Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32322d3233203d3e20323730393332.roa
File:                     3133382e35392e33362e302f32322d3233203d3e20323730393332.roa (raw, json)
Hash identifier:          dp0suNhp/CReS40qPajh8gMIKfZzOdmSQlaWBED+oyU=
Subject key identifier:   FE:C7:1D:11:AC:EE:3C:EC:36:48:59:CC:4E:B8:A8:1D:2A:D5:C0:8E
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       2982060261E39619727BB8E97895114B79882CB9
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32322d3233203d3e20323730393332.roa
Signing time:             Wed 13 Mar 2024 12:03:14 +0000
ROA not before:           Wed 13 Mar 2024 11:58:14 +0000
ROA not after:            Wed 12 Mar 2025 12:03:14 +0000
asID:                     270932
IP address blocks:        138.59.36.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:06:02:61:e3:96:19:72:7b:b8:e9:78:95:11:4b:79:88:2c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Mar 13 11:58:14 2024 GMT
            Not After : Mar 12 12:03:14 2025 GMT
        Subject: CN=FEC71D11ACEE3CEC364859CC4EB8A81D2AD5C08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:7d:02:de:f0:b0:f6:02:e6:0e:0c:3c:82:
                    a7:e7:1f:3f:4b:14:3a:43:32:ba:d7:b7:0e:17:2f:
                    17:f7:8f:18:b2:5c:64:ce:e9:c4:7e:26:51:cf:21:
                    9f:51:60:e3:bb:ae:bc:00:4b:4b:88:6f:4e:1c:a7:
                    8e:6e:60:53:8f:10:2f:16:05:a3:6e:03:07:eb:ba:
                    8a:4d:0f:93:b0:e3:5e:f0:6b:98:f6:f9:e7:fb:25:
                    4b:1f:43:4d:33:49:36:36:28:4c:c5:69:62:ec:79:
                    3f:20:80:11:50:10:f7:61:20:29:2a:4f:ce:04:e2:
                    1d:12:5a:c1:c7:9c:6b:59:aa:f6:15:1c:25:00:97:
                    5f:ea:37:15:a7:6e:8b:4b:77:81:09:01:a9:8a:50:
                    1f:23:f4:ec:e7:4b:3b:d8:e9:56:82:ec:dc:02:26:
                    d4:ab:2c:33:c3:61:cc:5b:f5:38:56:3f:5a:5d:8a:
                    e3:55:25:4f:53:3b:91:ca:a0:d4:27:e6:9f:bc:fa:
                    7e:d8:a3:49:dc:84:07:df:a1:54:02:6b:d2:ba:21:
                    eb:ea:31:86:b6:d3:f7:51:43:e6:36:fc:57:c4:e9:
                    5d:d7:46:01:61:3f:e5:17:0a:04:bd:d9:6c:a8:3e:
                    f7:71:fb:c9:f6:61:35:a0:0e:5b:88:66:fd:58:a2:
                    21:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C7:1D:11:AC:EE:3C:EC:36:48:59:CC:4E:B8:A8:1D:2A:D5:C0:8E
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32322d3233203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:c7:d0:2f:f5:13:75:c0:11:36:3d:fb:60:d9:31:a6:f1:3e:
         7c:95:1d:7c:d5:e1:8f:7a:70:c2:7e:ca:d0:c9:8d:99:39:ea:
         50:14:74:d2:0e:fe:24:b1:8f:ba:9b:30:38:ee:81:ea:52:c2:
         66:49:6a:89:7d:b9:6c:8f:fd:24:01:7d:30:04:f8:18:43:ef:
         38:fb:20:e8:12:f0:5d:f1:50:bb:e3:51:fa:9c:fd:36:7d:c5:
         6f:ba:eb:ef:1d:8b:11:ac:d8:29:8c:76:48:1f:f1:04:c2:76:
         90:78:9f:18:61:8a:0a:be:6c:bc:71:8e:4b:1d:e0:74:10:b7:
         3c:db:50:9c:22:32:fe:3d:74:b2:3c:64:73:67:7d:9f:4b:72:
         29:d4:c2:17:0d:8a:92:90:d4:13:36:99:7f:72:9a:3f:a7:17:
         8b:56:e2:31:60:3d:33:85:39:b3:9f:11:fa:59:0a:c9:22:51:
         53:bf:ba:eb:4c:fb:82:c3:14:3e:58:88:87:26:d4:3d:fa:eb:
         32:06:7d:0f:c2:bb:f2:52:64:23:2b:32:22:72:92:68:15:20:
         a4:dc:3e:6d:d8:1d:30:af:02:8b:b3:fb:a7:71:fd:9a:3a:6f:
         ca:3e:95:e7:f0:6b:d6:2f:25:f1:3b:8c:2f:d0:90:52:cc:66:
         e3:b5:c4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org