Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36302e302f32322d3232203d3e20323634313533.roa
File:                     3133382e35392e36302e302f32322d3232203d3e20323634313533.roa (raw, json)
Hash identifier:          CyRs1zr3yStz5o/F5diuw1QiL9qW+7nE5jp539po/Lg=
Subject key identifier:   EA:E9:F0:FC:12:3F:CB:5B:31:4F:4A:A5:6E:AB:DB:E8:A4:8C:D2:7B
Certificate issuer:       /CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
Certificate serial:       11AA250D1E81C1B315B7FAFEF57C05E0B32A8704
Authority key identifier: 23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36302e302f32322d3232203d3e20323634313533.roa
Signing time:             Mon 22 Aug 2022 22:12:09 +0000
ROA not before:           Mon 22 Aug 2022 22:07:09 +0000
ROA not after:            Mon 21 Aug 2023 22:12:09 +0000
asID:                     264153
IP address blocks:        138.59.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:aa:25:0d:1e:81:c1:b3:15:b7:fa:fe:f5:7c:05:e0:b3:2a:87:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
        Validity
            Not Before: Aug 22 22:07:09 2022 GMT
            Not After : Aug 21 22:12:09 2023 GMT
        Subject: CN=EAE9F0FC123FCB5B314F4AA56EABDBE8A48CD27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:df:d6:9e:d0:d2:e1:54:76:72:ea:1f:7d:
                    a9:eb:5a:63:46:55:69:36:ee:9a:a2:92:6b:53:55:
                    eb:86:48:42:33:c7:3e:aa:1b:71:5a:65:dd:6d:9a:
                    4e:c5:e6:10:41:75:4d:05:b0:d1:d9:b3:8c:fb:8a:
                    ee:b0:2e:3d:12:d3:87:a8:00:04:34:ed:e4:cb:21:
                    85:8c:ed:d1:77:d9:e0:30:a5:60:5f:f8:71:65:23:
                    d4:84:8a:1b:41:60:e7:f0:cc:ad:e8:2a:1c:f6:1a:
                    53:16:01:18:1b:f4:00:34:bf:e8:94:53:e7:eb:14:
                    18:80:21:7d:d7:e4:2a:f5:c1:ee:0d:9f:5f:74:35:
                    68:00:07:c5:9a:82:77:00:52:04:32:28:cd:50:f0:
                    83:bf:09:ad:c3:5f:25:11:a3:26:2f:7f:3e:4c:a2:
                    ab:70:2b:61:a1:38:7a:63:14:d0:d7:bb:7f:52:5f:
                    66:5c:f1:03:99:da:dc:40:53:d5:19:7f:87:86:10:
                    f4:48:ad:ff:fa:39:16:2d:48:50:f5:63:16:a6:f6:
                    04:80:a7:b7:7e:76:40:12:b6:3a:77:96:0b:3f:b9:
                    d4:7d:a5:d2:ee:6d:46:2b:b0:db:59:48:f8:e0:c3:
                    3e:80:45:49:2d:4d:f7:23:f3:e8:0c:e1:f2:6a:35:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E9:F0:FC:12:3F:CB:5B:31:4F:4A:A5:6E:AB:DB:E8:A4:8C:D2:7B
            X509v3 Authority Key Identifier:
                keyid:23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36302e302f32322d3232203d3e20323634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:db:c3:8c:e5:6b:1d:9d:b6:bb:7d:13:43:61:88:af:35:
         67:76:3c:4d:37:e7:39:80:2b:ad:dd:a8:82:86:81:f5:d4:23:
         f7:52:31:0a:05:c6:e4:27:f4:dc:e3:1c:02:16:54:81:f4:db:
         58:81:ef:9f:b3:de:ae:f6:cc:27:f6:c2:78:a5:d1:ae:64:f4:
         0e:b9:c4:6e:9f:99:7a:65:6b:bb:de:dc:e6:af:8c:26:22:08:
         a9:6f:dc:67:54:51:14:35:6f:04:93:21:b4:0c:0e:c5:e9:1b:
         11:e7:a7:7c:de:b7:78:ec:6c:13:a7:7c:6e:10:d8:a1:1f:a4:
         0c:ef:a5:82:27:8a:ed:9a:40:e6:19:2a:8a:39:ba:0f:d5:70:
         a3:c9:82:8b:aa:06:a0:08:1b:7e:0f:48:75:ab:0e:48:bd:3a:
         31:b8:4f:dd:2e:96:9a:ee:e7:20:1b:a2:bc:de:c6:55:c8:0f:
         ad:48:7e:17:3e:c8:9c:e9:6e:1c:ab:a9:2c:90:4e:13:a4:59:
         9f:b7:e2:e0:8c:1c:d9:9d:ed:e0:6a:4d:f7:09:77:fb:e7:70:
         86:c2:7a:62:34:9a:37:9f:e7:60:c8:ed:72:98:89:6a:de:19:
         08:82:fd:b8:b0:49:b2:b1:62:c5:b1:66:2d:0a:63:ac:5c:f1:
         1d:18:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org