Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          VJVyYNqCRPR2f8bZyBp0nxfp1tJCb7ck9VW4Gaqj9bQ=
Subject key identifier:   13:F6:D1:DF:65:84:27:62:ED:08:FD:D8:06:E1:4E:EB:72:11:66:FA
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       37722BD5F39E8777796F65BF641F5F43DBC6D449
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:17 +0000
ROA not before:           Tue 20 Jun 2023 13:48:17 +0000
ROA not after:            Tue 18 Jun 2024 13:53:17 +0000
asID:                     262765
IP address blocks:        170.80.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:72:2b:d5:f3:9e:87:77:79:6f:65:bf:64:1f:5f:43:db:c6:d4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:17 2023 GMT
            Not After : Jun 18 13:53:17 2024 GMT
        Subject: CN=13F6D1DF65842762ED08FDD806E14EEB721166FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:6d:d9:85:e6:e8:6f:d2:92:b9:8e:c4:7a:
                    e3:0a:94:2a:cc:e4:21:6f:2f:40:2d:61:3e:28:51:
                    d2:58:41:4b:19:09:8d:fe:36:91:de:53:c3:6a:c5:
                    1e:2a:37:80:d9:31:c7:06:7c:fa:14:4a:82:91:79:
                    64:3c:5e:c6:50:7b:a3:01:ba:2a:9e:7d:90:3e:f4:
                    b7:50:e6:95:02:d7:be:68:53:a3:76:47:33:37:1c:
                    92:e9:f5:fd:30:f0:0f:1c:60:2d:db:09:10:33:4d:
                    98:55:5d:97:50:1a:d0:f8:5a:fb:e4:b6:b0:3a:25:
                    b4:f1:b8:e0:fe:6f:bc:d7:47:be:49:60:cb:cb:8f:
                    a4:4f:2b:79:e2:47:63:d0:26:a7:3c:4f:54:eb:4a:
                    9e:ca:93:6c:a9:28:ff:95:3c:72:ba:6e:c9:3f:40:
                    4f:42:e5:98:27:da:a8:6d:6a:63:18:ef:1a:d7:dd:
                    d4:2c:dd:19:56:bc:03:e9:d0:48:02:df:fd:04:b2:
                    b4:8a:f9:ad:ca:b7:3b:90:2e:82:01:dd:63:f3:dd:
                    3c:a1:f7:a4:d4:01:df:0a:af:6a:51:53:45:cc:28:
                    49:3b:83:75:04:d8:43:c2:d6:24:38:8a:e0:4f:0c:
                    72:fd:b5:ec:3d:de:0c:73:2e:1c:08:5d:a6:6f:ee:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:D1:DF:65:84:27:62:ED:08:FD:D8:06:E1:4E:EB:72:11:66:FA
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:0e:02:c6:7d:57:9d:12:fe:4e:f5:05:6e:75:74:76:14:
         49:fc:41:b4:48:69:e5:7d:16:e2:f0:ae:91:ec:3c:33:8a:dc:
         42:67:22:f9:ce:dd:8c:b5:9e:af:c6:5f:bc:43:6c:2f:71:1e:
         28:78:af:ed:d2:94:60:7b:db:fa:fd:55:32:53:39:36:81:75:
         3e:72:06:60:9c:ab:7e:32:13:8e:97:40:fa:10:33:21:9a:1f:
         e5:16:8a:94:57:a5:5d:6a:c4:74:1e:6d:96:10:86:54:29:c7:
         f6:94:cd:b9:52:9c:4f:54:57:8f:81:71:4a:fe:85:a3:c6:9d:
         0a:01:d7:f6:b8:52:51:a0:07:c0:21:bd:35:c3:2c:38:f9:cd:
         c4:79:fc:75:aa:3b:b7:07:95:f5:ab:9e:50:bd:ce:16:be:44:
         12:bf:c0:40:16:b2:47:40:38:35:2f:1a:43:41:ab:91:1d:be:
         e2:3a:d8:6d:81:93:49:c6:39:cd:9f:af:83:ad:01:5d:3b:52:
         61:cb:99:5d:37:6c:fe:f6:ca:a1:d4:61:07:80:7a:ab:c4:2c:
         91:bd:75:85:60:4a:42:0f:d6:58:52:5c:1b:ee:42:cf:95:22:
         0b:40:7f:34:d0:d8:49:0d:b1:0a:df:04:db:d1:5f:46:52:96:
         16:9d:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org