Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33372e302f32342d3234203d3e20323730393332.roa
File:                     3133382e35392e33372e302f32342d3234203d3e20323730393332.roa (raw, json)
Hash identifier:          BL6zXdIYsB0dM28kllQ68dEMgILc2tUa3XYkFc2N8aY=
Subject key identifier:   5B:82:85:DA:34:F2:1C:83:5F:4C:6A:51:4E:C1:A6:2F:30:B7:E6:B6
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       7029EC97850FC2D718185E0CB98754A3EB97E7EB
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33372e302f32342d3234203d3e20323730393332.roa
Signing time:             Wed 13 Mar 2024 12:03:13 +0000
ROA not before:           Wed 13 Mar 2024 11:58:13 +0000
ROA not after:            Wed 12 Mar 2025 12:03:13 +0000
asID:                     270932
IP address blocks:        138.59.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:29:ec:97:85:0f:c2:d7:18:18:5e:0c:b9:87:54:a3:eb:97:e7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Mar 13 11:58:13 2024 GMT
            Not After : Mar 12 12:03:13 2025 GMT
        Subject: CN=5B8285DA34F21C835F4C6A514EC1A62F30B7E6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d7:23:12:75:10:31:a0:46:b6:57:22:c9:18:
                    0a:be:77:4d:77:7a:48:76:82:82:35:0c:20:23:bd:
                    0c:7d:d3:56:80:fa:ad:9e:15:eb:5b:71:43:25:6b:
                    dd:0b:d2:54:6d:fe:97:f9:3c:11:7e:18:9c:21:9e:
                    43:61:76:8d:39:7f:7e:b2:21:c1:3e:2a:48:a0:08:
                    89:3f:bb:50:60:3d:91:a1:69:0b:2d:8a:5b:aa:ba:
                    8f:93:01:8b:d4:f0:bc:68:25:9f:ae:a0:c0:24:07:
                    9e:91:fd:35:4a:84:be:f8:ea:48:7c:04:2f:90:e9:
                    13:d5:fc:7d:d3:b4:5c:3b:a3:21:4d:7b:89:f1:40:
                    46:9b:8a:e1:c1:6c:ee:b4:3e:75:e5:b5:40:74:df:
                    20:e5:3d:fc:35:a8:c6:0f:5a:56:03:ba:d0:a3:10:
                    f6:d2:28:78:97:ba:1f:f2:dc:0f:bf:75:74:8e:27:
                    af:8c:87:39:77:58:7c:20:22:1e:66:2b:a9:1b:6c:
                    27:5e:16:ad:b7:d2:1f:ee:2a:d7:b8:a7:bf:a2:8c:
                    6d:f1:fd:24:ec:f1:48:d1:c9:0a:25:5e:09:08:70:
                    96:db:bb:78:9c:d9:6d:34:85:7a:e1:c5:d4:cf:e0:
                    e5:68:e4:91:b5:3e:1c:fb:6b:36:49:eb:6c:61:c2:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:82:85:DA:34:F2:1C:83:5F:4C:6A:51:4E:C1:A6:2F:30:B7:E6:B6
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/3133382e35392e33372e302f32342d3234203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:77:5d:f8:85:09:b0:a9:47:8c:a9:ab:8e:fa:22:34:fc:
         84:91:b1:9f:cb:65:6d:7a:98:bc:1a:89:2b:f8:79:79:52:d0:
