Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
File:                     3133382e35392e34342e302f32322d3233203d3e20323634353935.roa (raw, json)
Hash identifier:          0MgFyuyL4H7MG8/aDcz+LmtTCUeIofO35vG1eaJVkUY=
Subject key identifier:   28:F3:39:56:DF:4E:63:22:95:F4:8F:4E:38:DE:C2:E8:64:B2:44:99
Certificate issuer:       /CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
Certificate serial:       56AC80829A5E08907AA8F2916CC3FAC653E65573
Authority key identifier: FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa
Signing time:             Sat 08 Oct 2022 23:24:10 +0000
ROA not before:           Sat 08 Oct 2022 23:19:10 +0000
ROA not after:            Sat 07 Oct 2023 23:24:10 +0000
asID:                     264595
IP address blocks:        138.59.44.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ac:80:82:9a:5e:08:90:7a:a8:f2:91:6c:c3:fa:c6:53:e6:55:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Validity
            Not Before: Oct  8 23:19:10 2022 GMT
            Not After : Oct  7 23:24:10 2023 GMT
        Subject: CN=28F33956DF4E632295F48F4E38DEC2E864B24499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:f3:ac:d9:0c:d2:0d:8d:6d:fa:18:8c:5f:
                    cf:23:e8:cf:0c:da:67:f4:5b:aa:ac:aa:9e:5f:1a:
                    4e:32:27:64:6f:c7:7e:49:67:d0:21:79:d8:3a:4c:
                    a8:aa:e0:e9:05:41:1d:ed:75:92:28:04:51:f5:72:
                    88:4b:47:df:da:49:81:1b:54:80:b0:af:34:00:90:
                    6e:14:39:f8:8b:12:f1:3f:34:80:5c:b0:46:88:7f:
                    35:25:52:49:69:52:ba:bf:0f:88:96:cb:ec:90:62:
                    b7:aa:4a:33:f7:28:eb:ae:63:58:4a:fb:c1:59:ee:
                    16:67:a3:ad:9b:de:37:df:c7:d5:16:69:76:70:88:
                    95:54:9e:bd:5d:ef:da:3d:0f:27:8d:19:53:0f:db:
                    ac:af:48:f1:1b:63:fe:f7:2e:06:6a:50:ac:53:c9:
                    10:86:93:5c:3e:f0:ca:a1:1a:0d:8c:cb:88:59:84:
                    13:44:8a:a5:39:45:51:eb:ff:58:d6:04:23:44:17:
                    47:e6:80:90:e4:49:47:e8:3b:06:86:9d:6c:54:97:
                    96:55:85:9c:1f:54:c6:60:cc:22:9d:fe:bc:06:62:
                    04:29:1c:11:ff:14:e4:28:64:89:c5:1e:88:b3:cf:
                    46:3f:31:15:de:26:20:83:87:d9:7a:3b:87:03:f9:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:39:56:DF:4E:63:22:95:F4:8F:4E:38:DE:C2:E8:64:B2:44:99
            X509v3 Authority Key Identifier:
                keyid:FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3233203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:7a:d0:1a:02:ab:c0:56:76:8a:91:79:cf:09:df:62:93:ce:
         91:44:b7:25:cb:a9:f7:18:e1:7c:c3:14:5b:cb:f7:4d:80:08:
         c2:25:2a:89:d3:40:a7:1c:69:da:ef:6a:14:38:e4:bc:d6:24:
         2e:15:ed:59:7b:ff:3a:60:5b:92:dd:7e:74:76:fd:72:eb:64:
         94:d2:53:bd:87:84:d8:9f:5d:bb:d7:2a:d0:6b:c4:72:24:32:
         ee:f0:6a:56:ad:35:3c:36:59:56:08:20:23:6a:4b:18:52:6b:
         25:60:43:79:06:6e:d9:e9:58:63:05:23:cb:92:4f:fc:ff:d5:
         68:f9:37:79:84:23:4e:71:67:82:ae:10:b4:bf:41:2c:0f:69:
         24:cf:20:3a:72:86:bb:d5:5d:8d:c1:8b:c0:89:f1:7e:21:52:
         16:91:0f:e1:ea:5f:5f:51:78:ac:9e:2a:fa:89:f1:23:a6:b8:
         76:55:da:35:48:9f:c9:bd:0f:36:6e:bb:11:d3:8d:c9:d7:88:
         1d:47:ca:1b:57:54:ad:65:0e:85:42:5e:8b:df:e6:73:ce:13:
         b8:ad:a5:62:d9:f3:38:6e:cb:12:57:1f:a1:32:35:e6:f6:ca:
         d8:83:db:ed:ec:25:55:56:37:20:85:33:37:e0:e7:91:e4:1e:
         aa:33:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org