Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32342d3234203d3e20323730393332.roa
File:                     3133382e35392e33362e302f32342d3234203d3e20323730393332.roa (raw, json)
Hash identifier:          6Y6KEltkUTItT42C3rX+KELZP0g9TU2dXxDsCv4REOg=
Subject key identifier:   6B:CF:22:25:A3:8A:10:1C:C4:AC:96:1E:D6:90:E8:DF:D0:86:77:2C
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       48E0EBF31B5CF9B3EC6E26D58A0551F88A4D8804
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32342d3234203d3e20323730393332.roa
Signing time:             Wed 13 Mar 2024 12:03:13 +0000
ROA not before:           Wed 13 Mar 2024 11:58:13 +0000
ROA not after:            Wed 12 Mar 2025 12:03:13 +0000
asID:                     270932
IP address blocks:        138.59.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e0:eb:f3:1b:5c:f9:b3:ec:6e:26:d5:8a:05:51:f8:8a:4d:88:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Mar 13 11:58:13 2024 GMT
            Not After : Mar 12 12:03:13 2025 GMT
        Subject: CN=6BCF2225A38A101CC4AC961ED690E8DFD086772C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:92:1d:9c:64:83:00:2e:77:c8:62:f3:83:
                    77:89:94:b7:44:94:35:82:34:54:e5:c6:0c:4c:34:
                    dd:3f:19:be:29:b9:5e:cd:d1:be:86:89:b5:f3:9c:
                    b1:f6:b0:88:20:c6:b8:51:b6:8f:1e:07:54:02:a3:
                    14:84:ff:00:b4:b8:8f:9c:ef:fa:eb:1b:1f:84:10:
                    43:99:36:86:c0:f6:fd:f7:4e:ed:d3:38:98:f8:98:
                    b1:d8:1b:fc:66:7f:4b:56:c7:56:60:f6:5f:eb:c8:
                    a4:56:9d:f5:b2:3b:33:1e:79:fb:45:d1:a0:d2:6b:
                    a5:6e:9d:7c:a5:d5:ba:cc:08:25:3c:f1:cd:0d:c7:
                    ff:21:88:36:42:8f:32:89:09:ef:4a:5e:e0:fb:b6:
                    8f:c7:87:d8:0b:e0:0a:c3:f1:f5:a9:b2:83:71:f0:
                    e5:bc:99:dc:d3:6e:13:71:21:4b:2b:b7:28:a1:ae:
                    80:bb:75:c3:49:6e:4e:e0:b9:14:fb:c3:e7:ca:fa:
                    28:18:45:91:fe:46:bc:08:7a:3a:da:86:32:f1:6a:
                    cf:4d:86:5a:ba:e4:d4:3f:54:e1:1e:68:c6:3d:f2:
                    d7:a3:3d:b6:ea:72:c6:b3:92:ad:63:1b:49:5d:b3:
                    bc:ca:af:50:6c:bb:ed:cc:02:4e:9d:04:1e:af:02:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CF:22:25:A3:8A:10:1C:C4:AC:96:1E:D6:90:E8:DF:D0:86:77:2C
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33362e302f32342d3234203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:be:14:85:bd:2a:59:ed:87:24:35:a3:0b:c6:ef:72:8a:d9:
         2b:d4:bc:35:89:a5:92:8c:c1:0c:79:26:c4:fb:88:16:cc:28:
         c2:60:15:48:13:c5:61:af:2a:89:d0:da:6e:3f:45:21:c1:4f:
         c7:45:3a:e9:b8:0d:50:9b:c1:5d:2e:92:b8:62:97:05:03:44:
         69:ae:7a:b8:56:25:e4:5a:7e:25:a7:9c:d3:38:ea:2f:a9:ce:
         c4:0f:40:a5:58:3a:6f:42:7b:9f:73:db:c2:5d:9d:5f:2e:e6:
         7d:f8:c9:c1:df:7d:46:0a:3b:96:78:49:4a:20:17:4f:d7:5d:
         2a:0f:90:5d:cf:81:97:ec:5f:bc:39:af:6b:dd:02:cb:58:ef:
         66:26:5e:5f:38:ab:1c:21:02:86:32:60:1e:ec:94:a5:8d:aa:
         eb:59:ce:75:82:c7:ca:77:0f:df:53:91:98:90:0c:56:25:17:
         55:4b:49:97:f9:bf:22:c7:43:0c:7f:09:29:c7:a8:1e:05:b9:
         ff:0a:bd:87:11:cf:02:1a:ec:24:ce:96:cc:be:14:fb:c4:42:
         03:43:35:b9:72:ff:28:44:d8:b0:43:22:20:f6:c6:c3:c7:e4:
         d9:36:08:68:3c:9e:6f:e7:c3:44:44:6a:ca:46:b6:fd:5a:fb:
         45:a0:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org