Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa
File:                     3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          MRih8TvO2QutN1mpHgO07iwlJeCK+URBG0ip8AWEgwo=
Subject key identifier:   D7:2B:AF:EE:D1:49:43:C7:5B:42:94:60:89:54:24:D6:8D:63:7E:B9
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       38F757D1D7098FDBA62A7DDCAC3ABF1DDE43D106
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:24 +0000
ROA not before:           Tue 20 Jun 2023 13:48:24 +0000
ROA not after:            Tue 18 Jun 2024 13:53:24 +0000
asID:                     262765
IP address blocks:        168.232.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f7:57:d1:d7:09:8f:db:a6:2a:7d:dc:ac:3a:bf:1d:de:43:d1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:24 2023 GMT
            Not After : Jun 18 13:53:24 2024 GMT
        Subject: CN=D72BAFEED14943C75B429460895424D68D637EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:d4:63:9d:e8:b0:de:93:db:87:13:98:f2:
                    cb:37:b8:fd:60:4c:2f:e8:8c:ce:42:f7:ea:3b:3a:
                    99:40:01:97:38:d1:c4:2e:f9:5d:ae:e2:d6:e1:66:
                    f2:01:b5:8e:39:3f:bd:a1:a9:b2:71:5a:2c:6f:fd:
                    a1:8d:74:d0:ac:84:74:90:1f:0e:1f:5f:bd:c6:5a:
                    95:2b:41:f0:0f:fa:b9:4e:24:e2:e4:02:e5:43:03:
                    ee:9f:23:91:17:32:89:39:40:9b:ea:3c:98:2f:c4:
                    97:00:5d:a6:fc:4d:3d:11:1f:21:02:a4:a0:6d:0a:
                    f7:46:ad:c2:ca:5a:6d:5c:6d:68:e4:08:db:dd:57:
                    d8:5a:fb:6b:b9:32:a4:ac:10:64:88:74:a5:28:49:
                    59:6b:57:73:80:36:9c:eb:23:da:a4:31:2b:9e:53:
                    03:c6:3a:e4:1f:3c:d1:ca:3d:d8:fa:19:a2:5a:e7:
                    9f:bf:66:91:6e:f6:f3:a4:b5:67:f0:01:5e:9a:83:
                    39:f1:f2:f7:d4:eb:cb:ba:71:12:04:63:2a:58:80:
                    ff:6d:22:fa:20:13:54:f6:d1:25:c1:5f:92:6d:7f:
                    52:f3:1b:4d:43:72:60:3b:38:9c:67:d8:86:ef:dd:
                    4f:05:bb:9a:0d:c3:08:00:89:f1:b8:31:8e:82:bf:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2B:AF:EE:D1:49:43:C7:5B:42:94:60:89:54:24:D6:8D:63:7E:B9
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37332e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:49:ad:fa:1b:cc:1d:97:11:51:7b:30:a6:16:83:4a:16:
         5a:f6:4c:65:8d:d8:d7:a2:1f:bd:50:9c:af:bf:5b:08:81:4d:
         78:04:c2:86:99:4d:eb:40:2f:b2:8b:89:76:2d:63:4c:d4:42:
         4a:77:6e:eb:f6:10:fb:38:18:40:42:40:b8:af:58:c1:be:a2:
         a6:3d:08:cc:7a:a1:c9:a0:2f:94:ff:1b:7d:c2:4f:51:4a:62:
         cc:82:aa:5c:64:7e:c9:af:8b:65:e2:4f:a3:35:83:13:98:e3:
         8d:08:20:06:1b:77:f0:b1:b3:5d:b3:8c:25:06:e0:71:ad:c3:
         25:42:67:81:e0:34:30:42:92:69:a6:07:ae:f4:cc:d5:06:48:
         16:c7:5e:9d:a2:ef:82:9d:ac:a6:84:78:0f:a2:26:6b:be:d1:
         2a:76:24:d1:ad:d6:f3:d2:15:1f:61:90:ba:27:40:c7:43:58:
         eb:e8:70:41:ae:2f:11:8a:cf:2c:25:0f:73:83:ea:98:ec:e9:
         8c:a7:64:61:2e:1f:4b:89:5e:4f:57:f5:bf:df:c9:cd:ef:69:
         e4:6e:8a:bc:e2:c9:5e:1b:ad:e5:28:f8:7a:7c:db:98:c7:46:
         8b:ed:38:8a:da:cd:15:be:18:26:97:ac:fb:b1:fc:69:d3:62:
         e9:3a:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org