Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          H3kMIa/R9ZYlKx82h/ZO//ufLton2tzMNePQRvpfwic=
Subject key identifier:   95:11:06:AE:53:8D:BD:2E:B0:FD:B8:CE:A9:86:CD:32:71:60:B5:5C
Certificate issuer:       /CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
Certificate serial:       061AE760F2B5ECC6A31B93A9DE381D67D7A75B0B
Authority key identifier: 59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Sun 10 Dec 2023 14:29:48 +0000
ROA not before:           Sun 10 Dec 2023 14:24:48 +0000
ROA not after:            Sun 08 Dec 2024 14:29:48 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1a:e7:60:f2:b5:ec:c6:a3:1b:93:a9:de:38:1d:67:d7:a7:5b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F
        Validity
            Not Before: Dec 10 14:24:48 2023 GMT
            Not After : Dec  8 14:29:48 2024 GMT
        Subject: CN=951106AE538DBD2EB0FDB8CEA986CD327160B55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:ef:9d:91:ab:04:05:1c:79:e9:af:59:e2:
                    a6:19:f4:20:c5:30:a9:a9:cd:81:da:15:a5:48:ce:
                    7d:80:fb:90:bd:eb:4c:02:0a:a1:02:69:63:c0:84:
                    54:66:2c:63:4f:41:e8:a2:11:39:9f:19:c3:b1:2a:
                    a8:d5:21:60:6b:76:ed:84:25:7e:06:c5:56:36:6f:
                    61:93:3d:8b:18:f8:90:a4:87:7e:17:ab:e4:27:b8:
                    0d:95:b6:f4:ab:9a:60:89:da:43:95:f1:ba:8d:62:
                    54:db:c7:fc:73:92:9c:ea:4c:2f:b2:6e:ac:81:4f:
                    a6:00:a6:22:ef:31:b7:55:cb:3b:0e:4c:d7:f4:72:
                    5d:a8:58:79:16:f5:81:2e:39:89:e9:3b:2c:72:22:
                    7e:3d:2b:09:5f:3b:5f:7e:25:db:75:aa:d0:a2:c9:
                    28:b0:22:8c:90:d6:17:cb:1e:4d:38:16:86:42:4f:
                    4a:bb:96:9c:8c:03:9f:d8:09:55:df:1c:f1:fc:55:
                    29:c0:88:58:c8:07:af:b7:ce:d0:ac:19:46:64:93:
                    f2:29:28:bd:aa:2b:48:35:3c:f5:eb:a6:28:92:58:
                    f6:b9:ad:aa:43:7a:f0:4d:27:3f:1f:75:d7:3d:0a:
                    bd:12:38:d2:62:58:98:9d:78:b3:d0:5e:58:94:ba:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:11:06:AE:53:8D:BD:2E:B0:FD:B8:CE:A9:86:CD:32:71:60:B5:5C
            X509v3 Authority Key Identifier:
                keyid:59:E5:F3:A6:A1:FA:A3:AC:B5:0B:1D:AD:FB:8E:EA:6C:6B:32:ED:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59E5F3A6A1FAA3ACB50B1DADFB8EEA6C6B32ED8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:eb:f3:07:4b:ad:2c:a3:eb:9a:01:23:33:0f:79:0e:70:
         77:6e:fd:85:14:00:2d:fa:51:5b:09:e0:ae:74:42:74:81:86:
         a5:d2:fe:47:26:a2:2a:e0:b5:ab:9b:be:9a:84:f4:e7:92:73:
         61:e3:86:5b:2a:23:06:77:66:ad:00:ad:0e:43:e3:7d:8b:23:
         19:03:05:ef:0b:a7:40:43:42:78:ce:de:9f:22:5e:bb:eb:f6:
         f0:c6:99:ff:f0:11:2a:84:9d:68:24:76:cc:a3:b3:7d:55:37:
         99:94:76:dc:62:13:ba:55:f5:7f:24:4f:48:54:42:08:37:a6:
         6a:ff:13:35:da:8d:cd:bd:54:58:0e:e5:32:15:b5:86:4e:79:
         f5:a3:6c:cd:9e:d4:5a:66:a2:96:ea:76:3d:38:72:0b:3e:32:
         d1:8b:7e:94:71:5d:bb:16:6a:cd:e8:14:2a:0a:a8:5b:23:27:
         ba:aa:9c:8a:54:69:85:36:b0:34:d7:e9:f4:fd:2f:fd:cd:03:
         30:34:58:83:da:5a:5d:30:2e:e4:80:f6:9c:59:1e:a2:d4:e2:
         59:a1:4c:bd:f0:f0:10:02:15:99:1e:ec:ba:71:08:ac:c4:fc:
         20:03:80:6c:58:34:53:f5:e7:95:ae:95:fd:cd:3d:8a:0f:76:
         e5:63:76:33
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUBhrnYPK17MajG5Op3jgdZ9enWwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlFNUYzQTZBMUZBQTNBQ0I1MEIxREFERkI4RUVBNkM2
QjMyRUQ4RjAeFw0yMzEyMTAxNDI0NDhaFw0yNDEyMDgxNDI5NDhaMDMxMTAvBgNV
BAMTKDk1MTEwNkFFNTM4REJEMkVCMEZEQjhDRUE5ODZDRDMyNzE2MEI1NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNO+dkasEBRx56a9Z4qYZ9CDF
MKmpzYHaFaVIzn2A+5C960wCCqECaWPAhFRmLGNPQeiiETmfGcOxKqjVIWBrdu2E
JX4GxVY2b2GTPYsY+JCkh34Xq+QnuA2VtvSrmmCJ2kOV8bqNYlTbx/xzkpzqTC+y
bqyBT6YApiLvMbdVyzsOTNf0cl2oWHkW9YEuOYnpOyxyIn49KwlfO19+Jdt1qtCi
ySiwIoyQ1hfLHk04FoZCT0q7lpyMA5/YCVXfHPH8VSnAiFjIB6+3ztCsGUZkk/Ip
KL2qK0g1PPXrpiiSWPa5rapDevBNJz8fddc9Cr0SONJiWJideLPQXliUuoHDAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUlREGrlONvS6w/bjOqYbNMnFgtVwwHwYDVR0j
BBgwFoAUWeXzpqH6o6y1Cx2t+47qbGsy7Y8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzMvNTlFNUYzQTZBMUZBQTNBQ0I1MEIxREFERkI4RUVBNkM2QjMyRUQ4Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81OUU1RjNBNkExRkFBM0FDQjUw
QjFEQURGQjhFRUE2QzZCMzJFRDhGLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzMvMzEz
ODM2MmUzMjMxMzEyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzAz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEutNgMA0GCSqGSIb3DQEBCwUAA4IBAQBdmOvzB0utLKPr
mgEjMw95DnB3bv2FFAAt+lFbCeCudEJ0gYal0v5HJqIq4LWrm76ahPTnknNh44Zb
KiMGd2atAK0OQ+N9iyMZAwXvC6dAQ0J4zt6fIl676/bwxpn/8BEqhJ1oJHbMo7N9
VTeZlHbcYhO6VfV/JE9IVEIIN6Zq/xM12o3NvVRYDuUyFbWGTnn1o2zNntRaZqKW
6nY9OHILPjLRi36UcV27FmrN6BQqCqhbIye6qpyKVGmFNrA01+n0/S/9zQMwNFiD
2lpdMC7kgPacWR6i1OJZoUy98PAQAhWZHuy6cQisxPwgA4BsWDRT9eeVrpX9zT2K
D3blY3Yz
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org