Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa
File:                     3133382e35392e3132342e302f32322d3332203d3e203631353838.roa (raw, json)
Hash identifier:          vIfPt+Ntv2R3JeEf59hEte0ruz4SjwDXRh7oFrHU1eY=
Subject key identifier:   41:20:63:F4:7F:07:BD:96:71:E2:D7:32:C1:43:37:C1:86:8C:44:74
Certificate issuer:       /CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
Certificate serial:       4CA23FA848C57946AE6F325CA9F5169303972AEB
Authority key identifier: 75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa
Signing time:             Wed 27 Sep 2023 19:58:34 +0000
ROA not before:           Wed 27 Sep 2023 19:53:34 +0000
ROA not after:            Wed 25 Sep 2024 19:58:34 +0000
asID:                     61588
IP address blocks:        138.59.124.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a2:3f:a8:48:c5:79:46:ae:6f:32:5c:a9:f5:16:93:03:97:2a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75D606BA82DC85E5AA57AC0E5F2DA370B37A672A
        Validity
            Not Before: Sep 27 19:53:34 2023 GMT
            Not After : Sep 25 19:58:34 2024 GMT
        Subject: CN=412063F47F07BD9671E2D732C14337C1868C4474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:bc:3e:2e:57:8c:b4:7b:54:40:de:62:26:
                    6c:24:04:5e:21:b4:58:2d:68:27:99:14:7e:70:93:
                    36:b3:17:58:59:b0:b1:ec:bd:89:7c:3f:30:d3:b6:
                    7f:10:14:bc:54:a7:cf:3d:18:54:4b:83:b5:25:6a:
                    ac:f8:61:27:39:97:00:f4:c8:fe:ea:78:0b:1a:95:
                    7b:b7:6c:53:f0:3f:66:7c:fe:b9:ad:e7:2e:b9:ca:
                    f6:d0:24:db:81:2e:67:9f:61:f0:46:6c:97:7e:0e:
                    2b:70:1b:b6:31:1b:7c:ff:b1:fe:95:de:0c:73:55:
                    82:14:2b:6c:72:b7:64:b5:57:8c:c8:51:a6:68:8a:
                    01:83:e2:a7:06:48:c8:3b:01:38:a5:b0:3b:9d:c3:
                    8e:12:07:9d:4e:4e:e7:4c:af:fc:12:99:3e:9f:d1:
                    66:e3:5b:25:76:5a:c9:ef:36:e6:4c:2a:33:af:39:
                    ac:b4:56:48:36:69:f4:43:26:eb:d8:39:b7:c0:22:
                    83:15:72:9e:4b:07:be:7b:0c:17:09:a7:47:9b:ed:
                    34:e5:18:c9:2a:37:54:9e:d5:28:1c:85:97:6e:41:
                    ad:69:c8:61:26:b5:5f:4e:c1:24:9a:b6:73:a5:1d:
                    26:3d:d4:27:77:43:5f:9e:8d:51:71:16:75:a6:74:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:63:F4:7F:07:BD:96:71:E2:D7:32:C1:43:37:C1:86:8C:44:74
            X509v3 Authority Key Identifier:
                keyid:75:D6:06:BA:82:DC:85:E5:AA:57:AC:0E:5F:2D:A3:70:B3:7A:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/75D606BA82DC85E5AA57AC0E5F2DA370B37A672A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e35392e3132342e302f32322d3332203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:dd:c0:8f:8f:92:a7:0c:94:29:af:43:95:15:48:0e:51:
         ec:cb:03:8c:86:19:0a:f8:5f:68:92:e7:f5:c0:98:e1:24:ba:
         cc:83:bb:ed:3d:1b:41:7a:f8:ae:05:16:9d:47:80:71:9a:dc:
         ac:6a:b1:c2:ec:fe:67:d8:df:bd:14:f8:56:1c:e0:bd:f6:72:
         75:5c:09:6f:d2:d5:47:6f:48:61:60:97:65:4e:88:f9:f9:d2:
         84:a0:77:68:d5:b9:01:4f:13:cf:09:80:d1:79:c9:dc:d5:9a:
         44:3d:3c:c9:87:37:9c:a7:86:2c:27:22:c2:72:28:71:d7:b7:
         b2:35:3b:94:61:4f:8d:23:5d:93:e4:1c:ab:9e:94:d8:a5:34:
         49:cb:12:cf:19:c9:e6:b8:b4:76:0e:37:8d:f4:0d:2c:39:7f:
         cc:bb:7c:5a:6d:85:e6:b7:ee:9b:8a:30:80:40:14:d1:6c:6b:
         6e:55:2f:61:24:2f:ca:d5:7f:63:d1:96:02:1a:39:a3:5f:8a:
         7c:9b:84:c7:e5:74:1d:7b:09:48:ea:41:c9:66:01:e3:2f:c8:
         24:3b:e0:22:9b:80:3c:21:17:96:2a:f5:f3:6d:a0:94:5f:0e:
         c1:29:41:eb:ab:d8:bb:58:90:31:7a:2d:dc:13:e3:e8:fa:c9:
         14:5d:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org