Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130322e302f32342d3234203d3e203631383731.roa
File:                     3133382e35392e3130322e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          njZHhNCskKcy/d3pXGWhHzs9arrNDCZaUrOJDGbxY6Y=
Subject key identifier:   95:A4:ED:F3:11:6B:54:03:B2:AB:F4:5A:92:A5:B5:0C:89:A2:D8:9F
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       0AA4ABB9CCBFBEAAEFCAD095B7BA673E851D95AF
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130322e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:05:37 +0000
ROA not before:           Fri 20 Oct 2023 15:00:37 +0000
ROA not after:            Fri 18 Oct 2024 15:05:37 +0000
asID:                     61871
IP address blocks:        138.59.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a4:ab:b9:cc:bf:be:aa:ef:ca:d0:95:b7:ba:67:3e:85:1d:95:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 15:00:37 2023 GMT
            Not After : Oct 18 15:05:37 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:16:0c:d5:c4:9a:cb:35:7f:fb:c9:c1:d6:
                    34:59:09:d6:61:b2:10:d8:6f:41:d9:b7:21:dc:a5:
                    35:7f:2d:97:d9:19:c9:f3:6e:7d:3f:00:a2:c6:73:
                    22:90:7f:c4:66:59:4a:e7:bf:e5:22:88:66:57:ef:
                    ff:9b:ab:6e:5e:86:b8:62:c3:b2:37:6a:64:f8:4a:
                    12:a5:a1:c8:f8:be:88:41:8e:ec:78:86:35:fb:fe:
                    f9:5a:d8:83:a3:e7:aa:4f:32:e2:d2:f1:23:f4:17:
                    a2:e9:98:2e:78:05:08:c8:4f:23:d6:0b:41:b0:37:
                    5a:68:2d:1f:8c:50:19:dc:be:76:5b:b6:2d:6f:c8:
                    35:8b:39:f3:16:9d:5c:ca:91:2f:57:8f:81:44:3e:
                    92:a3:7a:2c:33:f2:9f:4a:13:04:74:49:07:2f:81:
                    59:35:8e:8b:40:6d:cf:f6:b1:46:cd:42:9e:41:7c:
                    84:ad:81:53:24:9f:ca:de:f5:09:f1:b6:f5:0b:fa:
                    6e:be:2e:18:4c:1c:63:af:9d:cb:43:f1:c3:4d:67:
                    e5:ed:95:fb:8f:13:82:53:38:0c:5e:20:22:2d:87:
                    68:34:dd:ae:21:a2:a1:90:e8:e8:11:af:d8:1e:d9:
                    e2:49:dd:ff:dc:ec:14:72:59:96:1b:c2:7a:98:58:
                    76:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:ED:F3:11:6B:54:03:B2:AB:F4:5A:92:A5:B5:0C:89:A2:D8:9F
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130322e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:6b:af:c8:70:29:65:fd:85:29:70:a0:20:f9:e1:70:91:
         30:0a:f0:28:a2:cd:e6:e5:af:a4:c6:ac:1c:76:88:ca:67:e7:
         83:2c:39:1c:72:52:72:ea:93:d5:12:8e:a2:86:a8:3a:82:40:
         99:36:b9:e3:89:e7:a1:39:27:92:2b:a2:5c:da:72:95:07:4b:
         d8:87:b4:20:59:bf:b6:40:bd:84:4d:48:a1:56:96:3b:2b:89:
         f5:ae:59:c9:32:ef:f0:90:61:b9:47:30:13:d1:48:19:d0:49:
         9d:0f:e8:73:f2:32:4e:48:08:cd:e9:50:fa:50:54:f0:9e:a3:
         ce:d5:9e:80:ae:89:ff:50:b8:28:b2:5d:51:a7:fb:64:bc:1f:
