Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35382e302f32342d3234203d3e203532363133.roa
File:                     3133382e33362e35382e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          uDuxsuXkVnssVmnkTErPecWquRzpKsSZ5+f4NgkSbaY=
Subject key identifier:   DD:3F:98:AF:EE:FA:B8:C8:33:3C:3C:0C:69:FB:EA:9E:29:A9:34:29
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       392D32ECE6F78E41653E514A2FC7D3122B4BCA82
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35382e302f32342d3234203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:59 +0000
ROA not before:           Wed 06 Mar 2024 14:46:59 +0000
ROA not after:            Wed 05 Mar 2025 14:51:59 +0000
asID:                     52613
IP address blocks:        138.36.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2d:32:ec:e6:f7:8e:41:65:3e:51:4a:2f:c7:d3:12:2b:4b:ca:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:59 2024 GMT
            Not After : Mar  5 14:51:59 2025 GMT
        Subject: CN=DD3F98AFEEFAB8C8333C3C0C69FBEA9E29A93429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:0f:e7:b2:6e:26:8a:52:d6:92:f1:e4:b2:
                    35:94:43:68:22:04:30:68:5e:ea:40:04:2a:f9:79:
                    0d:d0:99:85:bf:92:68:a9:26:c7:c1:26:bb:ad:8f:
                    b4:8c:25:37:6f:0f:d8:ea:3c:40:59:26:e7:bb:44:
                    1f:2e:8c:5e:c4:e6:dc:d9:7f:db:2e:7f:f3:b3:e6:
                    38:f0:5a:fb:b0:f8:b2:f2:9f:9c:a1:45:d4:b7:e0:
                    26:03:7e:75:96:30:bf:7a:7f:7b:5d:5c:e9:53:89:
                    97:56:62:1b:e9:4a:8b:dd:dc:1f:19:22:f6:f1:17:
                    e1:97:52:b4:90:98:0f:72:ca:29:66:15:39:06:df:
                    43:98:fc:43:d9:13:1f:b3:34:05:75:2c:7d:8a:cb:
                    44:30:ee:b1:51:7f:21:d2:c0:db:8f:ba:af:07:5f:
                    79:4b:ac:e6:30:b6:7e:9b:56:e7:3c:58:25:6b:45:
                    6e:42:03:fa:ef:a3:d7:04:84:94:07:fe:aa:93:2c:
                    7e:73:50:bc:05:c4:64:92:c6:7f:df:09:67:39:0c:
                    7b:01:15:45:b8:ea:8e:90:17:f9:95:17:bf:49:4c:
                    fb:af:df:c4:2b:b6:4d:c0:67:c8:03:7b:e0:be:9c:
                    a9:4a:9a:d4:75:57:78:dd:79:d3:b6:6f:5c:8d:a4:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:98:AF:EE:FA:B8:C8:33:3C:3C:0C:69:FB:EA:9E:29:A9:34:29
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35382e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:88:51:c3:52:ee:a1:88:1b:d2:3c:ba:27:b1:6b:29:8d:d0:
         8c:f0:d5:7c:e7:94:64:72:11:79:33:79:a4:fd:cb:9e:7c:f7:
         6a:d5:0c:30:f6:48:29:c3:ed:19:2c:1d:18:7e:81:56:5c:49:
         df:4f:7e:8b:a6:a8:27:4c:a3:3f:2f:6b:bd:7a:3d:83:7a:1c:
         fc:65:20:87:1f:48:4c:09:97:cf:b3:f1:bd:13:71:59:96:d2:
         a4:1a:4e:0e:c6:cb:cb:37:20:6f:cf:5b:fc:92:d7:be:59:97:
         55:a8:89:8e:41:64:43:09:37:14:cd:22:4f:ac:af:66:64:20:
         3e:bf:a7:f6:97:ad:50:0a:27:e6:76:0d:7b:c5:72:f7:40:2e:
         13:57:02:a9:ec:11:9d:a1:c7:2d:95:cd:97:f0:96:f0:05:d0:
         55:ab:83:de:d5:2d:0b:25:15:a7:ca:09:a8:3f:58:9f:56:ed:
         3e:10:9f:17:4b:ba:32:15:02:90:69:b1:d2:fc:04:c2:c8:65:
         ac:5c:72:72:91:40:b6:c8:9e:89:cc:e0:42:11:ea:16:ef:fc:
         5b:ff:fe:33:4d:93:fc:00:7f:77:5d:d4:0c:94:a9:7e:d6:b2:
         90:5a:e7:e2:2c:da:10:e6:ed:12:f2:fe:d7:10:8a:3e:85:be:
         ef:44:7e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org