Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3233302e302f32332d3233203d3e203238353938.roa
File:                     3133382e35392e3233302e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          CeAsUxa2P4zWOQvrPQOHF8HCGeSWVmQytTi8wtFdpc0=
Subject key identifier:   C6:72:27:31:5B:0A:52:8A:2F:AA:84:1E:89:3B:27:0D:ED:A0:1D:37
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       0901D23C36AD3385322496AE979E97E5C7E457EB
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3233302e302f32332d3233203d3e203238353938.roa
Signing time:             Thu 05 Oct 2023 18:51:51 +0000
ROA not before:           Thu 05 Oct 2023 18:46:51 +0000
ROA not after:            Thu 03 Oct 2024 18:51:51 +0000
asID:                     28598
IP address blocks:        138.59.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:d2:3c:36:ad:33:85:32:24:96:ae:97:9e:97:e5:c7:e4:57:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct  5 18:46:51 2023 GMT
            Not After : Oct  3 18:51:51 2024 GMT
        Subject: CN=C67227315B0A528A2FAA841E893B270DEDA01D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:21:79:f0:17:69:4c:1b:ee:c5:1e:5c:ec:
                    a4:83:34:56:54:fb:dc:6b:a4:62:ad:62:63:7c:7b:
                    ed:89:c9:c1:76:0e:08:3a:3a:15:1d:7b:a7:95:ff:
                    6b:f3:ac:1e:81:5a:6b:f0:9f:e6:07:1c:a2:90:e6:
                    5b:1c:ec:46:af:81:8e:a8:c6:cb:f0:27:f1:c1:46:
                    34:2b:2c:08:19:d9:39:ef:88:8d:85:aa:bd:ba:44:
                    80:30:95:03:29:97:44:bb:50:8f:6d:8d:24:e2:d1:
                    d4:1e:6b:aa:a6:23:a6:cc:99:c2:92:92:f7:e3:85:
                    27:d8:fc:c4:4b:ed:0a:ff:31:d6:e3:3f:39:dc:19:
                    73:ac:63:9f:5a:73:d4:aa:5d:36:7f:7b:db:48:6e:
                    15:f9:c1:f3:f7:da:89:59:3c:c8:80:61:06:bd:47:
                    5f:2a:80:b5:c1:ee:f5:3c:33:6d:73:57:9e:d5:aa:
                    ff:f7:ab:6a:29:7b:58:2e:b3:bc:a7:2c:34:b0:6b:
                    e0:36:64:0b:f9:fd:ba:18:d6:b0:4c:fe:ee:ee:e5:
                    07:5a:30:82:f6:2d:8c:73:7d:3d:87:fb:51:97:4c:
                    a4:7a:5b:9a:2f:05:44:4a:b3:ce:73:c6:99:d2:19:
                    0a:6b:dc:7a:7c:e4:b4:b8:7d:4e:b6:1a:18:a6:4d:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:72:27:31:5B:0A:52:8A:2F:AA:84:1E:89:3B:27:0D:ED:A0:1D:37
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e35392e3233302e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:5a:06:9c:25:41:d2:d9:15:d1:7c:b0:e5:04:93:b1:0e:b6:
         48:e3:76:a4:b2:36:0c:1d:e3:ee:d9:87:7c:ba:70:2e:85:1e:
         37:0d:e2:f7:4b:2a:68:f5:32:fe:23:3d:9e:ce:82:bd:17:c6:
         c9:db:f0:8a:22:08:27:f4:1b:df:11:a9:d7:f2:32:71:0f:a0:
         7c:47:31:6f:73:ba:a8:2c:83:7c:f2:db:3d:23:bd:69:09:ca:
         ac:1a:b7:b9:09:11:60:a4:36:39:b0:72:35:67:97:70:5f:43:
         7f:1d:ac:76:dd:1a:3d:99:30:f2:da:24:b9:51:04:57:9b:bf:
         42:2e:40:b6:a6:87:f7:4b:a7:f4:95:7e:4f:cb:7d:66:51:f2:
         42:ee:de:8e:a9:32:3f:69:62:5e:85:8f:fd:2b:e2:7b:54:61:
         bb:01:24:07:66:ba:6f:46:43:46:75:01:b2:f4:82:6f:e3:93:
         66:c4:50:fc:e1:8b:80:d0:83:69:3a:3e:6f:7f:74:f9:1b:ea:
         2b:cf:66:82:04:1a:39:57:f0:5d:5d:83:c2:54:6b:98:ae:37:
         8e:50:d3:bf:95:8c:c6:69:1c:a6:29:fe:8d:53:ef:d7:33:81:
         c4:b2:ea:7f:e9:2d:44:6f:84:d5:9d:50:9a:10:a9:c8:e7:d3:
         b2:8e:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org