         76:5d:be:04:ff:a9:0d:6c:b0:f6:9d:be:e7:40:fb:da:57:9f:
         84:49:97:72:3e:f6:d1:a3:66:bb:26:38:bd:0c:23:38:93:a7:
         a7:2f:56:af:74:5f:50:f7:ca:96:13:30:33:e5:9b:40:57:64:
         80:8c:3b:8e:cc:af:36:f1:9a:f9:d5:6a:09:ea:14:99:d3:ab:
         9a:da:f0:34:c2:8a:a9:e9:35:7b:98:8c:0a:15:3c:a4:da:b3:
         bc:50:3a:59:72:03:0b:54:40:92:76:f7:50:a8:cf:70:87:9d:
         5c:04:85:ad:e2:31:74:ce:3b:97:e6:25:ab:06:14:a7:82:80:
         96:f6:7a:3a:f4:45:f2:da:ba:b3:a8:01:cf:0e:0b:af:2a:2a:
         bd:b8:b3:a4:e9:df:2e:b4:a7:d3:92:29:1a:c4:41:ee:4e:e9:
         49:cf:e9:80:fb:ef:72:ee:42:e0:fb:2b:0a:aa:63:61:b2:62:
         b3:46:1a:a2:cc:70:c6:12:76:10:96:21:ff:09:24:6b:2e:b4:
         de:25:e4:e9:ce:e7:74:51:78:42:75:66:7e:dd:a9:57:8b:a7:
         47:cd:18:b6:a3:bf:a9:95:af:c5:d0:f6:29:71:1a:52:26:51:
         06:e7:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org