Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32332d3233203d3e20323634353935.roa
File:                     3133382e35392e34342e302f32332d3233203d3e20323634353935.roa (raw, json)
Hash identifier:          7Ns6yRqnXde8IZTSmetELgaIn6o5aLG0WQ1hgrCiOIY=
Subject key identifier:   D3:FB:C0:6D:59:EF:09:08:58:AF:D0:05:8A:55:00:5C:B2:62:34:2A
Certificate issuer:       /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial:       5F5AD7ED9967D090C59D937D943A07AC383C7FFE
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32332d3233203d3e20323634353935.roa
Signing time:             Mon 01 Apr 2024 14:40:10 +0000
ROA not before:           Mon 01 Apr 2024 14:35:10 +0000
ROA not after:            Mon 31 Mar 2025 14:40:10 +0000
asID:                     264595
IP address blocks:        138.59.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5a:d7:ed:99:67:d0:90:c5:9d:93:7d:94:3a:07:ac:38:3c:7f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
        Validity
            Not Before: Apr  1 14:35:10 2024 GMT
            Not After : Mar 31 14:40:10 2025 GMT
        Subject: CN=D3FBC06D59EF090858AFD0058A55005CB262342A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:28:36:a4:dc:56:df:47:9e:93:93:f6:7e:0b:
                    79:74:37:e0:5a:12:c6:dc:41:97:6d:38:96:83:3c:
                    d4:07:0f:82:bd:18:cc:ea:cd:c7:b6:30:2a:a9:91:
                    78:f1:73:1a:a4:ce:dd:d3:f8:32:75:68:2a:d3:45:
                    5d:9d:f9:31:cc:66:ee:b6:c2:8e:8c:9b:45:3f:51:
                    32:b1:dd:5b:e2:92:00:e7:b5:f2:74:46:ac:5c:e4:
                    c2:73:e5:11:0c:47:f8:e6:f9:ee:7c:27:d8:98:e3:
                    88:63:97:52:1a:96:87:5b:0f:71:f8:79:4e:c8:a3:
                    c0:09:d1:6a:4c:8a:41:6e:27:d9:5b:3a:fc:6f:63:
                    6d:37:0f:16:d9:63:a6:d4:08:ce:94:4b:95:bb:99:
                    e3:9c:97:6e:dc:5d:6a:58:f7:d2:e7:53:c7:f1:fb:
                    8f:2a:75:33:0f:5c:18:79:6e:99:5e:f0:3f:fd:e7:
                    f2:8e:6e:f5:74:00:ea:36:43:2e:44:29:b8:e5:b2:
                    e9:74:78:65:cf:23:25:31:32:da:18:7f:49:95:42:
                    36:43:8e:8a:b4:6b:3c:d1:ba:44:b2:24:30:9a:7c:
                    b0:59:e0:21:a6:0b:d8:aa:8e:6b:24:07:6d:83:91:
                    f4:26:ad:ae:92:f9:53:46:ae:ec:f4:47:b1:b2:8b:
                    64:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FB:C0:6D:59:EF:09:08:58:AF:D0:05:8A:55:00:5C:B2:62:34:2A
            X509v3 Authority Key Identifier:
                keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32332d3233203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:d0:90:c1:36:d5:2c:3b:5c:b0:32:f0:d3:8e:ec:5c:b9:c9:
         ee:dc:fa:68:53:5e:a2:e8:54:6a:c6:b5:71:b4:5e:4d:16:f6:
         7f:0e:bb:2a:db:18:e2:0b:f0:0b:f8:b6:53:4f:fc:27:0f:4d:
         50:f3:10:00:e8:1a:6b:03:6a:a1:4a:39:86:cc:08:34:f7:1a:
         80:fc:01:12:0f:b9:cd:e2:69:76:66:36:70:0c:bc:fc:aa:64:
         d3:99:3c:5e:c6:94:b1:5b:c5:e3:2a:f6:ff:e1:c7:58:46:6d:
         1a:d6:da:23:64:7a:6f:8b:9a:19:ca:b6:45:38:10:92:94:1b:
         c4:9e:f7:a6:ba:9e:26:97:ea:e8:d1:56:9c:19:8a:f3:32:08:
         ab:2c:94:4d:22:9f:82:14:79:73:24:84:39:4c:b6:81:c0:bc:
         7d:33:ad:b2:02:ce:26:4f:c7:87:af:22:80:ca:c8:06:c0:4f:
         b7:f7:57:8d:14:50:f7:2e:e0:8c:f2:ea:cc:35:c8:14:95:9d:
         7e:4b:42:6f:cc:84:79:2f:9d:e2:11:d4:0b:05:27:b2:13:3f:
         63:c4:ee:47:71:41:d3:94:36:96:60:66:d7:45:01:51:0c:ac:
         45:e2:4c:27:d5:d2:8a:28:6f:1e:4d:ff:ba:92:16:1b:fb:e8:
         a3:7b:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org