Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32332d3233203d3e20323632373635.roa
File:                     3133312e3232312e35362e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          /Jekl+91BSmEpTwx4klQtZuV8GyYbuME6o8AD3dUoxY=
Subject key identifier:   F2:23:88:3D:63:8B:81:92:24:0A:5D:B3:B1:75:1A:2D:05:23:1A:9C
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       1958D17D03F496ED8B2907808A5491DF3D5F6794
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32332d3233203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:27 +0000
ROA not before:           Tue 20 Jun 2023 13:48:27 +0000
ROA not after:            Tue 18 Jun 2024 13:53:27 +0000
asID:                     262765
IP address blocks:        131.221.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:58:d1:7d:03:f4:96:ed:8b:29:07:80:8a:54:91:df:3d:5f:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:27 2023 GMT
            Not After : Jun 18 13:53:27 2024 GMT
        Subject: CN=F223883D638B8192240A5DB3B1751A2D05231A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:0b:e5:06:4d:ca:8a:2d:0d:04:55:f1:db:
                    cf:46:2b:02:2d:f3:13:2f:58:ce:7e:80:36:47:4b:
                    55:42:f0:f1:94:3b:2c:10:d8:36:65:cc:e3:ea:7c:
                    26:1e:33:86:e5:21:dc:d3:78:1d:7e:9f:d2:88:55:
                    8f:a0:ee:d0:f7:fc:7c:20:c6:01:8f:cd:77:68:85:
                    05:73:80:05:02:49:86:7e:46:d0:dc:6e:87:87:31:
                    dc:a5:82:f9:78:9a:6c:2f:81:52:c8:b5:0c:b6:8e:
                    ae:44:d4:04:a5:0a:3d:4d:85:69:10:f2:8f:59:a3:
                    97:4a:e4:e8:83:28:ad:93:77:fb:ea:97:e1:fe:be:
                    69:be:2e:56:70:a1:25:e4:63:73:5d:90:00:f5:90:
                    bd:c3:00:9a:7f:8a:37:19:b4:74:4a:87:5f:20:5b:
                    02:80:c2:f8:b7:7c:be:c7:0f:93:7b:87:e2:b2:3b:
                    3d:49:6f:51:18:f9:01:66:b4:cd:23:47:f3:b8:85:
                    73:f8:f6:8b:1a:1b:3d:61:11:10:40:0a:fd:84:e9:
                    9d:79:54:82:b5:32:41:3c:db:dc:d7:85:f1:33:71:
                    27:02:0f:f8:aa:bd:c5:6f:77:9a:df:1b:a6:05:63:
                    2b:a8:e1:dc:30:22:2c:3d:1d:8d:c0:f5:2a:65:dd:
                    5a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:88:3D:63:8B:81:92:24:0A:5D:B3:B1:75:1A:2D:05:23:1A:9C
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:dd:1f:c0:60:41:2f:7c:f6:97:3b:8d:fc:45:00:77:d6:ed:
         e6:73:37:3b:e7:8d:89:2e:dd:1b:40:a2:88:05:a8:6f:6c:d9:
         e0:82:9c:bc:ca:22:2c:76:cd:76:1e:9d:d8:5a:30:b1:89:ed:
         71:e4:91:b3:c7:77:1f:32:f2:ce:e4:65:31:65:bf:62:fb:27:
         ad:f4:8c:3b:23:14:72:5e:b7:5a:9f:0c:ce:ee:a0:47:cc:61:
         90:89:ef:f4:38:3d:64:2b:4d:dd:24:1d:48:fc:31:7d:c6:ab:
         28:3b:a4:2f:59:62:99:2f:fa:98:f4:61:21:2b:f3:6e:f4:e8:
         f8:6a:e7:c5:ad:b9:14:41:99:1c:44:99:ad:69:77:10:0d:b6:
         2e:e9:79:fb:ca:4d:fa:f5:fa:a5:1b:9d:fb:47:6c:8c:f2:f6:
         40:a5:c7:76:77:0f:67:3f:26:fd:0e:b0:e5:3a:34:03:ba:04:
         2c:c0:bf:52:ef:de:93:aa:6d:95:3b:e5:69:38:ee:f7:ab:01:
         4c:03:85:74:a4:6b:a7:80:98:b9:d0:d9:c9:85:e2:03:b6:4a:
         a7:94:5f:d9:1b:fd:83:7f:f7:10:a4:b4:42:48:0a:58:49:5c:
         5f:2e:1c:f6:f5:a5:66:95:4c:47:9b:4b:ff:78:2b:c4:6e:7c:
         86:be:cc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org