Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
File:                     3133382e35392e3131342e302f32332d3233203d3e203238363036.roa (raw, json)
Hash identifier:          IpK/faEMRB+IJ/03ZylDL8CE8UqJL6JubfL1IFYgxvk=
Subject key identifier:   C3:B8:EE:BE:51:CF:37:AB:AA:64:F7:FD:16:FA:F0:27:CE:2A:EA:CE
Certificate issuer:       /CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Certificate serial:       4B8B99420C6B40AC5EA3DA130606F19C36F96D53
Authority key identifier: D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa
Signing time:             Wed 06 Mar 2024 21:12:38 +0000
ROA not before:           Wed 06 Mar 2024 21:07:38 +0000
ROA not after:            Wed 05 Mar 2025 21:12:38 +0000
asID:                     28606
IP address blocks:        138.59.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8b:99:42:0c:6b:40:ac:5e:a3:da:13:06:06:f1:9c:36:f9:6d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
        Validity
            Not Before: Mar  6 21:07:38 2024 GMT
            Not After : Mar  5 21:12:38 2025 GMT
        Subject: CN=C3B8EEBE51CF37ABAA64F7FD16FAF027CE2AEACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:aa:2c:2c:88:67:aa:e5:18:9f:a1:1f:53:
                    0d:b9:72:12:bd:81:85:24:36:94:ab:d6:c6:0b:a5:
                    1e:4b:2a:e5:8b:31:ea:1b:5a:61:38:ef:5d:c5:d5:
                    79:0c:19:cb:76:87:aa:2b:08:16:8d:29:e0:0e:f2:
                    65:4e:a2:bf:5c:96:c4:1c:76:0f:44:0d:cb:25:7d:
                    b0:99:d2:00:14:fe:2b:91:26:22:2e:e5:f1:7b:0e:
                    6b:97:ab:dd:78:98:95:c8:1e:a6:d0:d2:2c:8d:7b:
                    07:f8:68:dc:e6:51:65:77:af:e4:29:d0:cc:be:8a:
                    21:02:a6:bb:f4:40:98:b4:46:19:c0:c8:a3:cd:ff:
                    39:3a:6a:30:95:af:c3:55:88:46:d8:13:0d:d5:81:
                    27:41:41:08:15:3a:df:7a:d5:b7:8f:0d:49:44:a0:
                    52:17:93:68:07:b1:69:cb:45:8a:b7:bf:bc:48:65:
                    9a:26:eb:b1:1e:ee:46:50:3a:1a:4e:22:4f:dc:1c:
                    11:da:c8:a3:c0:b7:de:cc:11:32:d6:ff:76:40:e5:
                    be:4b:38:cf:5e:b7:79:8e:5d:58:14:02:59:7f:87:
                    c4:17:c6:b6:ee:82:15:17:87:a9:05:bd:69:5c:32:
                    62:da:25:88:1c:49:a5:34:7c:07:25:91:b8:dd:f1:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:EE:BE:51:CF:37:AB:AA:64:F7:FD:16:FA:F0:27:CE:2A:EA:CE
            X509v3 Authority Key Identifier:
                keyid:D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131342e302f32332d3233203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:47:e7:eb:b7:b1:7c:b6:ff:b7:ce:e7:81:db:ce:a5:e7:3d:
         e5:dd:13:dd:4c:e3:b4:3a:b9:1a:b8:47:78:df:69:76:3f:89:
         6f:67:df:8a:0a:59:cd:98:2a:b2:13:7b:8d:64:15:26:b1:e9:
         a2:e9:eb:bc:15:55:6b:7f:2e:bc:33:84:fc:c0:50:30:d4:85:
         d5:2c:7b:31:aa:ac:a8:f4:80:1d:e4:6d:0d:66:9a:b8:68:7f:
         94:e0:a5:00:f5:f0:50:51:b3:54:a0:1f:c9:c6:3c:1f:dc:7a:
         10:84:38:e0:b9:b1:3f:e4:cb:e6:62:02:5e:15:42:b4:c1:95:
         03:c5:34:e4:2f:02:58:3f:18:14:4f:d2:08:84:35:18:2a:fe:
         4d:f9:03:29:e0:ac:9d:46:5a:57:bb:26:0c:8a:45:1c:6e:5a:
         76:85:32:a2:66:b8:2d:5c:2a:27:f1:3d:5d:ce:a7:c1:36:33:
         e1:1d:fc:57:a3:95:6a:74:ae:a8:89:5b:f1:c6:36:b9:1c:46:
         9e:89:46:db:2d:d1:10:9d:35:23:3c:fe:62:fb:a5:11:1d:90:
         df:b5:7e:5b:4f:68:d7:22:7a:e0:06:1a:11:7e:e3:a5:e8:d6:
         61:a2:6c:68:18:ff:10:90:f4:21:3d:f1:5c:87:d1:5e:5c:53:
         d1:12:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:39 2025 by rpki-client