Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130302e302f32342d3234203d3e203631383731.roa
File:                     3133382e35392e3130302e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          suEPlV9H8py1s+CCYyi8zVPSZLimOkEXwEnYpOPFrAo=
Subject key identifier:   2F:C0:9B:FD:94:73:78:A9:0C:C1:6D:29:9C:03:F5:CD:1A:56:C1:93
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       7418E779C40FFC36E4B28231974214394F21F4B2
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130302e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:05:11 +0000
ROA not before:           Fri 20 Oct 2023 15:00:11 +0000
ROA not after:            Fri 18 Oct 2024 15:05:11 +0000
asID:                     61871
IP address blocks:        138.59.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:18:e7:79:c4:0f:fc:36:e4:b2:82:31:97:42:14:39:4f:21:f4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 15:00:11 2023 GMT
            Not After : Oct 18 15:05:11 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:e5:2b:3e:89:d5:90:b9:01:92:ce:e2:af:
                    3b:2e:7d:76:eb:05:23:55:ce:c6:4a:38:b8:82:80:
                    e5:b1:07:91:c0:f6:37:17:94:4e:a2:f9:11:39:ab:
                    e8:b1:3a:eb:d9:7e:99:f5:7b:0c:f4:50:11:b3:49:
                    63:58:b2:d3:e2:d1:ef:ab:0a:6e:ca:6c:0a:f3:07:
                    c8:12:bb:51:23:72:fb:6c:f3:b0:cd:8c:3a:98:5f:
                    5e:21:bc:a6:86:23:aa:88:e6:0b:1a:10:59:55:32:
                    2d:1f:c5:b9:94:b8:6e:e3:68:08:3d:56:bb:ef:f2:
                    db:d5:df:c2:3d:a1:b5:3a:0e:86:11:61:ca:cb:dc:
                    c1:5f:2f:e8:aa:bf:40:88:9f:7a:80:33:cd:11:cf:
                    40:cf:a6:ad:18:ac:f1:73:00:24:f6:7f:52:a6:18:
                    c2:e3:f7:e6:6f:2d:dc:c0:3b:bb:b8:99:28:58:c5:
                    76:02:72:67:8d:ef:17:c8:5e:4c:73:22:5f:10:15:
                    41:a0:86:30:db:9b:df:cc:38:9c:c6:05:8b:13:0b:
                    a5:0b:0f:9c:07:ce:d7:02:9b:95:4d:f1:80:15:53:
                    85:89:68:27:5a:24:c0:99:2f:12:e3:c9:60:9a:cb:
                    da:00:a4:8e:51:c4:13:64:fc:48:be:3a:e1:51:d4:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C0:9B:FD:94:73:78:A9:0C:C1:6D:29:9C:03:F5:CD:1A:56:C1:93
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130302e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:e0:47:21:5a:88:76:84:a0:2d:d9:4e:c2:db:5c:28:a6:
         95:c1:d8:c7:30:40:ee:1f:8e:18:ac:d2:f0:c2:31:e3:be:30:
         0f:3c:e4:a0:16:68:f9:58:b1:51:03:ce:6d:cb:86:b4:d5:e5:
         49:9c:15:fd:cf:99:27:c8:2f:3a:79:3d:ff:ac:ed:e4:f9:93:
         bd:53:8c:ce:a1:ed:b2:4b:c7:e6:a6:64:21:03:3d:bc:ef:e4:
         f4:2e:ae:3b:1e:55:92:7e:5a:18:7c:36:f9:2b:42:27:d4:d4:
         c5:8d:0f:da:21:c4:50:47:94:49:4b:cd:5d:0c:ec:32:bc:6f:
         0a:f6:60:33:15:65:57:4e:e1:97:10:10:2a:fa:6e:8e:b8:1d:
         d6:31:03:26:30:f8:c4:88:62:d3:cf:21:c5:88:7e:fd:52:2c:
         22:3e:75:8b:38:ee:af:0a:14:82:94:49:3b:89:87:97:2e:06:
         fa:a2:3b:b5:ee:d1:02:e9:b9:8a:4a:22:a2:1c:37:8e:ad:49:
         3e:ce:f4:19:cb:c9:e4:db:6c:da:f6:e5:52:f3:2c:6d:bd:8a:
         19:3b:1e:e1:55:38:53:04:35:0b:5f:f8:a1:ee:aa:df:2b:74:
         c9:60:ec:16:40:b6:c7:8b:95:73:62:7a:3b:a3:56:c1:ab:15:
         0d:f0:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org