Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3232203d3e20323632373635.roa
File:                     3133312e3232312e35362e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          29ajdI/MvXKXyg9O3a2U9qqOd1JJYaOMczrXmcILixM=
Subject key identifier:   14:24:5A:D6:E9:A1:F2:4F:C8:CF:7E:3E:85:15:EC:F5:93:35:E4:A2
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       015589D462864DDB5F2E3BC0AC7B0C003F51F0E3
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3232203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:26 +0000
ROA not before:           Tue 20 Jun 2023 13:48:26 +0000
ROA not after:            Tue 18 Jun 2024 13:53:26 +0000
asID:                     262765
IP address blocks:        131.221.56.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:55:89:d4:62:86:4d:db:5f:2e:3b:c0:ac:7b:0c:00:3f:51:f0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:26 2023 GMT
            Not After : Jun 18 13:53:26 2024 GMT
        Subject: CN=14245AD6E9A1F24FC8CF7E3E8515ECF59335E4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e4:27:28:29:6f:85:5b:d5:04:33:65:f0:3b:
                    76:09:8e:53:02:0f:e6:37:1f:f8:b4:de:b2:10:6d:
                    a8:e6:65:a2:34:6e:65:b3:d0:78:7e:99:92:cc:eb:
                    fc:dc:8d:d3:2d:86:67:1c:f2:d4:e7:88:57:ba:2e:
                    11:61:11:33:ee:2b:28:4a:3f:ac:a4:6c:ab:a4:c9:
                    8a:5a:d6:29:0e:90:a2:6b:91:59:86:ff:2f:0d:46:
                    d6:32:5a:28:21:b2:04:2c:5d:5f:de:d9:69:40:d1:
                    60:0f:c1:1a:d3:8c:39:bf:47:b5:e0:4d:dd:b0:bf:
                    c9:5b:a7:9f:9c:50:87:f2:e3:b6:88:d6:03:31:34:
                    e1:49:33:25:05:a8:cb:46:68:af:95:ce:e4:bf:2b:
                    5c:cb:6d:c2:3d:84:a5:da:b1:9b:ce:88:07:fc:44:
                    75:40:c9:0c:f7:0a:74:c6:ae:b6:d0:c8:50:2b:44:
                    46:ab:e9:e6:08:f5:01:47:b1:56:40:df:6d:79:54:
                    34:b0:df:1a:26:6c:91:88:ff:3c:4b:36:83:08:ab:
                    4f:55:3a:a0:fa:8e:9e:1c:02:49:57:3a:0b:29:64:
                    13:e2:44:33:ba:ac:ff:ed:19:cd:26:fa:f9:f7:ac:
                    e7:0e:c0:65:5d:f5:89:0f:55:66:6f:b6:d5:03:41:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:24:5A:D6:E9:A1:F2:4F:C8:CF:7E:3E:85:15:EC:F5:93:35:E4:A2
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:29:1e:47:16:8e:9c:cc:aa:d3:84:09:1b:14:dc:21:b8:fe:
         3e:72:17:e1:94:ba:ad:20:e2:21:7f:55:04:a6:23:86:69:34:
         8a:da:e4:07:96:6e:29:a2:f6:ea:39:39:f2:85:e2:04:b4:59:
         2d:8e:8f:7e:d9:b7:34:28:db:df:b6:94:6c:20:8d:b5:08:14:
         44:99:4a:47:fe:98:9d:73:4d:bb:3f:d0:5b:70:38:57:70:a6:
         bc:47:71:e8:5a:7f:e4:02:1b:2c:3a:fa:a9:e7:53:f3:5d:e8:
         a7:84:94:cc:1a:1d:db:11:98:21:ce:40:be:ce:2a:3f:12:91:
         96:9d:2f:75:36:45:4e:91:ff:de:52:46:90:d1:cd:6a:20:47:
         a0:cf:a4:3d:4b:0e:0b:f1:33:b8:64:67:e3:7b:90:a2:e2:43:
         bc:4e:e5:73:3f:f6:5c:22:5d:8a:4b:21:73:14:99:61:0a:b0:
         c0:32:8f:72:9d:d6:e2:8e:a2:f7:b6:60:cf:b2:48:a5:8f:0b:
         2f:67:73:75:7b:cb:93:82:6d:23:4e:ca:a9:be:12:e7:e4:68:
         b1:05:3b:d2:db:93:35:a3:8f:1b:7f:6a:71:b9:21:ea:ae:3a:
         d3:08:0a:ea:cc:e7:9a:11:41:a1:bb:05:28:e4:a8:9d:1f:cb:
         0c:35:d3:62
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAVWJ1GKGTdtfLjvArHsMAD9R8OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2
RDhCNTNBNDAeFw0yMzA2MjAxMzQ4MjZaFw0yNDA2MTgxMzUzMjZaMDMxMTAvBgNV
BAMTKDE0MjQ1QUQ2RTlBMUYyNEZDOENGN0UzRTg1MTVFQ0Y1OTMzNUU0QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp5CcoKW+FW9UEM2XwO3YJjlMC
D+Y3H/i03rIQbajmZaI0bmWz0Hh+mZLM6/zcjdMthmcc8tTniFe6LhFhETPuKyhK
P6ykbKukyYpa1ikOkKJrkVmG/y8NRtYyWighsgQsXV/e2WlA0WAPwRrTjDm/R7Xg
Td2wv8lbp5+cUIfy47aI1gMxNOFJMyUFqMtGaK+VzuS/K1zLbcI9hKXasZvOiAf8
RHVAyQz3CnTGrrbQyFArREar6eYI9QFHsVZA3215VDSw3xombJGI/zxLNoMIq09V
OqD6jp4cAklXOgspZBPiRDO6rP/tGc0m+vn3rOcOwGVd9YkPVWZvttUDQWqLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUFCRa1umh8k/Iz34+hRXs9ZM15KIwHwYDVR0j
BBgwFoAUXOGjgFIiV5inxaJZJpAz/G2LU6QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzAvNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2RDhCNTNBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0UxQTM4MDUyMjI1Nzk4QTdD
NUEyNTkyNjkwMzNGQzZEOEI1M0E0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzAvMzEz
MzMxMmUzMjMyMzEyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKD3TgwDQYJKoZIhvcNAQELBQADggEBAIApHkcWjpzM
qtOECRsU3CG4/j5yF+GUuq0g4iF/VQSmI4ZpNIra5AeWbimi9uo5OfKF4gS0WS2O
j37ZtzQo29+2lGwgjbUIFESZSkf+mJ1zTbs/0FtwOFdwprxHcehaf+QCGyw6+qnn
U/Nd6KeElMwaHdsRmCHOQL7OKj8SkZadL3U2RU6R/95SRpDRzWogR6DPpD1LDgvx
M7hkZ+N7kKLiQ7xO5XM/9lwiXYpLIXMUmWEKsMAyj3Kd1uKOove2YM+ySKWPCy9n
c3V7y5OCbSNOyqm+EufkaLEFO9LbkzWjjxt/anG5IequOtMICurM55oRQaG7BSjk
qJ0fyww102I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org