Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          CiFR3oYIff31pYTBxpak0IzBN4y6moPjxN+Tdy6dYew=
Subject key identifier:   F5:5C:A4:99:64:14:FF:84:D3:5C:C2:FB:D6:85:20:3C:24:02:8D:C7
Certificate issuer:       /CN=38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D
Certificate serial:       7D93C9F5DDF0F04B8F642081EC7CCCF63CA81B27
Authority key identifier: 38:B7:D6:79:9B:FE:BC:F4:94:05:15:FA:4C:D4:A0:9D:25:8D:DB:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa
Signing time:             Fri 10 Feb 2023 15:54:00 +0000
ROA not before:           Fri 10 Feb 2023 15:49:00 +0000
ROA not after:            Fri 09 Feb 2024 15:54:00 +0000
asID:                     262765
IP address blocks:        170.80.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:93:c9:f5:dd:f0:f0:4b:8f:64:20:81:ec:7c:cc:f6:3c:a8:1b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D
        Validity
            Not Before: Feb 10 15:49:00 2023 GMT
            Not After : Feb  9 15:54:00 2024 GMT
        Subject: CN=3082010A0282010100F450EAD8CBD5C374151D4CB8E5C8B9236E5BCD59F0013F2AFB368C84B48D405D99C1172EE5874832863786CA1DB1E9758FEB658F51058E6153BE5493E54CC076B46F61837B8F46A007CE1DE6EF0A1A69DE113DF57A1E153BA22A72B2B075EB0CE59843F7692A2EDDB8BD788489D99B89941EDB4DDD6634C0C14E8CD880BC98C762300655E8040EA3CD6EC6F40BC689E7A6ACD0AC7940697551F23DDF49342F3D4F27FF43AE97E8B5B3DD7D8377B423C4CABD25C2065F7E2CC1C91D3CECF522A31ECB8EC55F284D07FADA8292A47FBDF7DF4E2AB8C95DC0292EC2F943188E153FE1E0F9205EAA5F2A98101032C84D004F5798C27AFF7639017FB7067310A93D410203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:50:ea:d8:cb:d5:c3:74:15:1d:4c:b8:e5:c8:
                    b9:23:6e:5b:cd:59:f0:01:3f:2a:fb:36:8c:84:b4:
                    8d:40:5d:99:c1:17:2e:e5:87:48:32:86:37:86:ca:
                    1d:b1:e9:75:8f:eb:65:8f:51:05:8e:61:53:be:54:
                    93:e5:4c:c0:76:b4:6f:61:83:7b:8f:46:a0:07:ce:
                    1d:e6:ef:0a:1a:69:de:11:3d:f5:7a:1e:15:3b:a2:
                    2a:72:b2:b0:75:eb:0c:e5:98:43:f7:69:2a:2e:dd:
                    b8:bd:78:84:89:d9:9b:89:94:1e:db:4d:dd:66:34:
                    c0:c1:4e:8c:d8:80:bc:98:c7:62:30:06:55:e8:04:
                    0e:a3:cd:6e:c6:f4:0b:c6:89:e7:a6:ac:d0:ac:79:
                    40:69:75:51:f2:3d:df:49:34:2f:3d:4f:27:ff:43:
                    ae:97:e8:b5:b3:dd:7d:83:77:b4:23:c4:ca:bd:25:
                    c2:06:5f:7e:2c:c1:c9:1d:3c:ec:f5:22:a3:1e:cb:
                    8e:c5:5f:28:4d:07:fa:da:82:92:a4:7f:bd:f7:df:
                    4e:2a:b8:c9:5d:c0:29:2e:c2:f9:43:18:8e:15:3f:
                    e1:e0:f9:20:5e:aa:5f:2a:98:10:10:32:c8:4d:00:
                    4f:57:98:c2:7a:ff:76:39:01:7f:b7:06:73:10:a9:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5C:A4:99:64:14:FF:84:D3:5C:C2:FB:D6:85:20:3C:24:02:8D:C7
            X509v3 Authority Key Identifier:
                keyid:38:B7:D6:79:9B:FE:BC:F4:94:05:15:FA:4C:D4:A0:9D:25:8D:DB:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:0f:0d:12:b2:dc:7f:83:95:15:3e:8f:41:65:be:09:e4:fd:
         5a:d7:f6:d7:2f:2d:5d:48:ca:7a:6c:ed:02:14:5a:ba:dc:1d:
         f0:2d:50:e9:2a:9e:d1:e8:e8:5c:07:82:04:bc:da:d1:c7:79:
         1e:ec:cc:45:3c:87:d3:f9:ce:57:27:38:77:b5:c6:d8:44:b8:
         1d:37:29:69:8f:6c:bc:f1:76:83:7a:07:d4:ab:5c:4d:3d:bc:
         5c:8b:30:4b:76:d6:20:7b:96:e2:6b:d7:3c:fc:3a:16:58:c1:
         35:23:7e:0e:dc:ed:1c:1b:c7:48:ae:e9:a0:04:3d:48:01:5b:
         6b:61:cf:cb:18:e5:30:bf:aa:1a:c8:13:5f:c3:36:4c:e2:b3:
         51:0b:b5:21:73:50:6b:db:ee:92:e5:33:9a:4f:92:9a:fe:62:
         56:5e:92:6a:8f:28:aa:f3:c7:14:8e:35:d8:a7:38:4b:56:e8:
         ca:50:7c:d7:2e:75:fd:90:b8:19:1f:40:bf:f8:dd:5e:24:fa:
         bb:4e:95:26:67:96:13:56:1f:b1:1b:27:45:d9:82:e6:5b:6b:
         28:0b:a2:38:89:d4:2f:6f:41:85:f1:9b:71:c7:88:3f:a7:93:
         4c:84:b2:d6:2f:9a:98:25:af:9f:50:67:8c:3e:c6:e5:65:b3:
         62:55:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:16:37 2023 by rpki-client on console-fra.rpki-client.org