Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3232382e302f32332d3233203d3e203238353938.roa
File:                     3133382e35392e3232382e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          roo2LGYdu2f7Y2T9j8N+LxkVDCZTMDmhCUz7gGpuUxI=
Subject key identifier:   6B:90:BD:F0:55:25:7B:81:5A:86:9D:CD:87:FC:95:6A:9F:FC:74:A4
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       0DB5642928DF6AADE0B8006355F70B14E75B0602
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3232382e302f32332d3233203d3e203238353938.roa
Signing time:             Thu 05 Oct 2023 18:51:51 +0000
ROA not before:           Thu 05 Oct 2023 18:46:51 +0000
ROA not after:            Thu 03 Oct 2024 18:51:51 +0000
asID:                     28598
IP address blocks:        138.59.228.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:64:29:28:df:6a:ad:e0:b8:00:63:55:f7:0b:14:e7:5b:06:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct  5 18:46:51 2023 GMT
            Not After : Oct  3 18:51:51 2024 GMT
        Subject: CN=6B90BDF055257B815A869DCD87FC956A9FFC74A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8f:a9:62:e5:0b:3d:8a:2e:e6:9f:d4:56:27:
                    1d:1f:67:8d:21:2c:6f:3b:50:4f:88:f5:09:66:ae:
                    66:dc:54:bc:4f:9b:53:16:c8:37:8a:fa:6b:0e:7f:
                    25:f1:26:a9:94:fc:3c:eb:11:bb:1e:47:3c:7a:13:
                    13:37:1c:de:0f:75:60:6a:6d:6c:7d:9e:05:eb:d1:
                    64:3f:51:e2:57:29:77:ba:4d:25:ff:83:f0:f7:16:
                    b5:8e:0a:3f:fc:55:8d:3c:c1:0f:ec:a9:5a:fc:41:
                    ad:4e:64:ae:4b:b6:fd:f0:97:12:ae:de:c8:04:8d:
                    54:6a:b4:b7:fb:e1:5e:99:6b:fd:02:10:df:20:c2:
                    6b:bf:c6:6d:bb:f9:8c:9d:5c:15:7d:c1:22:e3:ed:
                    01:b8:40:74:01:a1:76:14:22:3b:34:b0:dc:59:84:
                    15:85:8e:5c:b8:f2:4a:67:40:e5:0b:68:0c:76:19:
                    96:a5:5e:c7:a9:7d:31:6a:d7:f5:6d:f7:c1:87:5b:
                    ab:6a:12:44:ba:45:5f:b8:df:b9:69:70:cf:90:87:
                    db:10:07:6f:36:c2:1f:cc:0f:f3:1d:6a:43:6b:e8:
                    e5:f3:10:86:59:6d:e5:6f:ed:35:8a:86:be:1c:db:
                    5b:41:97:60:ce:51:08:fc:92:43:e4:f5:d5:3b:85:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:90:BD:F0:55:25:7B:81:5A:86:9D:CD:87:FC:95:6A:9F:FC:74:A4
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3232382e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:4d:5c:a9:99:76:65:7e:59:57:30:93:1e:91:8c:73:d4:
         bd:96:3e:2b:90:04:6d:f6:04:20:7a:ba:a9:46:08:61:84:49:
         bb:09:86:25:38:42:9e:de:78:7c:40:ea:32:20:79:5e:64:8a:
         69:67:29:e8:82:b2:b4:67:eb:89:41:58:24:3a:c6:1c:5b:2b:
         b1:90:a1:4f:18:40:34:15:a9:87:85:cf:6b:87:45:fb:6f:99:
         ea:f2:ec:c1:3a:3d:9e:52:02:a7:49:a0:80:49:f2:20:46:e1:
         ad:fa:0e:a3:53:a6:d2:b3:06:20:29:3d:91:c0:f7:dc:4f:2b:
         68:97:16:2f:17:d6:c3:5e:c8:fd:5e:d7:d5:cd:84:0f:28:f6:
         6b:cb:8b:24:14:74:ed:b0:07:bd:1e:aa:f4:bc:49:a2:07:20:
         aa:90:20:4d:ef:07:e7:4f:b4:a3:a0:13:bd:4e:03:80:64:2a:
         40:b5:cc:d5:a3:25:f5:ee:39:01:a5:12:1b:0d:cf:cf:24:27:
         c6:2d:43:6e:a8:1f:04:0b:30:0d:78:b6:22:f2:46:b1:d8:9c:
         03:44:cd:c3:24:11:92:89:07:70:44:2f:ab:44:fd:af:1b:16:
         91:2e:86:31:3f:5d:cc:d3:61:e2:bf:c4:0e:56:c5:95:58:80:
         82:24:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org