Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35372e302f32342d3234203d3e203532363133.roa
File:                     3133382e33362e35372e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          YMvfLSfa/4w9zXm/DAU8D2+eyxsFcYQIFO5woeGr6z4=
Subject key identifier:   88:07:13:5C:90:4D:90:79:1D:8C:AD:8E:C3:A0:81:E8:AB:1C:F4:5E
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       54D94508E378C004432C86FE5ED74805DC18F2DA
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35372e302f32342d3234203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:52:00 +0000
ROA not before:           Wed 06 Mar 2024 14:47:00 +0000
ROA not after:            Wed 05 Mar 2025 14:52:00 +0000
asID:                     52613
IP address blocks:        138.36.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d9:45:08:e3:78:c0:04:43:2c:86:fe:5e:d7:48:05:dc:18:f2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:47:00 2024 GMT
            Not After : Mar  5 14:52:00 2025 GMT
        Subject: CN=8807135C904D90791D8CAD8EC3A081E8AB1CF45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:6e:0d:19:d2:ca:88:ca:18:3f:91:fa:d8:
                    10:f7:88:b9:71:7c:1f:5c:ec:4f:11:83:19:82:79:
                    86:49:68:59:eb:02:06:1e:12:74:0a:d7:60:83:c5:
                    b7:55:93:de:d7:75:66:62:77:5c:80:79:09:b9:a0:
                    86:49:d3:b8:b5:ab:2f:6c:e6:46:db:dc:df:e6:86:
                    f7:a5:59:aa:41:c7:5c:2f:8f:17:45:3b:5a:8f:65:
                    bb:50:ba:d3:bb:73:63:7d:f2:ef:ba:3f:01:b9:b0:
                    45:43:67:1c:b6:45:94:cf:d4:5f:01:54:98:4b:26:
                    91:3e:78:c1:b6:5a:84:36:59:d0:10:91:7b:92:0d:
                    15:29:9d:cb:26:a1:56:7b:40:65:2a:57:62:f4:7f:
                    18:1b:38:13:2e:11:7d:9b:30:c0:8e:7f:1c:d0:88:
                    63:73:ee:88:2b:48:e3:33:72:c6:3d:19:b7:34:07:
                    8f:d2:4d:f7:52:cb:d2:86:f8:6c:86:e5:e0:f4:ff:
                    99:38:e5:09:3a:0a:b3:ca:f7:c0:b2:5e:86:ac:fd:
                    24:46:46:be:ae:1a:50:f2:99:b5:ad:32:e1:3b:a0:
                    78:e1:a5:45:bf:70:68:ea:d1:93:e5:8e:3a:4e:4d:
                    79:12:9b:33:87:3e:74:81:66:9f:c5:3f:c7:1a:2e:
                    07:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:07:13:5C:90:4D:90:79:1D:8C:AD:8E:C3:A0:81:E8:AB:1C:F4:5E
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35372e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:44:22:a9:1b:27:b8:bb:96:93:df:7d:66:30:41:53:73:53:
         83:bd:59:8a:1e:7e:37:a7:b8:42:6b:76:81:64:1b:5e:89:86:
         cb:de:58:b5:d2:c7:c6:53:27:51:56:84:39:e2:24:11:b9:2b:
         cf:7d:b7:1c:eb:32:36:39:54:c3:39:d4:c6:1b:dd:22:4a:6f:
         0b:06:dc:b1:82:ec:5a:86:9b:ff:05:10:5d:04:eb:48:09:56:
         e8:c7:77:f1:d3:02:b6:59:ac:59:59:73:fa:15:f0:99:8d:76:
         bc:3e:c1:c1:81:db:b5:be:89:1c:a0:2b:42:8b:7e:ad:53:bd:
         57:41:69:6a:c0:c0:c0:d3:bc:1e:e7:56:5a:a2:e6:d0:19:ab:
         81:da:3a:16:c3:58:ea:a7:90:e7:16:57:07:02:19:f7:fb:a5:
         52:10:c0:89:96:dd:c8:73:e3:53:9d:37:a9:c3:54:40:61:79:
         1f:26:6a:0a:df:f3:04:92:40:3f:d0:87:e0:05:f2:73:49:71:
         cd:bd:11:85:6a:75:8c:01:ce:6c:4e:54:e7:22:64:eb:d4:ba:
         b6:76:94:88:bd:7b:1b:73:77:ba:be:60:a6:b9:8d:02:80:96:
         be:6d:82:4e:c6:af:8e:ab:fa:cd:37:42:aa:06:48:29:34:9e:
         91:88:ab:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org