Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa
File:                     3133382e35392e34362e302f32332d3233203d3e20323634353935.roa (raw, json)
Hash identifier:          GOBHIbJDhCsJvFRQVVieUxKCbLCR9qbgzuYg24VQlv4=
Subject key identifier:   6B:68:A4:98:F9:AF:5F:43:7C:D1:68:8B:7C:98:C4:4A:57:BE:ED:EA
Certificate issuer:       /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial:       094D14E1EAA74172DF40B9CDFA562C1D9B5A844E
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa
Signing time:             Mon 01 Apr 2024 14:40:09 +0000
ROA not before:           Mon 01 Apr 2024 14:35:09 +0000
ROA not after:            Mon 31 Mar 2025 14:40:09 +0000
asID:                     264595
IP address blocks:        138.59.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:4d:14:e1:ea:a7:41:72:df:40:b9:cd:fa:56:2c:1d:9b:5a:84:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
        Validity
            Not Before: Apr  1 14:35:09 2024 GMT
            Not After : Mar 31 14:40:09 2025 GMT
        Subject: CN=6B68A498F9AF5F437CD1688B7C98C44A57BEEDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:41:d8:cb:7e:44:ca:ea:99:ff:e2:ef:e2:
                    82:5d:e4:7c:2c:db:df:fa:f5:ca:6b:1c:84:56:83:
                    84:12:9b:0a:c2:b4:38:17:49:4a:e5:36:31:53:85:
                    80:43:ef:34:4a:8a:f9:02:71:1c:2d:79:12:8f:6e:
                    c4:fa:65:b2:2b:11:cd:e6:f2:d0:ad:10:41:d8:aa:
                    5c:21:ee:fc:12:88:72:e0:4a:60:c6:da:12:00:f2:
                    1c:b3:62:0b:6b:0c:10:03:45:a3:46:be:ee:a6:6c:
                    dc:4f:bb:f5:26:94:62:38:b4:0a:89:42:cb:e8:15:
                    b4:f0:90:25:e4:6d:ee:40:95:b4:d3:a9:15:ab:b2:
                    a7:c9:b9:ec:08:c7:48:83:67:4f:42:f9:45:56:87:
                    d9:6c:ce:6b:8d:13:b7:8a:be:57:05:df:5e:70:b3:
                    30:e6:49:69:86:0b:4e:86:b3:f7:91:e3:96:ca:ff:
                    41:5b:60:f5:11:95:e5:4f:7c:7f:6a:2f:2a:69:5d:
                    cb:f8:40:46:63:f6:3c:7e:f3:d9:62:1e:54:35:04:
                    16:84:58:31:07:9b:31:ce:ec:be:76:5f:1f:4c:47:
                    10:f9:1b:5e:cf:45:9d:6e:7e:42:d4:98:0d:43:e3:
                    48:1d:f9:af:b2:11:20:17:33:7e:6d:06:f3:7d:64:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:A4:98:F9:AF:5F:43:7C:D1:68:8B:7C:98:C4:4A:57:BE:ED:EA
            X509v3 Authority Key Identifier:
                keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:54:6c:6f:80:b9:9f:a8:2d:42:2c:a5:71:67:ea:55:83:c2:
         8f:11:1a:d3:a9:09:6d:08:1c:e3:66:ca:71:16:35:c2:2b:40:
         3e:cc:af:f9:f5:4c:c4:eb:8a:b4:86:d2:79:7e:4f:59:77:ba:
         24:c4:ef:9e:3f:d0:2e:ae:f4:8d:ab:27:60:2b:1c:32:94:1d:
         e6:9a:11:47:6d:dc:33:ba:ff:d9:9d:2b:74:d8:5f:66:9a:b4:
         73:1b:88:de:7e:56:e3:ce:08:68:46:59:65:58:e7:1c:81:2b:
         0a:f8:5b:24:e1:36:6d:17:06:2a:c1:af:18:bc:02:5c:13:b6:
         99:32:12:95:c7:77:aa:fd:e2:d4:b0:27:54:2e:84:10:a3:97:
         71:a3:87:89:65:f9:0a:61:69:2a:41:bb:e4:2b:dd:dc:e7:14:
         63:3a:90:2c:86:c3:80:79:af:70:99:a1:99:a9:db:0d:09:9e:
         6c:3f:f9:84:7d:f9:2f:44:4d:23:4a:09:19:77:a2:82:89:15:
         3b:52:e7:99:93:0b:34:1c:5e:eb:8c:08:fd:4d:1c:e1:b0:77:
         35:da:28:f8:78:f4:f0:4d:81:09:19:44:d1:c1:64:12:84:f5:
         59:10:59:0d:0d:83:24:e1:96:4f:b1:31:42:64:83:d1:ae:a3:
         e2:03:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org