Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35392e302f32342d3234203d3e203532363133.roa
File:                     3133382e33362e35392e302f32342d3234203d3e203532363133.roa (raw, json)
Hash identifier:          g98Pc4oJkhO3JFXyhKB2uoepQ7pfqH3jlc2/fNADrxs=
Subject key identifier:   FA:B4:C3:96:F3:13:35:D7:93:9C:D6:B9:5C:E6:2A:87:9E:9B:29:22
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       15DC25963C1FBB359859266DBBF65AC3AD0C0F7B
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35392e302f32342d3234203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:51:57 +0000
ROA not before:           Wed 06 Mar 2024 14:46:57 +0000
ROA not after:            Wed 05 Mar 2025 14:51:57 +0000
asID:                     52613
IP address blocks:        138.36.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:25:96:3c:1f:bb:35:98:59:26:6d:bb:f6:5a:c3:ad:0c:0f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:46:57 2024 GMT
            Not After : Mar  5 14:51:57 2025 GMT
        Subject: CN=FAB4C396F31335D7939CD6B95CE62A879E9B2922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:47:71:8f:41:f4:36:ff:ea:f1:c7:85:57:
                    a9:ea:07:49:5c:78:9e:5a:23:09:d0:b9:ec:5a:d8:
                    2d:1f:10:31:c5:00:d8:7b:7e:49:88:1a:0c:29:13:
                    83:30:1a:0c:6a:35:b2:8b:26:e3:a4:24:e7:40:6b:
                    6d:75:b1:40:4b:e1:0c:9e:ad:42:19:75:ce:17:41:
                    cb:3a:22:0d:9c:2a:04:7e:f8:06:6e:d2:eb:03:7a:
                    e9:20:79:0d:c4:be:50:c0:f8:18:79:9e:69:c8:98:
                    1d:df:c3:27:94:22:cb:56:d1:9b:f2:9c:f0:5a:db:
                    76:e9:97:e1:8f:79:15:54:95:0c:9a:9e:33:5e:ab:
                    66:4a:e9:79:d0:17:28:e6:b1:50:fd:01:f9:f5:22:
                    23:3e:87:0a:8b:cf:1c:a7:7a:cd:c3:38:da:24:6b:
                    40:18:b2:d4:35:5e:6f:bb:af:9e:2e:76:61:a2:8b:
                    d1:a8:43:06:c0:bc:8f:0d:77:72:21:30:96:dc:cf:
                    ee:dc:d8:1a:42:8f:94:86:d8:46:3a:ad:4c:ca:f1:
                    7b:7a:67:79:ec:b9:ef:cc:74:36:61:6c:d0:40:64:
                    bd:b1:40:6d:cc:1e:d9:ff:6f:3a:63:e8:9d:63:bf:
                    1c:63:cd:78:56:1d:c6:c9:7f:29:7a:e8:df:b1:48:
                    6d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B4:C3:96:F3:13:35:D7:93:9C:D6:B9:5C:E6:2A:87:9E:9B:29:22
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/3133382e33362e35392e302f32342d3234203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:82:3a:aa:73:77:00:a5:3f:e9:75:7b:e1:89:a9:70:11:2e:
         b5:00:6b:37:2a:8e:ac:15:b6:5a:7e:d3:fa:f3:1b:a9:6d:57:
         1f:88:84:52:8a:25:6e:2b:4a:5a:e9:a3:32:a6:00:80:9b:30:
         83:a0:1a:10:98:be:bf:3f:0a:ca:43:98:d1:05:41:e9:76:69:
         66:4c:08:80:66:b0:75:0b:9f:ed:f2:b5:f8:da:a0:8c:3a:b3:
         1f:1b:36:6e:55:89:3c:fb:ca:59:46:98:cb:4a:54:0f:fe:18:
         e3:f2:41:89:3b:a8:ef:41:85:d4:9d:f3:24:15:8c:4f:5e:77:
         eb:40:dd:ef:61:47:c7:93:c8:51:91:bf:24:da:a7:92:a3:03:
         c4:e8:37:ba:56:e8:0c:79:f6:09:a7:72:4c:2f:3f:d5:80:7e:
         c4:a7:08:90:f9:20:9f:19:49:4d:12:ae:6d:7a:ca:2d:05:14:
         c8:3a:73:3e:50:f2:bd:aa:ff:ec:15:99:62:60:04:f1:9f:aa:
         08:8d:e0:bb:2f:db:36:a2:0f:b1:cf:e0:ba:f1:3a:ed:ea:20:
         4a:23:6f:f9:56:86:c5:0f:71:e9:e5:f8:19:36:88:b1:0d:c1:
         9f:d6:00:64:f6:46:b7:9e:b6:4c:a7:3f:d6:bf:48:b2:e7:56:
         40:01:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org