Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36302e302f32342d3234203d3e20323634313533.roa
File:                     3133382e35392e36302e302f32342d3234203d3e20323634313533.roa (raw, json)
Hash identifier:          TpArIKs54TpnWjJs5IJOUH62tGw+699UZh/A1dgrdCU=
Subject key identifier:   E5:7A:3D:9A:A6:C9:1A:FA:F5:C2:DA:58:4B:0F:E4:80:B4:00:7E:F7
Certificate issuer:       /CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
Certificate serial:       1000DBD4F23666029183DE3B3C9CD84147BFE98A
Authority key identifier: 23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36302e302f32342d3234203d3e20323634313533.roa
Signing time:             Sat 26 Nov 2022 22:13:10 +0000
ROA not before:           Sat 26 Nov 2022 22:08:10 +0000
ROA not after:            Sat 25 Nov 2023 22:13:10 +0000
asID:                     264153
IP address blocks:        138.59.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:00:db:d4:f2:36:66:02:91:83:de:3b:3c:9c:d8:41:47:bf:e9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
        Validity
            Not Before: Nov 26 22:08:10 2022 GMT
            Not After : Nov 25 22:13:10 2023 GMT
        Subject: CN=E57A3D9AA6C91AFAF5C2DA584B0FE480B4007EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:09:cf:2e:ef:de:40:3b:5a:ec:3b:71:13:b0:
                    8f:6c:86:1f:51:51:56:43:48:43:e4:6c:3f:2b:5e:
                    09:c9:d2:db:1c:89:ea:8d:fb:94:0c:dc:76:a8:0f:
                    58:7a:a6:79:d7:3e:26:8d:06:33:6f:36:b4:eb:8c:
                    94:36:c3:cf:79:88:7f:9c:1d:2f:ce:9c:87:90:2f:
                    40:84:b3:f7:60:ae:f0:d3:eb:a7:dd:a3:85:86:4c:
                    50:ff:10:d2:5d:60:7b:27:40:90:e7:8b:97:39:35:
                    a7:0f:ee:6c:e1:b6:08:84:1c:67:d1:88:ce:9a:15:
                    6a:a5:2e:01:9e:08:b1:fc:d0:77:a8:e8:c5:f8:c9:
                    ef:f4:7e:e0:61:47:07:81:bf:be:cd:91:a7:d2:d2:
                    1a:7a:84:f7:71:1f:5f:67:c3:3e:56:e1:88:32:ad:
                    ed:bd:c6:11:6b:6f:6a:f6:7c:4a:f4:d8:67:f9:88:
                    5d:2f:fe:c4:8d:2a:63:d3:0e:55:fe:3a:48:ac:a9:
                    63:ec:a4:fb:b2:c3:ec:f4:bd:d3:65:4b:1a:85:6a:
                    f4:12:88:db:79:60:33:54:b1:15:0d:66:61:c1:33:
                    9c:8a:d0:6c:e7:5f:2e:5a:2a:a6:bd:ee:47:b9:fb:
                    bc:4a:cf:9b:b3:b0:00:89:bc:bd:25:b3:0a:d8:d4:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7A:3D:9A:A6:C9:1A:FA:F5:C2:DA:58:4B:0F:E4:80:B4:00:7E:F7
            X509v3 Authority Key Identifier:
                keyid:23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36302e302f32342d3234203d3e20323634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:c4:06:21:ef:a8:c1:c1:1e:3c:13:6e:1e:f6:1d:e8:5d:da:
         80:05:ec:7b:3f:72:d5:15:99:bc:7f:a9:07:db:a6:b1:96:3e:
         a8:a7:9b:96:ac:7b:4f:42:23:d8:c5:e1:42:b2:51:7f:7f:6c:
         77:2c:5c:62:1c:45:84:6f:f8:71:3b:72:60:aa:bb:15:c9:89:
         35:1a:d2:10:2f:8f:36:29:53:0e:13:09:bb:03:f6:4c:bc:66:
         70:a5:06:f8:15:ba:4b:87:52:49:03:dd:9b:75:84:11:c6:bb:
         62:0a:7b:6a:1d:6f:87:ff:65:38:cf:1c:6e:59:c1:76:a0:a1:
         cb:7b:26:c9:1c:1e:61:c5:2f:3f:63:95:ee:ac:b8:36:69:08:
         b3:9c:6e:7f:9e:c4:a7:8b:96:a2:5c:8e:7f:34:b8:eb:32:e2:
         5c:02:07:98:a8:df:d0:d8:8d:63:86:9f:f9:70:f2:5c:a6:3d:
         7b:72:44:ed:b2:ff:83:21:90:9a:39:f1:55:cf:75:82:4d:f7:
         71:6d:30:39:28:a3:6f:13:a8:27:91:f3:3c:5a:10:c2:c0:ea:
         f7:9f:44:5f:f9:75:00:ab:5d:d8:e0:20:a9:bf:a1:03:5c:1f:
         91:27:3a:18:5e:6d:b3:d4:41:7d:af:a9:eb:7d:03:06:0d:77:
         90:91:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org