Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32322d3232203d3e20323632373635.roa
File:                     3133382e3132312e3235322e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          UvkutZUuaj41YP2SdHua1HHp3yIKIB6Uh3ZGuYrm8Kg=
Subject key identifier:   CE:B0:11:48:44:99:54:CC:A6:26:A1:F0:5A:96:72:17:C3:8E:D0:2F
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       0C2237BD56B0A43950D92F24E23DB02631A0B5F3
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32322d3232203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:29 +0000
ROA not before:           Tue 20 Jun 2023 13:48:29 +0000
ROA not after:            Tue 18 Jun 2024 13:53:29 +0000
asID:                     262765
IP address blocks:        138.121.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:22:37:bd:56:b0:a4:39:50:d9:2f:24:e2:3d:b0:26:31:a0:b5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:29 2023 GMT
            Not After : Jun 18 13:53:29 2024 GMT
        Subject: CN=CEB01148449954CCA626A1F05A967217C38ED02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:e3:4f:57:d0:7c:76:79:b6:f9:97:7e:6b:
                    68:2f:6b:c3:a8:06:f5:d5:2d:c8:1d:bc:fc:f4:53:
                    4a:a9:85:a0:e8:79:4c:7f:66:66:19:ec:8c:15:53:
                    56:ec:d1:ae:bc:22:de:bc:03:22:35:89:d2:41:40:
                    15:d7:18:d7:e9:6e:7a:2f:5c:5e:23:fc:9f:79:18:
                    ef:06:e5:ce:2c:f3:48:1f:62:21:82:57:86:a3:ee:
                    cb:d0:8d:6b:f4:d3:c7:f6:9c:29:0f:5c:62:e9:31:
                    ec:2a:39:f2:db:42:a2:8a:a8:cd:97:5c:3c:57:e7:
                    d3:0e:d3:a3:23:6a:42:a0:5f:61:37:fa:8c:87:de:
                    99:08:4f:d2:86:7a:c2:d9:93:c3:10:d2:cc:93:ac:
                    a2:47:2c:5f:61:70:59:48:d8:87:23:7b:cf:3b:da:
                    f5:2e:cf:7f:c9:28:22:cf:20:e9:cf:3c:5d:80:21:
                    4c:f2:d2:ab:09:92:45:a2:32:67:6d:9e:d0:fc:be:
                    4c:d6:e4:fb:24:8e:ed:2b:60:f3:eb:ac:72:de:c2:
                    11:dd:c9:c2:fa:5b:f4:25:68:20:64:42:00:e2:ed:
                    e6:36:ce:28:54:9f:d3:28:b4:95:c2:4c:eb:e2:13:
                    72:f6:2a:6d:12:fd:8d:10:e7:bc:57:9f:ca:46:03:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B0:11:48:44:99:54:CC:A6:26:A1:F0:5A:96:72:17:C3:8E:D0:2F
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:9c:90:fe:02:03:8b:df:14:66:27:8e:f1:3b:57:40:0c:4c:
         06:c2:8a:24:f7:2e:7a:8a:2f:9d:af:f8:50:6b:97:ac:d0:03:
         43:0c:3e:f8:6c:a3:af:8e:29:8c:05:43:50:b9:bf:a9:f4:63:
         70:4b:a3:27:e4:83:1a:11:c3:60:1f:88:49:c0:34:dc:5a:ab:
         62:32:02:dd:61:d5:07:a6:e4:92:80:e5:5b:2c:0b:18:df:70:
         91:ce:6a:30:72:e8:cf:b9:2d:4d:84:26:d0:5c:28:8a:9b:5f:
         42:7e:9d:5d:5f:31:34:9f:b0:ec:35:5b:cd:d1:fd:3c:6e:6d:
         b8:77:68:1e:a6:13:c0:2f:72:95:47:2c:7a:37:3d:e4:03:c7:
         64:5a:8d:79:3a:e1:7d:04:f1:7d:6c:cd:6e:f8:c8:8e:4f:46:
         bf:1e:de:0d:4a:72:bf:22:ce:4b:97:9a:d8:95:e4:d2:b2:31:
         dc:62:08:52:a8:ad:da:56:74:9c:03:26:e4:9a:d4:b0:ae:68:
         79:d7:87:d2:7c:2d:e7:87:3b:ee:46:f3:88:76:a1:5c:ba:87:
         5a:93:35:f8:84:85:51:55:1b:ce:7b:20:d4:36:1c:de:02:78:
         b4:d6:39:ef:18:de:bb:b6:02:8c:db:8e:a5:65:03:40:cd:49:
         87:45:1f:e7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUDCI3vVawpDlQ2S8k4j2wJjGgtfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2
RDhCNTNBNDAeFw0yMzA2MjAxMzQ4MjlaFw0yNDA2MTgxMzUzMjlaMDMxMTAvBgNV
BAMTKENFQjAxMTQ4NDQ5OTU0Q0NBNjI2QTFGMDVBOTY3MjE3QzM4RUQwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiONPV9B8dnm2+Zd+a2gva8Oo
BvXVLcgdvPz0U0qphaDoeUx/ZmYZ7IwVU1bs0a68It68AyI1idJBQBXXGNfpbnov
XF4j/J95GO8G5c4s80gfYiGCV4aj7svQjWv008f2nCkPXGLpMewqOfLbQqKKqM2X
XDxX59MO06MjakKgX2E3+oyH3pkIT9KGesLZk8MQ0syTrKJHLF9hcFlI2Icje887
2vUuz3/JKCLPIOnPPF2AIUzy0qsJkkWiMmdtntD8vkzW5Pskju0rYPPrrHLewhHd
ycL6W/QlaCBkQgDi7eY2zihUn9MotJXCTOviE3L2Km0S/Y0Q57xXn8pGA4F1AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUzrARSESZVMymJqHwWpZyF8OO0C8wHwYDVR0j
BBgwFoAUXOGjgFIiV5inxaJZJpAz/G2LU6QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzAvNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2RDhCNTNBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0UxQTM4MDUyMjI1Nzk4QTdD
NUEyNTkyNjkwMzNGQzZEOEI1M0E0LmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzAvMzEz
MzM4MmUzMTMyMzEyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYz
MjM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAop5/DANBgkqhkiG9w0BAQsFAAOCAQEAKJyQ/gID
i98UZieO8TtXQAxMBsKKJPcueoovna/4UGuXrNADQww++Gyjr44pjAVDULm/qfRj
cEujJ+SDGhHDYB+IScA03FqrYjIC3WHVB6bkkoDlWywLGN9wkc5qMHLoz7ktTYQm
0FwoiptfQn6dXV8xNJ+w7DVbzdH9PG5tuHdoHqYTwC9ylUcsejc95APHZFqNeTrh
fQTxfWzNbvjIjk9Gvx7eDUpyvyLOS5ea2JXk0rIx3GIIUqit2lZ0nAMm5JrUsK5o
edeH0nwt54c77kbziHahXLqHWpM1+ISFUVUbznsg1DYc3gJ4tNY57xjeu7YCjNuO
pWUDQM1Jh0Uf5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org