Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e3138352e36302e302f32322d3332203d3e203631353838.roa
File:                     3133382e3138352e36302e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          orJWKHrF03457SmTJASUVZW2PUxp0ggC7GWPRlmVgko=
Subject key identifier:   BB:B4:4B:51:99:01:C2:28:91:FF:C1:DB:F2:39:B3:5A:93:99:1A:E5
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       43BAA6844442DFF6D4FED34490F3DE8B1451ED0F
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e3138352e36302e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 20:04:05 +0000
ROA not before:           Wed 27 Sep 2023 19:59:05 +0000
ROA not after:            Wed 25 Sep 2024 20:04:05 +0000
asID:                     61588
IP address blocks:        138.185.60.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ba:a6:84:44:42:df:f6:d4:fe:d3:44:90:f3:de:8b:14:51:ed:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:59:05 2023 GMT
            Not After : Sep 25 20:04:05 2024 GMT
        Subject: CN=BBB44B519901C22891FFC1DBF239B35A93991AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:de:dd:71:3c:48:b5:63:43:0b:d6:66:5f:
                    0e:0f:d0:88:d9:13:99:d4:ce:24:03:27:9a:8d:a9:
                    f9:a9:95:4a:99:42:34:0d:76:09:7d:7c:da:2a:eb:
                    af:e9:ec:b3:5a:1b:21:54:05:d3:8b:76:bb:e6:9a:
                    4a:1d:c7:8c:49:29:61:be:df:9c:e7:66:2c:13:06:
                    c7:c2:e8:ec:cb:ab:33:97:64:ff:77:b2:73:27:73:
                    db:b9:70:a4:ed:d5:9a:ef:04:89:af:23:ab:ff:c7:
                    c6:d6:e0:64:6b:b8:53:a6:23:52:72:78:24:c4:5e:
                    ea:40:ee:d9:2a:98:3c:cf:18:76:df:e3:ef:5d:e2:
                    41:3f:de:2f:61:52:87:ff:f7:df:36:30:b2:c9:39:
                    7b:44:5a:98:5c:c1:81:93:31:c2:35:92:7b:9c:11:
                    da:70:ed:be:27:1a:9e:77:ae:b9:11:ed:39:59:a4:
                    86:2c:b3:92:c1:6d:e9:0f:79:88:f7:e6:39:03:f4:
                    25:60:c6:ec:60:be:50:f5:6e:26:f7:09:66:45:d8:
                    c2:6d:0d:1d:b2:f6:19:ee:ee:cd:bd:46:23:e8:d7:
                    44:9e:cd:42:9d:4d:d4:c4:2f:a5:aa:ca:3d:0e:ef:
                    6d:28:60:70:3f:1b:28:18:38:d5:e3:b9:2a:f2:ca:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:4B:51:99:01:C2:28:91:FF:C1:DB:F2:39:B3:5A:93:99:1A:E5
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e3138352e36302e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:4a:f0:c5:c3:54:12:67:85:52:cc:8d:f1:6d:b5:12:0b:8f:
         89:59:c9:bf:38:4b:ad:04:d1:fd:9e:2e:94:2c:02:e3:e8:19:
         22:77:03:48:80:29:94:32:9c:56:52:5c:bc:c3:4d:53:e7:63:
         40:0d:8c:21:84:61:b0:d1:27:3e:53:d3:9b:9b:50:a0:3f:f5:
         bc:78:f6:fd:4d:91:d6:96:56:bf:ce:5b:5f:18:85:ed:df:c5:
         05:9b:e3:db:03:7b:6e:9d:c9:6a:a0:e0:f4:fb:82:a8:fa:c6:
         6e:74:c9:e1:ae:5d:8b:af:91:a1:12:3e:a7:d4:af:68:16:2f:
         79:f7:c3:95:e2:eb:b4:70:c9:72:73:8f:c1:df:61:0e:fe:5a:
         1e:d2:19:3a:0a:5c:19:e0:ab:7a:ea:75:64:06:cd:00:a1:d8:
         f9:b2:26:4f:5f:ef:40:8e:ad:83:ae:4a:07:51:fa:e0:43:30:
         a1:6a:a7:00:db:b7:dc:5f:44:e4:35:86:51:c1:e3:be:d3:c4:
         b5:47:8d:78:ad:0e:cd:06:a5:3f:70:de:78:4f:ce:53:9d:00:
         33:98:1f:82:51:e4:32:da:42:0b:5b:5e:3c:af:79:88:f4:8c:
         7a:5a:fc:56:fe:8d:1a:7b:fa:a8:4f:0c:12:c1:a5:c5:0b:09:
         c0:d5:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org