Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35382e302f32332d3233203d3e203532363133.roa
File:                     3133382e33362e35382e302f32332d3233203d3e203532363133.roa (raw, json)
Hash identifier:          ArxfrHpX+5hoJS3f2iGomx/856vnOdWNhDbGkb0OPVI=
Subject key identifier:   51:37:82:E5:51:93:E7:68:BF:5C:7F:6B:C2:22:2E:7E:AE:73:0D:7B
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       1FD941B8C4B1A0EE1D088777F523B288B0129B48
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35382e302f32332d3233203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:59 +0000
ROA not before:           Wed 06 Mar 2024 14:46:59 +0000
ROA not after:            Wed 05 Mar 2025 14:51:59 +0000
asID:                     52613
IP address blocks:        138.36.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d9:41:b8:c4:b1:a0:ee:1d:08:87:77:f5:23:b2:88:b0:12:9b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:59 2024 GMT
            Not After : Mar  5 14:51:59 2025 GMT
        Subject: CN=513782E55193E768BF5C7F6BC2222E7EAE730D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:7c:84:5e:58:af:21:07:df:2a:13:36:b8:
                    02:27:ca:2e:6b:7a:d6:ad:ed:52:78:4b:be:4a:5a:
                    28:01:75:da:c4:24:14:ac:78:0f:d6:be:9e:fe:47:
                    19:e0:41:fb:2a:23:cc:bd:d3:bc:fb:11:b1:b4:cb:
                    25:bf:3c:be:f2:ce:83:8b:50:6d:f8:52:19:ac:a6:
                    82:7d:20:f8:f8:ca:53:62:84:4f:19:28:bf:fa:6f:
                    ea:99:57:aa:cd:75:cc:39:9e:9f:26:7e:31:3d:0e:
                    1e:f1:53:57:26:b5:1f:cb:5a:29:62:6f:92:e2:d8:
                    dc:24:e9:96:ce:0e:f0:d7:e9:11:13:03:61:38:8f:
                    b6:83:8a:3d:b0:b9:43:54:6e:ff:36:a5:e5:64:eb:
                    f8:65:dd:56:63:e0:26:b4:86:5d:84:a9:29:41:c2:
                    f3:c0:81:42:f5:92:67:13:ab:d1:f1:71:b7:ad:97:
                    98:a9:3c:8b:34:a1:f0:ad:08:5c:a4:4d:03:b5:65:
                    5d:4d:f8:5e:60:e5:e6:6e:39:ab:3b:7d:15:95:12:
                    19:cd:e5:3f:83:49:e7:f4:a0:ae:87:f7:5d:26:db:
                    45:0d:5b:b2:47:a5:c7:17:51:17:16:db:32:66:72:
                    8d:f7:8e:be:ea:ac:36:2c:5d:7f:8f:94:5a:2a:80:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:37:82:E5:51:93:E7:68:BF:5C:7F:6B:C2:22:2E:7E:AE:73:0D:7B
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35382e302f32332d3233203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:f3:c9:95:61:44:c8:93:91:68:1a:7b:7e:05:c7:63:30:
         37:54:b7:7d:14:90:c6:4e:25:29:47:3d:97:13:0c:dd:cb:c7:
         ef:32:31:30:0f:7f:b0:c7:7e:4b:a9:8c:59:d5:8b:f8:28:49:
         5d:cb:30:62:c3:ac:66:7c:04:5c:a9:18:0d:73:50:63:77:36:
         df:32:15:8f:fd:b0:8a:ad:df:44:18:aa:9e:5d:d5:e9:1f:a3:
         d2:41:79:4c:cd:9b:66:52:66:83:12:2d:02:ce:7a:c4:fe:a1:
         24:66:ec:e8:cc:31:c1:fa:b0:eb:46:7f:6b:50:da:d0:10:60:
         8f:c3:be:0d:b2:26:75:12:be:6f:49:5d:1c:91:34:ac:59:cb:
         91:dc:8e:9c:de:56:41:27:12:f2:c5:2a:99:84:27:e2:7b:79:
         e7:9e:3e:c0:c9:92:58:16:ec:c5:93:1e:0c:0f:d1:dc:66:fd:
         df:b4:52:56:e9:e8:41:fb:e6:8c:53:d4:b5:5b:22:db:d1:66:
         f6:20:88:26:39:e8:39:33:bb:9f:cb:a3:90:86:99:f3:ba:e3:
         0e:6e:dc:2a:54:f9:ab:a2:62:a0:19:90:42:1a:de:99:f2:36:
         c8:69:79:9c:26:50:25:c8:71:25:ac:5d:e0:13:3a:7b:62:0f:
         94:79:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org