Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3133382e35392e3135362e302f32322d3332203d3e20323633303432.roa
File:                     3133382e35392e3135362e302f32322d3332203d3e20323633303432.roa (raw, json)
Hash identifier:          UKz9HpnZ2r04WXQWi0AgQ7eedsuUMr5+5VB6P+do3AQ=
Subject key identifier:   2C:39:3F:EB:04:72:15:5B:4B:F6:94:97:66:C6:1D:D5:59:80:FD:E7
Certificate issuer:       /CN=90524BFE16E4163C4B4EB6424540F3989155006C
Certificate serial:       3FCDF91903E4E7FC9D84B8A3205B9F6159A860A1
Authority key identifier: 90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3133382e35392e3135362e302f32322d3332203d3e20323633303432.roa
Signing time:             Mon 03 Apr 2023 19:16:19 +0000
ROA not before:           Mon 03 Apr 2023 19:11:19 +0000
ROA not after:            Mon 01 Apr 2024 19:16:19 +0000
asID:                     263042
IP address blocks:        138.59.156.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cd:f9:19:03:e4:e7:fc:9d:84:b8:a3:20:5b:9f:61:59:a8:60:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90524BFE16E4163C4B4EB6424540F3989155006C
        Validity
            Not Before: Apr  3 19:11:19 2023 GMT
            Not After : Apr  1 19:16:19 2024 GMT
        Subject: CN=2C393FEB0472155B4BF6949766C61DD55980FDE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:12:23:0f:39:a9:be:21:12:a9:2e:85:5e:
                    6e:fb:8b:77:21:2c:61:14:1f:11:5e:05:cf:e2:ce:
                    c5:e1:8e:31:85:6b:3a:62:8d:ad:86:5c:c1:e4:78:
                    15:ea:85:e5:9f:77:7c:bc:83:a8:04:0c:2f:bd:49:
                    6a:12:53:54:0b:df:af:1c:57:d4:d8:45:c9:e4:5f:
                    92:46:bd:b0:64:19:b7:e8:d0:17:d4:a2:9b:77:d1:
                    35:a6:23:f7:67:06:a4:d7:3b:98:8c:36:e2:e8:61:
                    f9:a9:69:91:ae:96:df:bd:73:69:a0:d3:f0:80:4a:
                    af:9d:b9:96:34:09:58:4c:1d:b2:44:68:a0:da:37:
                    c9:94:ed:0b:2c:f9:d4:71:97:70:69:fe:a1:e3:53:
                    41:98:05:52:4f:51:ae:39:28:a9:23:ba:15:c1:33:
                    e0:aa:a9:94:54:5b:1c:21:78:b7:05:2a:6d:17:43:
                    36:05:52:34:5e:9f:37:ef:f5:e2:20:82:05:e4:d3:
                    4d:8c:57:98:9f:d0:0c:06:40:9e:ab:e6:1d:99:8e:
                    09:b8:d8:e6:07:8a:2c:64:26:8b:6a:16:b2:6a:5b:
                    db:eb:62:af:f5:6f:c6:54:9a:b2:96:83:cc:16:ab:
                    e0:be:f5:28:5d:96:d0:af:51:55:14:39:9a:57:b7:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:39:3F:EB:04:72:15:5B:4B:F6:94:97:66:C6:1D:D5:59:80:FD:E7
            X509v3 Authority Key Identifier:
                keyid:90:52:4B:FE:16:E4:16:3C:4B:4E:B6:42:45:40:F3:98:91:55:00:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/90524BFE16E4163C4B4EB6424540F3989155006C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90524BFE16E4163C4B4EB6424540F3989155006C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3H2oaUkSYJ6y2aZYr8g3S5bE7LsQbDpQeRFd2XFYMgdg/0/3133382e35392e3135362e302f32322d3332203d3e20323633303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:b1:43:06:1f:21:44:73:47:5f:5c:51:76:3e:21:b1:9e:f2:
         ce:84:f9:2a:6a:ca:d9:c5:dc:eb:f7:a4:01:a5:b6:fe:95:c5:
         cd:bd:c9:58:a4:41:5d:53:52:df:fe:29:94:76:2d:d5:9b:1c:
         58:f7:b9:21:ad:31:03:cf:32:23:b6:53:b0:7d:ab:55:f1:a3:
         6c:f4:3a:f5:e0:2c:c9:7c:2f:ba:8f:ac:51:5a:f2:26:89:28:
         86:7d:51:93:41:b4:77:b7:30:1c:7a:78:7d:6d:00:04:ee:49:
         b0:a2:c5:d2:2b:24:dc:71:99:c0:73:1c:44:b2:e6:66:ea:02:
         1f:a9:1b:f2:8c:67:0f:a7:47:d2:03:37:1e:c2:dd:e8:f0:78:
         b0:75:26:4c:38:4b:86:df:4c:e0:53:3f:7f:81:1e:0a:78:50:
         06:27:47:4a:b7:fa:42:b3:7e:9c:95:84:46:d0:66:35:e2:49:
         b7:a8:b5:c4:03:f5:bd:c1:43:f1:72:ad:f9:1d:90:1c:c3:1e:
         ba:f7:9c:25:ad:1a:c8:2f:6b:ae:1c:d7:43:db:37:a7:17:02:
         21:53:30:ef:7b:2d:6b:62:27:09:7e:75:a3:f3:c5:4d:70:a6:
         0b:cf:fc:c4:cf:79:d5:ca:b1:48:1a:ed:ed:22:6d:15:7f:38:
         d6:7e:f5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org