Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131352e302f32342d3234203d3e203238363036.roa
File:                     3133382e35392e3131352e302f32342d3234203d3e203238363036.roa (raw, json)
Hash identifier:          0VsYEx1Gh2DUl0E6jcJmghXS9aXlJQ+FxVH/7V7Lt2Q=
Subject key identifier:   08:8F:6B:04:1A:74:C3:3E:BB:C1:2E:3B:F3:78:E1:11:D8:3F:BC:0E
Certificate issuer:       /CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Certificate serial:       4A703536B54BE5E01B59A7C18680B7B633577E24
Authority key identifier: D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131352e302f32342d3234203d3e203238363036.roa
Signing time:             Wed 06 Mar 2024 21:12:28 +0000
ROA not before:           Wed 06 Mar 2024 21:07:28 +0000
ROA not after:            Wed 05 Mar 2025 21:12:28 +0000
asID:                     28606
IP address blocks:        138.59.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:70:35:36:b5:4b:e5:e0:1b:59:a7:c1:86:80:b7:b6:33:57:7e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
        Validity
            Not Before: Mar  6 21:07:28 2024 GMT
            Not After : Mar  5 21:12:28 2025 GMT
        Subject: CN=088F6B041A74C33EBBC12E3BF378E111D83FBC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:98:83:61:f7:e7:cc:8c:59:2b:fb:4a:c6:dd:
                    a8:3f:25:d4:dc:82:6f:06:32:4e:4e:74:e7:05:b0:
                    1a:49:34:d5:6f:2e:38:a4:a1:2a:89:1d:bf:39:3a:
                    d0:a6:74:21:a1:65:6c:a9:65:4c:0a:88:c5:2b:39:
                    59:61:52:1b:3e:49:e0:e7:37:a1:47:51:b2:cc:99:
                    52:32:0c:e1:4a:6f:fa:89:87:dd:f6:91:5b:1b:cb:
                    1a:75:f0:28:79:8a:b5:28:51:7e:cc:79:f2:9a:01:
                    48:e7:7a:52:06:9b:9c:d2:17:16:92:6a:75:1b:d7:
                    bf:09:55:04:48:6f:32:c1:cc:3d:f1:cb:9f:f6:aa:
                    ea:f8:56:88:02:56:49:22:dd:24:0d:e0:58:d3:dc:
                    64:3f:cf:4c:c1:e4:e5:db:2b:40:69:5f:b8:73:30:
                    1f:6f:4e:71:d2:18:3c:85:35:66:a4:83:df:2e:50:
                    01:07:47:36:9c:17:0f:23:1d:c6:7e:c8:5c:74:e2:
                    16:d5:59:58:81:b5:09:fd:ba:6d:71:a8:15:75:2c:
                    da:af:e7:21:c2:e6:c5:29:ce:b3:1b:cf:57:70:a3:
                    8e:a6:6c:59:73:a3:ba:30:b6:e7:a4:4c:cf:1e:e4:
                    d0:1a:46:7d:67:41:51:29:60:3c:a1:15:a2:1a:7b:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8F:6B:04:1A:74:C3:3E:BB:C1:2E:3B:F3:78:E1:11:D8:3F:BC:0E
            X509v3 Authority Key Identifier:
                keyid:D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/3133382e35392e3131352e302f32342d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:b0:a5:05:57:82:0a:e9:f9:fe:9d:8a:5c:ef:33:d5:4a:3e:
         9a:4f:5a:24:8c:0a:ad:1f:f3:bc:7c:b2:e7:ae:5a:e7:be:98:
         e8:74:06:20:bf:d9:1f:f4:44:08:83:ec:43:ac:52:d9:74:ef:
         bd:6d:71:f5:4f:1f:3c:1d:e4:3c:2f:a3:09:25:c3:6b:4f:52:
         42:91:12:b2:99:ab:d9:e4:7d:63:5d:b5:ac:da:3a:34:00:f5:
         3a:e8:21:71:25:80:7e:b7:84:13:3a:53:df:05:fd:88:93:bc:
         1d:22:64:11:c0:ed:ca:3b:69:bf:ef:42:8e:33:c4:9d:1a:99:
         be:9e:da:ea:23:a6:f5:88:44:5a:df:20:d3:92:ba:f6:7c:b9:
         10:b4:94:e2:1d:5b:06:4c:c6:4d:b3:8e:5d:55:41:fc:1d:99:
         b3:bd:8b:e1:20:a0:84:c2:a7:c4:f7:39:1e:b3:e7:d6:89:e5:
         89:2f:d1:a3:93:a1:e2:b5:b8:48:d8:42:ca:c0:76:86:01:00:
         8c:81:dd:e9:98:2c:36:82:50:8b:db:5d:78:d8:38:bc:bb:41:
         50:3a:20:b2:16:01:1b:62:e2:c2:87:72:8d:f4:8b:7b:59:ab:
         3d:47:ff:a5:7d:10:55:78:1e:21:98:f3:fb:7e:4a:83:ee:80:
         1d:c4:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org