         fe:bc:b4:a0:1a:52:77:0f:77:07:5b:96:a2:3f:00:9f:24:fe:
         c3:3f:fb:41:6a:96:ba:ca:c6:ae:44:18:25:60:7b:8c:aa:99:
         a2:6b:30:83:b2:13:70:7c:7f:95:9f:0c:eb:9b:f5:cd:84:1e:
         69:89:83:75:ee:44:c0:0e:bc:5d:c3:d9:f1:e7:f9:28:5b:1c:
         d7:ae:68:b7:fe:9e:47:0e:92:de:22:79:6e:df:66:22:76:1e:
         02:71:f1:4e:ba:72:97:d4:c0:53:5a:d8:20:bd:51:e9:d4:07:
         2f:df:b0:1c:ba:88:4c:ef:41:84:50:f8:f7:70:da:73:95:5b:
         c3:c1:7c:a3:56:1b:c4:5e:b6:f3:22:d9:ba:7b:e1:76:d6:16:
         e5:35:00:e7:28:13:1f:f8:b2:d6:14:aa:7c:c7:21:00:57:bd:
         d4:cd:d3:ae:e0:d1:b6:e8:34:f1:b9:64:9a:8b:00:4b:a8:8b:
         c9:12:e6:63:db:e6:68:f6:a9:3d:9b:ce:a0:b2:40:76:19:8c:
         f2:73:79:1b:96:07:fd:3e:06:1f:a5:b1:c8:1c:a8:26:39:56:
         e9:71:e3:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcCnsl4UPwtcYGF4MuYdUo+uX5+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFEQUEzOUU1RDQ4QTA0NEQ3Qjc2MjI4REFBOTY2MEM2
MTQ3NzIzQTAeFw0yNDAzMTMxMTU4MTNaFw0yNTAzMTIxMjAzMTNaMDMxMTAvBgNV
BAMTKDVCODI4NURBMzRGMjFDODM1RjRDNkE1MTRFQzFBNjJGMzBCN0U2QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1yMSdRAxoEa2VyLJGAq+d013
ekh2goI1DCAjvQx901aA+q2eFetbcUMla90L0lRt/pf5PBF+GJwhnkNhdo05f36y
IcE+KkigCIk/u1BgPZGhaQstiluquo+TAYvU8LxoJZ+uoMAkB56R/TVKhL746kh8
BC+Q6RPV/H3TtFw7oyFNe4nxQEabiuHBbO60PnXltUB03yDlPfw1qMYPWlYDutCj
EPbSKHiXuh/y3A+/dXSOJ6+Mhzl3WHwgIh5mK6kbbCdeFq230h/uKte4p7+ijG3x
/STs8UjRyQolXgkIcJbbu3ic2W00hXrhxdTP4OVo5JG1Phz7azZJ62xhwqP3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUW4KF2jTyHINfTGpRTsGmLzC35rYwHwYDVR0j
BBgwFoAUUdqjnl1IoETXt2Io2qlmDGFHcjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Zmc1pxWmdINjlhYXR2dEtwTUZlVk13TU5ZN0ZnczM1OHRRS3pYVlVV
SGUvMC81MURBQTM5RTVENDhBMDQ0RDdCNzYyMjhEQUE5NjYwQzYxNDc3MjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxREFBMzlFNUQ0OEEwNDRE
N0I3NjIyOERBQTk2NjBDNjE0NzcyM0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NWZnNacVpnSDY5YWF0dnRLcE1GZVZNd01OWTdGZ3MzNTh0UUt6WFZVVUhlLzAv
MzEzMzM4MmUzNTM5MmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAijslMA0GCSqGSIb3DQEBCwUAA4IBAQA2PXdd+IUJ
sKlHjKmrjvoiNPyEkbGfy2Vtepi8Gokr+Hl5UtD+vLSgGlJ3D3cHW5aiPwCfJP7D
P/tBapa6ysauRBglYHuMqpmiazCDshNwfH+Vnwzrm/XNhB5piYN17kTADrxdw9nx
5/koWxzXrmi3/p5HDpLeInlu32Yidh4CcfFOunKX1MBTWtggvVHp1Acv37AcuohM
70GEUPj3cNpzlVvDwXyjVhvEXrbzItm6e+F21hblNQDnKBMf+LLWFKp8xyEAV73U
zdOu4NG26DTxuWSaiwBLqIvJEuZj2+Zo9qk9m86gskB2GYzyc3kblgf9PgYfpbHI
HKgmOVbpcePj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:24 2024 by rpki-client on console-fra.rpki-client.org