Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e312e302f32342d3234203d3e20323634353632.roa
File:                     3133382e33362e312e302f32342d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          prFSMJK4oZ9SfRNT3gwWCSuYWMls1R6V36ghilpwW6U=
Subject key identifier:   97:7F:97:35:D4:10:29:25:CD:C3:8D:98:DA:4C:48:75:38:59:12:E4
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       111DE75F19357563A3D5D9F56859608FAC318FDF
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e312e302f32342d3234203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:30 +0000
ROA not before:           Fri 05 May 2023 19:10:30 +0000
ROA not after:            Fri 03 May 2024 19:15:30 +0000
asID:                     264562
IP address blocks:        138.36.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1d:e7:5f:19:35:75:63:a3:d5:d9:f5:68:59:60:8f:ac:31:8f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:30 2023 GMT
            Not After : May  3 19:15:30 2024 GMT
        Subject: CN=977F9735D4102925CDC38D98DA4C4875385912E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:d4:bc:2c:00:62:d3:cd:e1:d9:2a:8e:d9:
                    89:db:83:ef:78:d6:27:31:c8:1d:ff:69:3f:88:64:
                    97:b4:b9:45:67:63:57:11:cb:93:79:23:79:77:e5:
                    75:a2:a8:37:77:d6:c4:90:20:28:ef:e6:51:31:35:
                    24:b7:ac:e3:26:af:0a:e7:84:c1:da:ff:4f:4b:aa:
                    4e:33:90:bf:e9:8e:fc:cb:18:13:5e:a4:f7:13:d8:
                    e7:ff:93:7a:d1:27:6f:22:c8:f1:e6:01:ef:06:ac:
                    57:f8:af:94:06:b4:13:99:41:7c:d8:0e:14:26:c0:
                    5a:96:75:b6:21:7b:42:83:6b:48:3c:52:a9:a1:10:
                    c5:e8:ca:df:71:16:ba:6e:ed:4b:ca:27:d7:54:26:
                    f7:b3:3d:2c:42:a6:a8:33:5c:a9:5e:0e:3f:c7:55:
                    a0:a7:ea:29:b4:07:42:7b:0e:16:79:f6:cf:5c:10:
                    a8:62:e5:aa:80:59:84:83:11:4e:1e:1c:d9:de:a8:
                    61:b1:76:98:a9:2b:3a:76:44:53:f3:e4:54:d7:90:
                    ba:b0:43:b6:30:04:e0:90:30:05:0c:b7:e8:a9:2f:
                    5d:02:08:84:99:77:dc:ad:32:49:8c:ea:fd:6e:ea:
                    f6:9a:05:b9:e8:5e:4d:a6:17:bd:c0:47:a4:13:05:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:97:35:D4:10:29:25:CD:C3:8D:98:DA:4C:48:75:38:59:12:E4
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e312e302f32342d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:79:03:e2:1c:40:74:37:32:05:ed:93:02:2a:cf:13:87:43:
         6a:8a:f6:50:b2:8e:32:2c:8a:df:cd:e8:1c:6f:33:81:a2:94:
         a9:4d:95:ef:a0:b7:0a:21:b0:b7:f9:03:50:ca:99:b9:93:99:
         d0:ac:d0:8a:2c:47:ad:ec:0c:48:80:5f:50:60:01:2b:2e:86:
         80:0d:66:3c:8a:ca:3b:38:d9:51:dc:a8:dd:55:2e:cf:9d:fd:
         6d:a2:ee:71:71:6f:4d:aa:58:a3:e1:d2:c2:ca:98:fd:cb:96:
         e7:16:65:f7:e9:07:ed:e8:57:bb:ed:c5:83:5e:ac:12:62:77:
         d5:58:ed:12:f8:83:dd:16:44:ff:81:b5:61:0a:4b:c3:77:92:
         34:e1:dc:ab:15:a0:21:d6:66:f9:5d:a3:b3:b7:bd:e2:1b:82:
         7c:36:1a:3e:9c:2e:01:2f:b7:b6:aa:6f:02:91:81:28:98:c0:
         19:1b:f4:4a:26:64:e6:07:68:7c:26:a5:a3:b3:6a:c3:29:1a:
         f5:0c:14:a3:52:00:9e:59:62:a2:c4:be:22:ca:23:2c:c2:86:
         51:b9:53:f4:18:b5:9e:f5:69:34:d3:a2:8b:7f:53:d9:d8:ed:
         0a:b3:d8:8e:79:77:e2:55:0b:04:be:1b:5f:17:38:c4:03:cf:
         c5:03:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org