Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa
File:                     3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          gDFVnx1hNwx//D/Cb2OiywqHeFcAWKq8E4lcCVn+8jo=
Subject key identifier:   0B:FC:71:CE:4D:A8:D7:4A:79:F3:00:23:77:59:5B:89:AF:EE:E5:35
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       42A1593F23E92D1C1019E383B077AF156BBE5759
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:22 +0000
ROA not before:           Tue 20 Jun 2023 13:48:22 +0000
ROA not after:            Tue 18 Jun 2024 13:53:22 +0000
asID:                     262765
IP address blocks:        138.121.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a1:59:3f:23:e9:2d:1c:10:19:e3:83:b0:77:af:15:6b:be:57:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:22 2023 GMT
            Not After : Jun 18 13:53:22 2024 GMT
        Subject: CN=0BFC71CE4DA8D74A79F3002377595B89AFEEE535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:47:f7:be:d6:73:58:a6:93:32:34:bd:38:af:
                    3d:aa:f1:9b:d5:e4:dd:14:f4:b5:1d:4d:00:be:45:
                    f2:79:3f:7c:03:27:32:d0:63:51:3c:3e:cd:a4:ee:
                    12:09:47:43:cd:16:35:51:07:7e:c0:3a:8a:e3:d0:
                    4d:8d:30:35:1a:93:0a:30:ff:c5:7b:12:99:2e:12:
                    97:02:9d:93:89:e4:1d:70:89:21:59:eb:87:a6:7e:
                    b2:aa:63:6d:59:c7:6f:af:26:65:f4:04:53:fe:05:
                    23:85:22:00:9b:4a:77:2c:c6:23:d7:34:88:7d:4c:
                    20:b0:86:00:e9:a9:b0:03:e6:4b:45:c4:99:61:95:
                    34:a2:b3:1c:27:f3:28:86:ce:50:96:c6:d7:46:c6:
                    46:2a:9c:3d:3d:fc:ce:cb:34:34:b8:99:73:e5:e3:
                    c0:8e:55:d4:91:76:7d:9b:2b:87:f6:7e:be:1d:ed:
                    39:48:a9:d6:40:ce:fe:85:42:92:55:b4:6c:15:a2:
                    ed:f7:bd:75:10:10:aa:7e:30:be:97:7e:c1:9e:79:
                    26:84:1e:a5:fc:77:cc:1f:be:09:5a:ec:69:a9:12:
                    f9:c1:d7:84:3f:e0:17:9b:ff:7d:0d:0c:d4:c6:68:
                    32:fd:a5:fe:2e:1c:a7:2b:98:69:49:3c:f5:9e:90:
                    85:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:71:CE:4D:A8:D7:4A:79:F3:00:23:77:59:5B:89:AF:EE:E5:35
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235322e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:d0:3f:40:be:5a:be:00:cb:b4:15:62:a5:f8:36:0d:fc:31:
         46:cb:7e:18:14:89:12:1e:2c:02:ca:07:8e:a3:5c:cb:24:d1:
         51:40:7f:79:5c:0c:67:ca:06:e6:31:86:9d:83:bb:23:0e:a1:
         78:fe:57:e8:e3:b5:7d:4e:fb:04:92:13:ce:55:86:ea:c1:76:
         ef:f5:6c:b6:7a:e4:48:c2:19:92:17:de:c9:1e:a1:8c:6f:d9:
         d0:42:49:ca:08:2b:20:a3:3c:a1:c9:c8:28:65:c4:d0:fa:d2:
         a8:f6:0b:a4:2a:3d:8a:ca:df:18:f9:9f:fc:96:c7:8e:97:14:
         1f:6a:18:ab:5c:5d:77:22:48:63:7f:08:e4:21:c3:3f:74:e3:
         01:b8:40:ad:11:1c:27:10:5c:67:f8:75:c2:04:94:58:2f:57:
         e8:95:39:97:54:88:02:95:48:08:ac:df:fe:6c:0e:76:31:8c:
         4c:ae:fd:99:92:90:e4:ac:f8:f9:f2:1c:6b:25:56:52:4a:72:
         8a:34:0c:09:87:c7:32:7b:80:75:f0:82:32:cf:10:f9:f5:37:
         33:85:d2:69:67:0a:af:e8:3e:46:62:47:17:e8:93:ac:de:3b:
         78:83:54:fe:64:bd:99:80:c3:e7:2a:73:bd:dd:8e:cc:b8:6a:
         ea:ff:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org