Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32322d3234203d3e20323632373635.roa
File:                     3133382e3132312e3235322e302f32322d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          x1vhUE825VLNJohE+ZUsXb0L4yOzIk1rIZE70de5L48=
Subject key identifier:   0D:4A:05:93:7A:B2:35:08:A4:FE:D0:A5:AF:E1:0A:50:18:05:F6:4F
Certificate issuer:       /CN=38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D
Certificate serial:       51B33B666203A8416848A63784304BFAB6751D0D
Authority key identifier: 38:B7:D6:79:9B:FE:BC:F4:94:05:15:FA:4C:D4:A0:9D:25:8D:DB:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32322d3234203d3e20323632373635.roa
Signing time:             Fri 10 Feb 2023 15:52:00 +0000
ROA not before:           Fri 10 Feb 2023 15:47:00 +0000
ROA not after:            Fri 09 Feb 2024 15:52:00 +0000
asID:                     262765
IP address blocks:        138.121.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:3b:66:62:03:a8:41:68:48:a6:37:84:30:4b:fa:b6:75:1d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D
        Validity
            Not Before: Feb 10 15:47:00 2023 GMT
            Not After : Feb  9 15:52:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:4c:17:e3:70:e3:f3:3b:db:06:dc:30:8e:
                    d1:26:33:9f:11:24:e7:ec:ce:21:54:39:a5:c9:83:
                    bf:1c:bc:be:47:96:13:ab:91:76:19:53:e5:4a:16:
                    6d:3d:97:88:3c:b6:81:dc:73:96:d8:eb:9d:3e:46:
                    eb:a2:20:91:fa:14:73:d8:9a:88:93:4c:fe:b0:4c:
                    18:76:f5:6f:df:63:a0:7b:a8:a3:50:6f:f0:19:5a:
                    57:83:4a:12:8c:94:bf:c5:2e:8a:37:a2:cc:d9:ac:
                    fb:9d:02:e8:70:ce:6d:90:20:7e:c9:48:dd:75:ce:
                    2d:3f:9d:68:71:98:4b:0a:4d:45:6f:d2:46:be:ea:
                    fd:37:25:b7:1b:82:76:3f:95:75:de:14:90:b6:80:
                    aa:6c:27:d1:29:9e:b8:64:ff:a9:2f:da:6f:15:c4:
                    05:14:b7:bd:45:25:10:12:8b:06:6a:51:a4:d2:31:
                    86:b4:c2:10:ab:c3:32:ef:a8:0b:b3:77:25:91:2e:
                    a1:ad:90:91:4d:cd:d6:f2:ea:72:67:fe:37:fe:86:
                    b4:03:f8:ac:c0:8b:6c:a1:9e:06:ac:a6:75:c7:db:
                    a5:ba:ae:8d:57:16:ea:fd:9b:71:72:69:25:1f:b3:
                    49:b7:fe:65:3d:25:98:b7:8e:66:5f:37:fd:64:b6:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:05:93:7A:B2:35:08:A4:FE:D0:A5:AF:E1:0A:50:18:05:F6:4F
            X509v3 Authority Key Identifier:
                keyid:38:B7:D6:79:9B:FE:BC:F4:94:05:15:FA:4C:D4:A0:9D:25:8D:DB:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38B7D6799BFEBCF4940515FA4CD4A09D258DDB7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32322d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:e0:62:fb:18:69:1e:e9:9c:08:35:fd:80:b3:0b:66:dc:4f:
         19:ea:fd:75:e5:3b:b8:8f:77:86:80:15:5a:02:37:75:c5:ca:
         95:3b:fa:7e:4a:4c:0c:69:84:2c:df:1c:13:e5:8f:ee:07:87:
         e4:a6:e9:54:8a:31:92:56:98:c9:8b:40:e1:52:8e:6f:dd:d6:
         67:68:32:ed:56:ea:b4:e8:01:50:4b:47:44:c2:ad:95:9e:f6:
         d2:8f:d9:fc:f1:20:6d:71:d1:88:69:ff:d5:97:1a:a9:4f:a4:
         a9:36:d7:64:51:21:83:70:9b:c0:7e:14:17:5d:3b:bb:de:17:
         fb:43:73:9b:42:3d:42:47:c6:a9:4b:50:e3:19:30:dd:ad:ee:
         80:23:b7:23:d5:7a:34:71:fa:4f:aa:5b:b2:d5:a6:b4:7e:6f:
         ef:dd:81:ad:fc:87:76:44:c5:c1:66:77:5c:30:4d:37:9b:e0:
         d9:a1:55:51:59:75:8b:6c:d6:e1:96:53:a7:2e:d8:84:59:ca:
         6c:41:e0:3c:5d:09:14:62:cd:cf:81:49:df:a9:1f:f5:ab:95:
         6a:fe:39:3a:34:ae:85:e4:2d:27:0a:13:03:a0:27:0f:25:48:
         f7:70:ac:8b:3e:b3:d3:76:c1:8b:26:a2:22:46:3f:45:4f:a4:
         77:75:55:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org