Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130302e302f32322d3233203d3e203631383731.roa
File:                     3133382e35392e3130302e302f32322d3233203d3e203631383731.roa (raw, json)
Hash identifier:          Niw2z6mlg43kmLPAMvhYmAnID6vgk/a48gC64kg+MRE=
Subject key identifier:   73:09:35:9C:A6:B9:C3:5B:09:32:33:AD:04:3A:73:C7:43:7C:D9:C4
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       5CC19EBC6007FA27590949F7EA09366B2C6BD1D6
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130302e302f32322d3233203d3e203631383731.roa
Signing time:             Thu 28 Dec 2023 22:40:00 +0000
ROA not before:           Thu 28 Dec 2023 22:35:00 +0000
ROA not after:            Thu 26 Dec 2024 22:40:00 +0000
asID:                     61871
IP address blocks:        138.59.100.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:9e:bc:60:07:fa:27:59:09:49:f7:ea:09:36:6b:2c:6b:d1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Dec 28 22:35:00 2023 GMT
            Not After : Dec 26 22:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:fd:18:f0:e5:dd:f6:4f:ec:8d:55:2d:e6:
                    6d:09:9d:f5:e0:02:bc:c7:49:96:b7:a5:b1:7b:9b:
                    77:a8:c8:7c:b3:7f:00:d4:35:18:46:91:a4:2b:84:
                    b3:fd:95:a8:eb:ae:10:d7:0d:62:08:e2:e5:74:ff:
                    68:a7:05:26:71:cc:11:6b:51:a2:a4:26:0e:5a:d4:
                    85:75:01:c6:10:10:56:b3:34:85:1a:a7:d1:b2:41:
                    30:d7:9e:6b:44:e8:86:01:b8:29:92:0b:f9:12:03:
                    fa:ad:a4:76:18:4a:dc:d6:7d:74:a6:98:bd:df:1b:
                    8e:9b:24:f3:29:c0:ee:f9:e6:cd:45:a0:35:77:be:
                    d6:ea:64:0e:0e:fa:c6:77:ac:9e:b5:60:8d:d1:56:
                    2d:50:18:a4:84:4d:c1:fb:b7:30:7b:59:45:7e:36:
                    47:11:87:c3:cd:1f:f9:29:71:48:35:88:0a:7f:85:
                    cf:ea:d8:1c:c1:b0:b9:e8:46:21:8b:fe:b5:e6:54:
                    8f:e6:da:e8:b7:9b:28:05:44:ce:e4:cd:67:5d:76:
                    37:a0:62:0f:8d:f8:93:38:85:6d:91:4c:85:4b:dc:
                    68:09:73:2e:19:da:2b:e9:12:3d:82:cb:c7:50:4f:
                    e5:28:64:3f:00:d7:1e:a7:34:11:00:28:f4:db:73:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:09:35:9C:A6:B9:C3:5B:09:32:33:AD:04:3A:73:C7:43:7C:D9:C4
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130302e302f32322d3233203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:d3:88:52:d3:73:64:ae:a0:ca:3c:d1:e6:b1:ff:d8:78:51:
         55:57:9c:b0:78:01:e2:c2:f2:19:0d:b9:45:6e:61:b1:8e:03:
         0d:cb:5e:bc:e3:7f:00:c3:73:8c:73:fa:69:64:76:1e:e5:d8:
         8b:02:2a:a7:24:75:e3:47:29:3b:58:38:88:dc:77:f1:99:0c:
         8d:05:ac:6e:ec:00:f0:ae:ab:8e:07:82:45:e6:90:e6:a9:08:
         ce:69:2f:55:51:93:a7:54:1d:fd:07:e2:5d:2a:95:a7:f9:64:
         0b:f9:c5:56:a7:ee:40:95:64:68:02:9c:e7:33:d3:de:4e:19:
         f8:c7:41:f2:c3:ca:e1:fb:03:d1:81:b1:03:c1:73:02:77:39:
         5a:3a:56:56:25:ec:73:f1:d1:c5:65:30:45:8d:04:b3:d0:24:
         8c:3d:55:41:f8:ab:ee:1a:33:44:c8:bc:77:07:21:ec:dd:70:
         05:40:10:95:13:88:34:14:6a:18:34:e3:29:ea:a7:34:47:b5:
         00:f9:f2:7d:57:cc:9a:aa:27:94:91:f0:51:23:4e:cb:de:6d:
         e0:53:b9:bb:14:8f:bd:09:7f:eb:30:7f:12:8d:ee:37:5b:ae:
         99:d4:65:3a:8a:eb:87:39:42:1d:f4:11:b2:23:19:db:a1:46:
         3f:87:1d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:18 2025 by rpki-client