Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa
File:                     3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          cyumoowtvN/53ILCIz33JhPbyJY2EpSOUNrY4D932Kg=
Subject key identifier:   20:27:CA:3E:A7:A7:EF:86:BC:A7:53:D8:C6:31:2E:ED:63:F5:0D:79
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       5B2E47E39D1CF2C29677F09788442694EC7A1B89
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:31 +0000
ROA not before:           Tue 20 Jun 2023 13:48:31 +0000
ROA not after:            Tue 18 Jun 2024 13:53:31 +0000
asID:                     262765
IP address blocks:        138.121.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2e:47:e3:9d:1c:f2:c2:96:77:f0:97:88:44:26:94:ec:7a:1b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:31 2023 GMT
            Not After : Jun 18 13:53:31 2024 GMT
        Subject: CN=2027CA3EA7A7EF86BCA753D8C6312EED63F50D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6f:61:0f:ff:89:78:62:a7:74:c2:ba:9b:b0:
                    f2:ed:3a:dd:2e:55:12:a2:f7:54:2b:7c:9c:0b:4d:
                    13:e6:d5:89:d1:50:f7:82:f3:44:37:dd:ab:31:bc:
                    c2:7b:9f:a4:b1:53:fa:ba:9f:95:a5:28:19:14:20:
                    13:c5:7b:c5:98:8d:54:63:1f:f6:36:59:35:6b:36:
                    76:ae:5b:84:b8:43:ad:03:55:98:f3:ca:13:36:01:
                    93:9b:be:b2:7d:fd:64:84:d1:9c:ea:e5:71:e2:57:
                    ba:14:61:c8:cb:ae:dd:ac:75:8e:af:ef:cd:23:7c:
                    7c:b0:e2:5a:46:a2:f2:bc:1d:df:83:b2:90:52:c3:
                    26:41:75:12:18:2e:2c:1e:38:84:5c:35:46:f4:f9:
                    8a:2a:5f:3e:3c:83:43:8d:2c:68:ee:fc:1b:50:b0:
                    ab:81:67:68:e1:49:f5:2d:0f:bc:69:a7:af:73:5a:
                    7a:e4:b8:0d:cf:03:22:80:45:a1:2a:20:97:b8:ff:
                    c0:df:97:68:1a:85:84:7f:a2:6c:8f:20:22:c3:9b:
                    56:76:86:17:cc:21:3a:3a:3c:f1:2b:b6:77:23:aa:
                    9a:ee:cc:a5:ea:61:21:19:a0:df:a3:64:06:27:a4:
                    f4:7d:66:94:91:22:a5:11:0a:6b:4d:2e:d0:de:b2:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:27:CA:3E:A7:A7:EF:86:BC:A7:53:D8:C6:31:2E:ED:63:F5:0D:79
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235342e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:7b:87:b4:ea:40:f5:c6:b9:56:84:35:14:03:18:ee:1f:41:
         60:33:4e:e5:a9:2b:2f:6c:70:78:82:cf:0b:b3:18:03:0b:df:
         6b:91:9d:46:e3:54:0a:a9:b2:5e:55:14:aa:d2:5d:c4:c0:96:
         a9:d6:b4:20:9f:68:fb:a0:d7:ca:35:c6:0f:0d:c3:9f:64:68:
         f8:da:4a:d8:ef:78:43:e5:55:e0:16:68:3d:75:40:a3:39:f3:
         f3:fd:7b:1c:69:17:90:a5:a0:89:04:6f:73:a7:7f:dd:72:6c:
         6b:c1:c3:ac:83:6c:70:f3:bd:ed:51:41:7f:cf:b9:e0:0a:d4:
         9e:0c:ae:c3:40:f1:e3:c7:16:e5:0c:b9:81:05:0a:ad:64:38:
         59:19:df:be:03:19:12:50:dd:59:2b:f1:92:df:24:fe:13:3d:
         fa:17:74:61:00:f3:98:9f:23:73:fa:c4:18:ec:25:c6:f2:15:
         54:d3:d0:be:cb:a4:0d:e4:1f:e9:f5:eb:ac:ea:8f:1e:5a:e4:
         8f:1c:55:a4:0d:5b:11:2b:5a:46:8c:f2:7e:35:3b:95:86:8c:
         d7:75:44:af:84:0e:a0:0a:a2:57:b8:76:ac:b1:44:63:f4:e6:
         bc:41:c6:55:55:2b:9b:35:f0:5c:93:95:d3:be:8f:0d:6b:fc:
         d3:35:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org