Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36312e302f32342d3234203d3e20323634313533.roa
File:                     3133382e35392e36312e302f32342d3234203d3e20323634313533.roa (raw, json)
Hash identifier:          8onRw6WSsygS32LxxpXwsLXjzozKtkinbAY1dpY6Dek=
Subject key identifier:   0D:07:8A:46:51:4E:2D:AE:C4:7A:1C:50:1E:0F:61:94:31:75:DB:6A
Certificate issuer:       /CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
Certificate serial:       69F6500FFA99AD56E86990CC203A0271464FD07A
Authority key identifier: 23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36312e302f32342d3234203d3e20323634313533.roa
Signing time:             Mon 28 Nov 2022 22:29:07 +0000
ROA not before:           Mon 28 Nov 2022 22:24:07 +0000
ROA not after:            Mon 27 Nov 2023 22:29:07 +0000
asID:                     264153
IP address blocks:        138.59.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f6:50:0f:fa:99:ad:56:e8:69:90:cc:20:3a:02:71:46:4f:d0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F846A3DD3801981E9837C4F3064EAC9A58E0FC
        Validity
            Not Before: Nov 28 22:24:07 2022 GMT
            Not After : Nov 27 22:29:07 2023 GMT
        Subject: CN=0D078A46514E2DAEC47A1C501E0F61943175DB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:df:5e:ef:67:22:f1:00:e8:28:9e:b1:85:
                    f8:a7:4d:5b:42:05:50:5a:c4:dc:8e:8e:e4:72:d9:
                    bf:51:a5:b2:79:1e:8e:84:d9:a4:98:03:02:23:9f:
                    1e:a0:f1:c7:97:8f:4f:c9:80:ea:2b:c6:8d:52:5d:
                    d3:b7:58:a8:c7:0c:0f:e4:99:3e:d2:7b:6c:76:96:
                    0a:4c:08:de:bc:7e:ed:99:7b:1b:3c:40:78:64:74:
                    b0:d2:b0:7f:c2:fa:78:7f:c9:c4:ac:14:ab:be:19:
                    71:0b:36:82:92:a2:47:a3:f4:13:ad:4d:97:6b:57:
                    82:bc:ba:45:72:4d:05:8d:69:c8:8d:a9:7e:df:9a:
                    ec:f7:36:cd:58:1e:35:91:19:0f:f3:6a:d5:36:9d:
                    16:e7:3e:dd:2e:36:bf:83:4e:40:95:db:c1:3d:e7:
                    4e:be:e9:33:d6:90:08:98:f6:fe:7b:01:21:e5:32:
                    6b:40:78:92:fd:78:c6:02:80:5b:d5:38:18:f1:32:
                    ae:d9:f6:65:fd:a3:36:41:33:96:3b:e4:6c:69:25:
                    3f:ab:56:53:d7:14:f1:ba:13:3b:2b:4b:7d:bd:77:
                    7c:9d:19:86:19:6b:2e:15:56:02:92:6c:c9:71:81:
                    64:a5:75:bc:21:f8:ec:5e:05:8c:d5:f8:36:6d:c0:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:8A:46:51:4E:2D:AE:C4:7A:1C:50:1E:0F:61:94:31:75:DB:6A
            X509v3 Authority Key Identifier:
                keyid:23:F8:46:A3:DD:38:01:98:1E:98:37:C4:F3:06:4E:AC:9A:58:E0:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/23F846A3DD3801981E9837C4F3064EAC9A58E0FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fzULsWaVw31spVdgER6uVQJ8E1ds77nD5tHrxgmxMQG/0/3133382e35392e36312e302f32342d3234203d3e20323634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:89:67:ca:92:1a:2e:7e:96:58:8d:ef:18:c9:65:9c:74:f6:
         8f:6e:5e:c0:0a:72:6e:0e:27:d1:52:f3:81:b8:9b:56:cf:43:
         fd:d3:f1:c6:12:27:04:e5:b8:ef:e1:c8:40:f7:68:2b:c5:62:
         df:29:5a:a0:58:e4:86:60:3a:e5:9e:a6:5c:67:4a:22:cf:4d:
         c0:53:54:c0:1c:ed:e3:61:f0:63:7c:27:46:b6:c4:94:c8:76:
         1c:62:35:c5:50:f9:bf:36:e0:49:71:81:59:06:16:7b:a0:c9:
         69:42:16:2b:f7:2a:aa:99:ab:08:c8:95:d5:86:31:67:18:cf:
         65:02:5e:b8:32:61:67:23:dd:6e:fb:05:59:1d:f5:d7:58:96:
         ef:17:a4:39:a0:4d:13:ec:f3:40:5a:1e:7d:59:a8:83:e7:31:
         53:08:b0:a5:7a:6a:16:96:f5:ce:dc:40:fc:ef:4d:5f:86:93:
         e8:df:2b:96:08:fa:56:32:a2:e1:cc:2f:a0:db:36:69:d5:50:
         60:53:5b:8c:c9:24:96:3a:26:5a:95:72:1b:c6:d0:28:1c:41:
         72:12:ab:c5:14:16:4a:78:38:c8:f4:50:ad:0d:39:20:92:9e:
         e6:b9:ae:1c:f6:13:49:9a:8a:9d:40:df:fa:79:d1:c3:57:48:
         a2:1f:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org