Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130332e302f32342d3234203d3e203631383731.roa
File:                     3133382e35392e3130332e302f32342d3234203d3e203631383731.roa (raw, json)
Hash identifier:          Ks5W1M7NFGvkxv4nYMsvajtp3cTxTZS+3pqpeL5oMlo=
Subject key identifier:   DC:CF:8C:0E:72:EA:65:7A:8D:A6:64:24:92:41:18:82:92:CF:70:3F
Certificate issuer:       /CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
Certificate serial:       624270FEFDCA26E1275904C9E78F3E2648B06A22
Authority key identifier: 9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130332e302f32342d3234203d3e203631383731.roa
Signing time:             Fri 20 Oct 2023 15:05:49 +0000
ROA not before:           Fri 20 Oct 2023 15:00:49 +0000
ROA not after:            Fri 18 Oct 2024 15:05:49 +0000
asID:                     61871
IP address blocks:        138.59.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:42:70:fe:fd:ca:26:e1:27:59:04:c9:e7:8f:3e:26:48:b0:6a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B759A75807A1779F69D4A5B19FEC44B1677D1D8
        Validity
            Not Before: Oct 20 15:00:49 2023 GMT
            Not After : Oct 18 15:05:49 2024 GMT
        Subject: CN=3082010A0282010100BFF464C34EE614AC6C581B3C3C951651B05B0716C3752714FE6A7640E082C75E7CA16B9E6673BBC55005C2EE2BEBABEC68085756FE6A9FFBC4D185A320318B0FEF9963E508788A1FC02EB891581EBCBE05372B733CA68195E3CB14D0557561932EF943BDF2BFA578443703C2181C969672452D28BE4D94E60AF944783D68CDE46F90F26DD3D6BC89C85A1941092D49CB8F87F48E618B5E16E8A6A93F6A42BB4282456B5BCB70DED29BB167469AD8016EA780A49FC112B312085D0A3A03DDDB5853A24687A0B86F502B61DFA762BDD5D7474BC7FB2EF54EA30F142542C7B4914A353BBD95CFF86A19807E9B11AF29733A9E9E44E630EE8128868E5F90C76CDD110203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:64:c3:4e:e6:14:ac:6c:58:1b:3c:3c:95:
                    16:51:b0:5b:07:16:c3:75:27:14:fe:6a:76:40:e0:
                    82:c7:5e:7c:a1:6b:9e:66:73:bb:c5:50:05:c2:ee:
                    2b:eb:ab:ec:68:08:57:56:fe:6a:9f:fb:c4:d1:85:
                    a3:20:31:8b:0f:ef:99:63:e5:08:78:8a:1f:c0:2e:
                    b8:91:58:1e:bc:be:05:37:2b:73:3c:a6:81:95:e3:
                    cb:14:d0:55:75:61:93:2e:f9:43:bd:f2:bf:a5:78:
                    44:37:03:c2:18:1c:96:96:72:45:2d:28:be:4d:94:
                    e6:0a:f9:44:78:3d:68:cd:e4:6f:90:f2:6d:d3:d6:
                    bc:89:c8:5a:19:41:09:2d:49:cb:8f:87:f4:8e:61:
                    8b:5e:16:e8:a6:a9:3f:6a:42:bb:42:82:45:6b:5b:
                    cb:70:de:d2:9b:b1:67:46:9a:d8:01:6e:a7:80:a4:
                    9f:c1:12:b3:12:08:5d:0a:3a:03:dd:db:58:53:a2:
                    46:87:a0:b8:6f:50:2b:61:df:a7:62:bd:d5:d7:47:
                    4b:c7:fb:2e:f5:4e:a3:0f:14:25:42:c7:b4:91:4a:
                    35:3b:bd:95:cf:f8:6a:19:80:7e:9b:11:af:29:73:
                    3a:9e:9e:44:e6:30:ee:81:28:86:8e:5f:90:c7:6c:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:8C:0E:72:EA:65:7A:8D:A6:64:24:92:41:18:82:92:CF:70:3F
            X509v3 Authority Key Identifier:
                keyid:9B:75:9A:75:80:7A:17:79:F6:9D:4A:5B:19:FE:C4:4B:16:77:D1:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B759A75807A1779F69D4A5B19FEC44B1677D1D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cpuam1Jt9H2XzBqHWkyTpUBEFFxtWmRhdaz9Lsabx1y2/0/3133382e35392e3130332e302f32342d3234203d3e203631383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f2:e6:6b:0b:4f:5f:d2:40:b6:8c:dc:12:3b:91:90:c0:fe:
         68:1b:74:2b:c6:03:b8:8e:ef:87:24:b2:c1:6b:e3:e0:aa:d0:
         b7:2e:97:e6:5d:c2:c0:cb:55:e2:12:3f:0e:1b:bb:3c:8c:9d:
         c2:4b:07:0a:93:18:91:7f:2e:fe:d4:8b:9c:31:d7:13:0d:68:
         df:eb:c7:74:9e:de:71:5a:b1:1e:f3:4d:7b:bd:48:6d:96:00:
         09:ae:1b:7e:fb:fd:5e:10:c2:91:d9:35:6c:19:2e:66:b8:84:
         fe:26:12:0b:e1:b2:34:77:1d:26:86:e7:bc:c3:a7:6b:1e:af:
         65:9b:3d:b5:a3:01:20:b7:37:62:89:d3:7e:81:f6:8f:5b:62:
         92:23:78:1f:fa:60:61:45:91:7c:9a:b4:63:7c:12:a5:5c:91:
         e3:a5:96:08:10:92:b3:77:bc:da:52:2f:b0:8d:1b:a7:3b:c2:
         ee:aa:af:ad:c3:83:b4:01:43:14:bd:31:b8:99:27:3d:ae:9c:
         a5:8f:9b:c2:73:fc:25:04:a9:1d:b1:85:28:02:ad:83:90:54:
         ff:ff:a7:d1:38:fa:01:81:b4:41:a2:8f:4b:d4:3d:bc:1f:19:
         9f:10:3e:56:e4:47:53:57:d8:b1:65:80:19:be:94:e2:12:60:
         94:ad:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:16 2024 by rpki-client on console.sobornost.net