Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa
File:                     3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          XxIYhXu1rEcGUsh4GdtdWfUnUJB7lksvRphK2UXiNfM=
Subject key identifier:   9B:F4:04:A5:EF:B1:6F:E6:E6:BB:4A:D9:3C:65:18:E4:E9:91:11:68
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       64AD27011F2F87E132369C2DB6772F58F8244010
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:23 +0000
ROA not before:           Tue 20 Jun 2023 13:48:23 +0000
ROA not after:            Tue 18 Jun 2024 13:53:23 +0000
asID:                     262765
IP address blocks:        138.121.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ad:27:01:1f:2f:87:e1:32:36:9c:2d:b6:77:2f:58:f8:24:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:23 2023 GMT
            Not After : Jun 18 13:53:23 2024 GMT
        Subject: CN=9BF404A5EFB16FE6E6BB4AD93C6518E4E9911168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:49:e9:36:ff:8b:59:7d:9b:1a:49:10:88:
                    86:4f:a0:c2:a2:c2:40:f0:2e:2b:c3:47:37:36:a0:
                    44:1e:63:a2:e0:2e:d6:40:b1:b4:74:30:d3:5a:a1:
                    69:74:00:43:32:43:c5:8c:d8:d6:f9:09:8a:7d:11:
                    af:c7:37:b6:b0:f0:33:0d:8c:bf:74:21:95:73:62:
                    1a:c7:10:97:f8:f3:76:8e:92:4f:c0:04:60:7a:b2:
                    66:ad:cd:ae:68:39:87:2c:15:4b:d5:7f:06:fc:80:
                    b8:d7:2a:f5:4a:9d:a0:86:dd:84:ef:25:72:44:6e:
                    20:25:1a:73:c9:5a:24:9a:b4:ed:c3:a7:60:33:2b:
                    2c:0d:f7:af:9d:04:5a:c0:1e:22:c2:24:b3:0b:e3:
                    41:60:46:3a:89:6d:0a:ee:2c:29:88:cf:d0:98:a6:
                    55:f1:a3:d6:fa:60:77:f6:50:fd:12:36:02:a3:95:
                    34:05:fa:53:a6:28:ae:38:a9:d1:17:aa:a4:59:9e:
                    40:f2:50:e3:f8:ce:0c:c8:bd:1c:8b:cd:8c:98:97:
                    e0:c6:23:07:07:d4:68:61:04:07:28:81:01:9e:c4:
                    c3:ce:30:63:19:c0:6c:1b:50:2d:29:2f:99:d5:67:
                    12:64:95:1c:d4:5c:e2:93:1f:7f:8a:f0:c3:00:e9:
                    66:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F4:04:A5:EF:B1:6F:E6:E6:BB:4A:D9:3C:65:18:E4:E9:91:11:68
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3133382e3132312e3235352e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ed:9f:2c:9a:9a:36:f7:c6:db:fe:8e:ae:ce:39:aa:c0:fa:
         81:6f:ee:9a:82:67:46:47:ea:c9:b4:ac:1d:32:2d:54:d7:4c:
         45:54:7d:24:59:3f:0f:99:ad:05:65:c0:4c:02:5c:1c:02:a3:
         44:a6:84:ec:03:7b:26:87:ef:a5:c5:26:2c:a3:e7:33:99:dd:
         67:81:62:30:27:ae:0f:29:07:f3:1f:07:98:9c:42:2d:9c:74:
         18:75:37:92:5c:17:5d:14:da:19:cd:bd:2f:b2:bd:41:98:fc:
         e7:1b:b3:18:14:38:f4:0a:b1:5b:02:a6:ce:76:b6:77:82:63:
         45:88:c8:7e:a5:3a:23:88:47:ee:7f:e5:ba:47:e3:26:88:a4:
         8d:c1:c0:3f:19:f1:34:a9:16:58:4f:98:3f:45:d7:80:f3:0a:
         8e:60:a5:01:db:9a:80:3e:de:99:b9:81:bf:54:f9:74:82:dc:
         45:88:5a:42:6a:f3:4c:2d:b5:c7:79:45:ba:7c:6a:52:a4:0c:
         48:b7:49:85:4b:9c:1c:85:f7:54:79:4a:0d:88:b2:f0:21:e6:
         26:dd:15:95:c2:f5:de:f7:33:24:2d:ca:a0:1c:79:8c:26:8a:
         16:72:ce:aa:72:bd:3f:e6:e0:de:f6:5c:3d:44:3f:4a:0b:03:
         0f:66:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org