Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35362e302f32322d3232203d3e203532363133.roa
File:                     3133382e33362e35362e302f32322d3232203d3e203532363133.roa (raw, json)
Hash identifier:          v5fbLvNGPLe/dvrpPeOjHSG/Dlf0a2Rkc8kHwVxX+EY=
Subject key identifier:   C1:4A:07:3C:6A:D9:7F:5A:C0:91:FE:7B:80:79:D0:BC:97:C7:F9:90
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       03620EC53F4497ACEF8C8E073CCF206D06CFA17A
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35362e302f32322d3232203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:58 +0000
ROA not before:           Wed 06 Mar 2024 14:46:58 +0000
ROA not after:            Wed 05 Mar 2025 14:51:58 +0000
asID:                     52613
IP address blocks:        138.36.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:62:0e:c5:3f:44:97:ac:ef:8c:8e:07:3c:cf:20:6d:06:cf:a1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:58 2024 GMT
            Not After : Mar  5 14:51:58 2025 GMT
        Subject: CN=C14A073C6AD97F5AC091FE7B8079D0BC97C7F990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:ca:f0:dd:3a:f5:04:2d:71:90:9f:2c:2c:
                    15:9f:89:25:fc:d4:0f:1a:66:2a:a5:83:f8:5a:0a:
                    e1:ef:23:6a:40:63:24:54:c4:1e:8c:a8:93:1b:6d:
                    5c:21:7e:91:7f:18:0d:ad:a7:3f:12:d0:3a:b2:1f:
                    ad:25:26:47:fc:87:0d:fd:04:7c:bb:1a:8c:12:92:
                    e9:f7:31:6e:17:be:9a:d4:21:ad:4c:87:20:c4:b7:
                    ed:43:b3:f0:25:96:e4:ca:ca:4c:a2:c6:28:8e:75:
                    09:f7:17:2c:6b:5b:f3:c4:d9:c9:78:60:24:f4:2e:
                    1d:6f:75:99:80:5b:3c:92:72:06:5b:b5:2e:58:ce:
                    e5:4c:f2:ea:29:28:f2:3b:97:d4:fa:fe:9c:b3:e1:
                    11:4d:e4:42:19:34:f6:de:94:02:05:6e:99:1b:17:
                    9d:b8:6c:b7:4d:53:c5:71:7a:51:77:96:ed:06:fd:
                    9a:67:1e:57:e7:dd:df:f8:05:2d:8d:8c:bd:a2:36:
                    a1:30:5b:d7:24:30:03:4a:17:9c:52:42:3e:00:6d:
                    b9:a2:53:01:16:18:53:50:d8:3a:af:dc:99:1b:ce:
                    87:da:3f:ae:94:75:c3:7d:0d:5b:23:b4:23:d1:6e:
                    2c:0e:6f:81:a5:fb:cc:17:bd:4a:32:b8:77:fe:23:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4A:07:3C:6A:D9:7F:5A:C0:91:FE:7B:80:79:D0:BC:97:C7:F9:90
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35362e302f32322d3232203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:af:09:25:4a:04:a8:bf:42:b8:ee:3b:be:23:2a:40:8d:dd:
         df:8e:19:f8:1d:e5:07:b8:e8:4b:61:96:5c:25:24:f4:b1:1a:
         2d:fb:3e:6c:2b:75:d3:58:2d:fa:14:43:22:d4:dc:86:05:a6:
         b1:93:8a:22:aa:57:36:de:c0:b2:fd:6e:0e:0e:85:49:25:77:
         0b:55:c0:b7:09:71:a1:65:9d:1d:db:16:e3:f5:11:43:35:3f:
         c1:36:69:19:e2:1c:c2:90:04:9a:01:64:20:16:6d:01:65:29:
         60:9a:61:33:fb:c5:25:78:a5:bf:40:b5:b5:08:57:08:6b:8a:
         b6:b0:ed:eb:4f:9f:5b:1d:18:56:0b:8f:97:08:6c:f9:99:22:
         dd:dd:cf:35:2b:e7:91:45:44:78:7a:ae:24:ee:14:59:c8:ed:
         0d:5d:30:93:3b:66:c2:9f:f3:55:58:65:72:07:68:5b:e6:e8:
         a9:00:65:8a:59:ae:05:e2:5a:ea:cd:11:92:4b:26:04:ae:6c:
         8b:a6:cf:b7:91:6b:01:96:51:f0:19:37:6d:56:f4:c2:94:49:
         ce:77:c0:fc:2d:a4:81:ca:69:9e:72:c7:64:66:79:4b:fa:e8:
         83:3e:1f:cb:93:28:f2:d6:18:63:f1:96:c2:8b:ae:58:f0:46:
         48:f9:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org