         af:b9:9f:07:c7:32:a0:6d:08:7c:18:47:3c:45:7b:12:82:c8:
         ce:96:4b:8c:1f:8a:ec:a6:ec:66:c6:d0:ce:0a:14:c7:4c:d5:
         3d:8f:b8:f6:50:66:2e:ee:fe:4c:ac:c4:60:1a:d0:59:ed:63:
         90:ad:80:fc:75:8a:ed:ad:cc:c4:ad:41:b4:a3:65:bb:58:90:
         0d:d7:9b:3a:25:04:d5:06:16:be:44:45:56:f1:90:b3:65:e0:
         19:55:1d:92:84:6b:90:d8:b8:65:cf:8a:2c:b4:f3:d8:ef:48:
         24:99:aa:fd
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUCqSrucy/vqrvytCVt7pnPoUdla8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI3NTlBNzU4MDdBMTc3OUY2OUQ0QTVCMTlGRUM0NEIx
Njc3RDFEODAeFw0yMzEwMjAxNTAwMzdaFw0yNDEwMTgxNTA1MzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzkxQzE2MENENUM0OUFDQjM1
N0ZGQkM5QzFENjM0NTkwOUQ2NjFCMjEwRDg2RjQxRDlCNzIxRENBNTM1N0YyRDk3
RDkxOUM5RjM2RTdEM0YwMEEyQzY3MzIyOTA3RkM0NjY1OTRBRTdCRkU1MjI4ODY2
NTdFRkZGOUJBQjZFNUU4NkI4NjJDM0IyMzc2QTY0Rjg0QTEyQTVBMUM4RjhCRTg4
NDE4RUVDNzg4NjM1RkJGRUY5NUFEODgzQTNFN0FBNEYzMkUyRDJGMTIzRjQxN0Ey
RTk5ODJFNzgwNTA4Qzg0RjIzRDYwQjQxQjAzNzVBNjgyRDFGOEM1MDE5RENCRTc2
NUJCNjJENkZDODM1OEIzOUYzMTY5RDVDQ0E5MTJGNTc4RjgxNDQzRTkyQTM3QTJD
MzNGMjlGNEExMzA0NzQ0OTA3MkY4MTU5MzU4RThCNDA2RENGRjZCMTQ2Q0Q0MjlF
NDE3Qzg0QUQ4MTUzMjQ5RkNBREVGNTA5RjFCNkY1MEJGQTZFQkUyRTE4NEMxQzYz
QUY5RENCNDNGMUMzNEQ2N0U1RUQ5NUZCOEYxMzgyNTMzODBDNUUyMDIyMkQ4NzY4
MzREREFFMjFBMkExOTBFOEU4MTFBRkQ4MUVEOUUyNDlEREZGRENFQzE0NzI1OTk2
MUJDMjdBOTg1ODc2NjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyRwWDNXEmss1f/vJwdY0WQnWYbIQ2G9B2bch3KU1fy2X2RnJ8259
PwCixnMikH/EZllK57/lIohmV+//m6tuXoa4YsOyN2pk+EoSpaHI+L6IQY7seIY1
+/75WtiDo+eqTzLi0vEj9Bei6ZgueAUIyE8j1gtBsDdaaC0fjFAZ3L52W7Ytb8g1
iznzFp1cypEvV4+BRD6So3osM/KfShMEdEkHL4FZNY6LQG3P9rFGzUKeQXyErYFT
JJ/K3vUJ8bb1C/puvi4YTBxjr53LQ/HDTWfl7ZX7jxOCUzgMXiAiLYdoNN2uIaKh
kOjoEa/YHtniSd3/3OwUclmWG8J6mFh2aQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FJWk7fMRa1QDsqv0WpKltQyJotifMB8GA1UdIwQYMBaAFJt1mnWAehd59p1KWxn+
xEsWd9HYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NwdWFtMUp0OUgyWHpC
cUhXa3lUcFVCRUZGeHRXbVJoZGF6OUxzYWJ4MXkyLzAvOUI3NTlBNzU4MDdBMTc3
OUY2OUQ0QTVCMTlGRUM0NEIxNjc3RDFEOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85Qjc1OUE3NTgwN0ExNzc5RjY5RDRBNUIxOUZFQzQ0QjE2NzdE
MUQ4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DcHVhbTFKdDlIMlh6QnFIV2t5
VHBVQkVGRnh0V21SaGRhejlMc2FieDF5Mi8wLzMxMzMzODJlMzUzOTJlMzEzMDMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM4MzczMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIo7
ZjANBgkqhkiG9w0BAQsFAAOCAQEAJqVrr8hwKWX9hSlwoCD54XCRMArwKKLN5uWv
pMasHHaIymfngyw5HHJScuqT1RKOooaoOoJAmTa544nnoTknkiuiXNpylQdL2Ie0
IFm/tkC9hE1IoVaWOyuJ9a5ZyTLv8JBhuUcwE9FIGdBJnQ/oc/IyTkgIzelQ+lBU
8J6jztWegK6J/1C4KLJdUaf7ZLwfr7mfB8cyoG0IfBhHPEV7EoLIzpZLjB+K7Kbs
ZsbQzgoUx0zVPY+49lBmLu7+TKzEYBrQWe1jkK2A/HWK7a3MxK1BtKNlu1iQDdeb
OiUE1QYWvkRFVvGQs2XgGVUdkoRrkNi4Zc+KLLTz2O9IJJmq/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org