Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa
File:                     3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          mVGY5z5DyvLwS3vk9yIObb66UyHQrLyGDNXyS8RWC5Y=
Subject key identifier:   70:C8:A2:6A:A3:89:06:A7:72:2E:B9:C3:8F:C8:9D:6F:0E:EA:42:40
Certificate issuer:       /CN=38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D
Certificate serial:       1EE016A49333D9B128303FAA23C8645ACFD700DB
Authority key identifier: 38:B7:D6:79:9B:FE:BC:F4:94:05:15:FA:4C:D4:A0:9D:25:8D:DB:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa
Signing time:             Fri 10 Feb 2023 15:52:00 +0000
ROA not before:           Fri 10 Feb 2023 15:47:00 +0000
ROA not after:            Fri 09 Feb 2024 15:52:00 +0000
asID:                     262765
IP address blocks:        131.221.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e0:16:a4:93:33:d9:b1:28:30:3f:aa:23:c8:64:5a:cf:d7:00:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D
        Validity
            Not Before: Feb 10 15:47:00 2023 GMT
            Not After : Feb  9 15:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:ef:e6:63:20:fd:76:46:da:f8:8e:22:f1:
                    a7:47:d8:4a:46:8a:4f:67:2e:75:55:39:8e:42:0c:
                    96:73:03:72:e0:b8:a1:ed:0a:22:3b:40:cd:2b:d9:
                    f6:f4:1f:45:f2:6c:a4:cb:ce:60:27:29:b3:e6:da:
                    bd:df:99:b6:ab:3c:38:5f:1d:ba:9e:bd:4d:eb:e4:
                    9c:b4:16:2d:eb:c0:45:af:89:8c:b8:25:f9:2e:7b:
                    56:21:dd:42:25:28:9b:e6:da:99:1c:5b:d3:79:75:
                    48:b9:f6:17:9e:01:57:e4:32:f9:16:f6:34:24:e0:
                    41:76:b4:08:7c:16:6e:be:49:42:f7:a0:83:17:b8:
                    c1:33:70:d6:da:40:b8:fa:8d:6a:91:93:64:61:b2:
                    20:05:1d:5a:d1:b5:89:f9:f4:44:3d:4e:fb:32:33:
                    4c:da:fe:ff:ed:74:a2:d6:63:80:d7:16:ed:d2:28:
                    a4:22:98:08:e9:f1:ca:2e:bd:e8:42:20:d1:b9:e3:
                    b6:63:6b:f5:1a:db:eb:2b:90:1b:ba:8b:f4:da:17:
                    20:62:ae:0c:60:51:2a:87:fc:c4:ad:9e:6b:db:12:
                    4a:09:48:41:31:03:92:7f:03:c3:00:7b:2b:67:b1:
                    7c:a4:cc:27:f3:dc:3c:fc:9c:ca:48:73:59:43:35:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C8:A2:6A:A3:89:06:A7:72:2E:B9:C3:8F:C8:9D:6F:0E:EA:42:40
            X509v3 Authority Key Identifier:
                keyid:38:B7:D6:79:9B:FE:BC:F4:94:05:15:FA:4C:D4:A0:9D:25:8D:DB:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133312e3232312e35362e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:68:78:35:0d:24:01:5e:c1:9f:ae:29:e3:d0:c3:df:ac:
         5b:19:9e:20:8f:59:e9:7d:f8:db:ee:68:05:d6:3b:03:9e:23:
         54:96:56:5a:8e:42:36:70:db:93:b8:a1:f3:d1:79:96:28:b8:
         6a:82:0b:14:70:c2:80:42:b9:8c:ab:df:29:c3:56:87:10:e0:
         5c:28:3f:2d:0f:10:dd:f1:30:d1:9a:31:9f:e2:7e:30:26:f9:
         bb:bd:ab:a4:32:7d:6e:08:e0:d9:89:88:f8:87:5e:00:b0:f2:
         43:48:13:3c:b2:40:a3:fc:d3:7e:a2:9b:c5:de:ed:88:c1:83:
         cf:24:c9:ca:f1:d2:1c:88:76:74:0d:95:02:0f:ca:72:59:30:
         b1:74:04:0e:0e:70:54:0b:a5:aa:4a:65:45:7e:ca:c2:ea:db:
         b6:67:68:92:91:63:15:36:9d:89:fa:5b:1b:ac:da:85:4e:e5:
         02:5f:03:9a:3a:61:f2:7c:69:98:b2:b7:be:a4:05:05:b1:5c:
         76:83:2a:08:c4:e0:55:e6:b8:2d:c4:d0:9f:b2:13:9a:7f:25:
         17:28:72:ab:bd:0c:51:f3:d7:ed:99:11:73:fa:90:05:fd:e0:
         d7:85:d3:ae:af:db:6a:8c:57:45:9d:8b:2d:57:7b:e7:17:4a:
         87:9a:ae:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org