Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37342e302f32342d3234203d3e20323632373635.roa
File:                     3136382e3233322e37342e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          DlehX/iEHZisaAXXqw9HjtcCiJxkrM/OFcGMLtFOlXM=
Subject key identifier:   59:59:75:38:47:5A:9B:03:85:D6:91:E5:1D:82:AA:1D:ED:AD:42:C5
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       3CCB99906D4C3C49DEF27E5C41470708292FFB5E
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37342e302f32342d3234203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:19 +0000
ROA not before:           Tue 20 Jun 2023 13:48:19 +0000
ROA not after:            Tue 18 Jun 2024 13:53:19 +0000
asID:                     262765
IP address blocks:        168.232.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:99:90:6d:4c:3c:49:de:f2:7e:5c:41:47:07:08:29:2f:fb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:19 2023 GMT
            Not After : Jun 18 13:53:19 2024 GMT
        Subject: CN=59597538475A9B0385D691E51D82AA1DEDAD42C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:3f:a3:c7:46:c7:d2:b3:50:0c:75:96:98:
                    59:b1:12:68:b4:1d:ad:3c:9d:8e:e1:c3:0e:87:bc:
                    01:8f:2b:de:33:7a:41:c5:7b:44:a2:ed:bd:4f:62:
                    78:e1:a1:ba:a3:8c:a6:00:fd:c2:9c:e6:81:2e:80:
                    0f:6a:68:08:82:91:80:1b:65:bb:c6:29:e5:13:d6:
                    79:cd:40:73:77:55:72:92:e6:35:dd:95:2c:2e:b3:
                    4c:9c:76:10:12:76:60:a6:c9:d3:71:e0:74:39:12:
                    97:1d:5c:bb:a8:e0:71:3d:c3:9f:f3:2c:77:9f:ad:
                    28:55:00:1b:63:9a:e0:c9:ef:9a:ae:a4:bb:01:98:
                    7d:56:cc:6f:fc:73:0a:80:6c:b0:ab:7f:7c:00:23:
                    61:78:00:9c:d3:e6:dc:a4:bc:af:d9:d3:c5:39:70:
                    7f:e2:ec:7c:3a:84:f7:a9:81:8b:2c:45:99:11:3a:
                    57:2c:2d:c5:ee:7c:64:d8:84:82:1b:76:3a:0b:fb:
                    e8:37:cc:f3:81:a3:c5:8c:b2:26:78:75:2a:26:5d:
                    41:72:db:f4:ed:b5:95:f4:17:e9:80:fe:e4:a5:51:
                    c0:3e:69:17:ad:12:6f:e8:c7:8f:60:f9:ac:a6:16:
                    67:eb:7d:6f:75:97:3e:c6:fc:1d:6c:30:68:ae:4a:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:59:75:38:47:5A:9B:03:85:D6:91:E5:1D:82:AA:1D:ED:AD:42:C5
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3136382e3233322e37342e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:5b:94:eb:2d:78:cd:16:da:09:df:9e:7b:a0:73:5e:fa:c8:
         e5:30:f5:ad:75:d3:08:12:b5:f8:13:10:8f:c2:5e:cb:fe:0a:
         a5:3f:dd:8b:55:a7:d4:de:29:c1:f9:02:21:35:f7:57:da:5e:
         c3:42:69:6b:c4:35:d6:25:2f:20:33:aa:ca:78:68:4e:24:a0:
         b6:3c:7e:56:94:72:5d:57:d7:1b:d7:76:24:b5:bc:52:ff:b7:
         83:d5:15:97:94:07:49:c1:f5:9b:3b:69:6d:81:53:75:04:9a:
         83:10:4f:af:f1:13:ba:2d:4c:c7:35:47:cf:92:a0:23:ae:5c:
         0c:4f:b5:e0:c2:d4:42:bc:eb:17:de:6d:1f:d1:7d:ae:83:fa:
         31:d4:6b:32:14:70:26:81:a3:77:0e:e4:84:e3:42:92:c6:85:
         41:0b:78:b5:55:74:37:9c:fb:9d:46:66:f0:b2:9f:9c:25:a6:
         20:22:cb:ec:19:ac:ce:6b:e8:4c:86:46:31:1a:45:20:ab:a6:
         fe:89:d3:64:f4:95:9c:fe:c2:b6:8e:38:52:1f:12:61:69:2c:
         54:d5:41:6f:b9:9f:88:d0:91:b9:e9:c2:f1:e6:e2:48:28:b4:
         ee:5a:d9:3c:04:96:5f:6b:75:eb:98:d3:94:85:6d:fb:82:a9:
         70:3d:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org