Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa
File:                     3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          9o8anqfBTFkww1qKQH55Ob+4omrGiN5odOv4KwpzotM=
Subject key identifier:   34:57:CB:CF:FE:5A:4F:C2:B0:13:D6:C5:EC:BB:31:54:F3:A6:6A:58
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       6B758316F83CA1FC1BD9A098C96B6FAF42486317
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:26 +0000
ROA not before:           Tue 20 Jun 2023 13:48:26 +0000
ROA not after:            Tue 18 Jun 2024 13:53:26 +0000
asID:                     262765
IP address blocks:        131.221.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:75:83:16:f8:3c:a1:fc:1b:d9:a0:98:c9:6b:6f:af:42:48:63:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:26 2023 GMT
            Not After : Jun 18 13:53:26 2024 GMT
        Subject: CN=3457CBCFFE5A4FC2B013D6C5ECBB3154F3A66A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:30:a7:66:0b:94:fa:fb:36:74:bf:aa:5e:
                    da:5f:f2:78:da:1e:e2:87:4b:82:12:7c:ca:11:96:
                    a5:b6:21:f6:e1:74:3c:52:0d:70:90:22:f3:c5:04:
                    8d:40:da:2b:42:36:0d:51:17:72:b0:d0:bc:f9:75:
                    67:61:ea:e8:68:43:c1:7a:b9:64:6b:a2:97:94:9b:
                    df:52:2e:77:fb:90:20:70:39:7d:40:b2:4d:c8:22:
                    ff:3e:fc:ff:fc:95:4c:ed:5b:6e:e6:6a:39:f8:c1:
                    2d:70:37:5a:1f:2b:ac:95:d9:6c:d1:bb:f6:3a:d8:
                    25:68:0d:40:5f:f4:ee:d5:d0:9b:64:14:7f:a6:63:
                    1b:d5:46:b5:b0:c0:d3:38:4a:ff:8e:05:5f:c2:21:
                    b1:e6:75:85:cb:eb:58:34:c3:9c:c1:84:d0:fb:92:
                    09:a6:f1:c0:d5:5a:2a:71:4b:3a:05:3f:21:d0:c3:
                    ac:9f:f1:54:7f:1e:08:4c:57:69:ec:18:3c:4c:71:
                    c7:3d:f7:eb:14:bc:a3:d1:af:4f:ec:61:7a:2a:a6:
                    48:71:33:25:fa:cd:67:5e:29:f2:c2:a4:f2:c8:e0:
                    02:1e:36:1a:2f:5f:87:87:37:ba:95:5b:53:2b:2b:
                    68:8e:79:de:07:98:d9:f5:c7:77:e6:0f:c2:9e:46:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:CB:CF:FE:5A:4F:C2:B0:13:D6:C5:EC:BB:31:54:F3:A6:6A:58
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35382e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:9d:74:a1:b2:1d:7b:32:db:d6:b3:69:5a:72:ad:74:5c:
         51:92:74:4f:af:42:b9:d4:59:8d:a4:b4:90:1e:06:b3:63:9a:
         d1:82:23:bd:57:37:8d:4f:4e:2b:26:f8:a1:f1:62:31:0f:92:
         96:76:05:69:7a:21:d1:32:71:ef:30:ab:f8:7e:9e:8d:db:2f:
         da:07:5e:f8:cc:ba:c9:09:d0:bb:8b:d7:f8:eb:16:ba:bd:64:
         01:9a:74:8e:a2:ec:59:67:71:e6:c4:69:f5:45:b0:cb:f4:97:
         e9:e0:9d:0e:bb:0b:3d:7d:a4:db:b1:ec:54:07:88:ac:8f:d4:
         f2:c3:13:08:8e:1d:16:cc:42:f9:fc:1e:63:9c:fe:61:f3:4b:
         24:d4:00:3f:2f:32:87:eb:f5:d2:38:7b:44:9d:f8:f6:60:4d:
         8a:fb:19:26:71:fe:03:dc:95:61:67:38:57:68:d3:92:9b:c5:
         e1:7c:11:d4:6f:d6:af:f6:8f:d4:02:c7:e1:72:17:97:69:6c:
         73:18:36:cc:99:f6:a1:75:6e:02:9f:0d:f1:56:77:6f:50:c6:
         33:3c:28:5e:9e:22:a4:c6:ce:ab:2e:4b:1b:7d:8d:5d:62:b9:
         71:55:15:1c:31:aa:0e:75:f1:ea:d0:0b:c8:42:f4:77:64:a1:
         26:30:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org