Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32322d3332203d3e20323730393332.roa
File:                     3133382e35392e33362e302f32322d3332203d3e20323730393332.roa (raw, json)
Hash identifier:          RdUk++RwuAtszwCEGzh4kKbe28+WXdAS2dph8RtBUpY=
Subject key identifier:   71:DF:AE:50:B8:5D:FF:6D:FB:1E:B9:7D:53:9E:84:F3:85:CA:EB:3A
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       0917C39BE3B5BDB755DE9A7A6701FD3FB7781565
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32322d3332203d3e20323730393332.roa
Signing time:             Wed 12 Apr 2023 01:47:05 +0000
ROA not before:           Wed 12 Apr 2023 01:42:05 +0000
ROA not after:            Wed 10 Apr 2024 01:47:05 +0000
asID:                     270932
IP address blocks:        138.59.36.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:17:c3:9b:e3:b5:bd:b7:55:de:9a:7a:67:01:fd:3f:b7:78:15:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Apr 12 01:42:05 2023 GMT
            Not After : Apr 10 01:47:05 2024 GMT
        Subject: CN=71DFAE50B85DFF6DFB1EB97D539E84F385CAEB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:da:0e:d4:ee:6d:e1:b5:69:5a:4b:e5:a5:
                    99:72:fc:9a:72:38:e3:91:52:35:0f:8c:4c:09:62:
                    4e:7a:cb:fe:59:90:b9:75:45:10:2b:40:f9:83:ba:
                    59:be:d3:3b:af:ec:30:19:7a:a2:7e:a3:e5:32:52:
                    8f:dd:ed:ed:27:a2:cc:a2:e2:cd:ac:79:c1:76:71:
                    df:e0:c5:56:b5:a2:35:9b:82:80:8c:7d:4c:e7:e1:
                    bd:9c:04:55:c8:b4:45:e8:26:5f:6c:69:58:6c:6f:
                    85:ef:d0:d0:28:25:8c:c7:67:37:44:09:24:8d:01:
                    bc:1b:45:ee:2a:e9:f1:6f:91:8f:98:96:99:b8:66:
                    f0:51:d7:21:60:de:87:0a:24:2e:81:cb:4c:a4:9f:
                    44:d4:f4:04:c7:39:c7:7b:7f:54:16:2d:3a:84:be:
                    f2:87:c8:2f:c5:3e:1a:73:5e:b9:78:fc:b4:89:77:
                    f7:eb:e5:73:39:3c:4b:e8:38:3c:24:d7:95:10:b3:
                    36:52:51:a5:79:7e:0a:ba:e1:4f:b2:f7:52:60:24:
                    e8:30:5c:6e:79:08:98:2b:8e:98:87:b4:1d:b8:9f:
                    fe:43:01:92:9d:66:0b:c9:dd:bb:f2:f7:e2:f9:50:
                    8a:2e:fb:5d:b7:35:fb:12:d0:fc:24:05:33:72:15:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:AE:50:B8:5D:FF:6D:FB:1E:B9:7D:53:9E:84:F3:85:CA:EB:3A
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32322d3332203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:1f:47:76:98:0e:54:07:e0:db:88:30:7c:77:2f:3d:50:b1:
         17:07:7b:ef:f6:1d:ed:52:2a:96:1d:51:ea:af:cc:43:d3:6c:
         2e:37:54:41:97:65:ac:5b:44:c8:12:0c:b9:45:98:e8:46:3f:
         0f:2b:6f:c6:0f:3c:b4:03:3d:5d:4d:ef:e3:a8:95:93:06:e1:
         73:43:de:15:6b:17:d3:40:85:36:69:56:2f:77:4f:a4:d0:6b:
         43:3f:83:e3:cf:91:de:fb:b4:bd:61:26:a0:3e:09:79:ef:b1:
         81:40:8a:86:4b:c8:6c:27:a4:7e:f8:3a:b4:b0:a6:13:cd:6c:
         b3:db:ea:40:8b:46:fc:a5:89:2a:cb:05:07:62:6c:6a:08:c0:
         28:f4:75:a1:fe:c3:5b:f0:d0:22:9e:03:28:14:66:28:8d:ed:
         39:41:88:14:f5:8a:5c:d9:8d:45:3d:98:0e:fe:c1:ad:98:c0:
         fb:63:d5:6e:6f:83:e7:46:ce:f6:b2:b0:89:b1:6d:35:b7:1b:
         d9:1b:44:61:4b:5a:06:ec:00:82:06:33:cd:8b:b1:13:32:d6:
         a5:29:77:9b:e7:38:28:b3:b2:20:b3:a0:6c:1f:80:67:d3:96:
         6d:44:a5:28:ee:4d:5c:2e:c2:fb:80:57:5d:45:59:95:61:dd:
         29:f2:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org