Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa
File:                     3133382e35392e34362e302f32332d3233203d3e20323634353935.roa (raw, json)
Hash identifier:          F1vCKjk1kzSsyr+BzlEPoDZnAq/uWJXZj+9um8OBf3E=
Subject key identifier:   96:A9:45:1C:53:EA:B1:2A:70:FD:7C:5B:B5:55:3A:2D:3B:2E:07:60
Certificate issuer:       /CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
Certificate serial:       50B1403A16898F770346D41312979E802086AB9A
Authority key identifier: C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa
Signing time:             Fri 05 Apr 2024 04:35:41 +0000
ROA not before:           Fri 05 Apr 2024 04:30:41 +0000
ROA not after:            Fri 04 Apr 2025 04:35:41 +0000
asID:                     264595
IP address blocks:        138.59.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b1:40:3a:16:89:8f:77:03:46:d4:13:12:97:9e:80:20:86:ab:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7CDE00B8FAF822929EE8184DED9A4F02250D9CB
        Validity
            Not Before: Apr  5 04:30:41 2024 GMT
            Not After : Apr  4 04:35:41 2025 GMT
        Subject: CN=96A9451C53EAB12A70FD7C5BB5553A2D3B2E0760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:e0:2a:c9:a4:84:6d:ab:25:22:61:7b:67:
                    0f:08:b6:cf:ec:34:a3:87:91:18:f8:40:a5:b7:af:
                    91:d0:63:d5:ef:85:06:fa:ca:57:e2:26:ae:2e:2c:
                    8f:3f:40:8b:14:97:ad:7d:7e:74:90:89:e1:15:7f:
                    4f:3f:bd:e9:48:5a:1e:34:90:a4:34:8a:39:a3:b0:
                    52:5b:b5:e2:e5:9d:dd:b5:c1:f0:57:36:9b:40:c7:
                    a6:55:6a:b0:89:da:d1:c0:ae:28:66:90:b0:68:08:
                    55:e3:1c:81:b0:77:d9:c2:2b:10:d2:e4:72:21:40:
                    af:71:c0:69:d5:79:88:31:cc:b8:19:d3:8a:f8:31:
                    f8:d4:1a:ce:9a:6e:f0:82:08:86:82:56:dd:c5:9e:
                    9d:13:b0:b9:c8:bd:44:87:c6:55:0d:87:3c:68:92:
                    17:8a:e3:ac:fc:a1:e0:43:40:38:2f:ac:62:03:17:
                    59:f2:1b:ff:48:8d:aa:5b:1c:fa:2e:b8:b3:33:57:
                    17:f6:1d:05:9b:fd:c3:c0:68:51:0d:92:f6:69:55:
                    7b:3d:3c:3c:7c:fb:e1:d5:ec:d3:84:74:7a:de:78:
                    d1:7d:c8:d9:09:5a:4b:3c:30:8d:70:78:4e:71:e2:
                    d3:5d:b2:e0:dd:fe:b1:15:22:89:c3:7b:a4:3b:4c:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A9:45:1C:53:EA:B1:2A:70:FD:7C:5B:B5:55:3A:2D:3B:2E:07:60
            X509v3 Authority Key Identifier:
                keyid:C7:CD:E0:0B:8F:AF:82:29:29:EE:81:84:DE:D9:A4:F0:22:50:D9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7CDE00B8FAF822929EE8184DED9A4F02250D9CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/1/3133382e35392e34362e302f32332d3233203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:71:2f:3f:57:a7:6a:ba:54:52:04:6a:3c:59:d3:79:1f:63:
         c4:50:54:ae:42:54:a8:de:cd:19:e6:69:ee:35:16:1d:3f:38:
         8e:8b:a2:b4:eb:b4:51:2a:7c:40:b1:b9:2c:80:b0:69:54:b7:
         87:ef:2b:d3:de:f5:16:4d:be:4e:4f:cf:d0:08:9c:1a:c0:0b:
         08:68:4d:35:07:ce:bb:58:cd:7e:39:38:5f:7c:be:e1:14:f4:
         68:cd:97:4b:95:75:ec:6b:f5:04:24:4a:47:91:63:6f:6b:46:
         46:c7:2a:91:ea:07:31:d7:b4:f2:b2:63:74:4b:0d:1e:ce:f6:
         de:84:ce:d3:16:74:e4:ea:65:e5:77:79:e6:1c:ba:ba:ce:d3:
         59:57:cd:8a:d9:a2:49:a3:1f:90:47:94:60:f1:74:ad:c5:d8:
         60:cc:48:8d:8a:3d:be:40:ee:ca:07:ae:84:fd:2c:38:29:46:
         40:52:1e:03:2e:43:a9:75:59:c2:27:96:b0:8e:74:c3:d8:e6:
         a5:c5:25:01:27:8d:c6:f3:1b:44:14:5d:f2:2c:62:77:a4:48:
         98:e3:f5:a7:d5:a0:4e:2e:62:c1:53:a4:67:5a:ac:f6:09:17:
         69:49:23:fa:8d:bb:3a:e4:f7:81:80:7e:97:90:fa:88:13:04:
         6a:e0:07:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:18:16 2024 by rpki-client on console-fra.rpki-client.org