Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          KmSMkbPi4hvoW5kcI72fijx3ti481Je9L8DAwkyBfVw=
Subject key identifier:   03:CB:C1:DA:EA:3A:06:16:6C:C6:6D:A5:6F:8F:AF:97:E7:0B:E2:2E
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       551126F8D887B36441D59AA71D4DE5E86821A33E
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:19 +0000
ROA not before:           Tue 20 Jun 2023 13:48:19 +0000
ROA not after:            Tue 18 Jun 2024 13:53:19 +0000
asID:                     262765
IP address blocks:        170.80.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:11:26:f8:d8:87:b3:64:41:d5:9a:a7:1d:4d:e5:e8:68:21:a3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:19 2023 GMT
            Not After : Jun 18 13:53:19 2024 GMT
        Subject: CN=03CBC1DAEA3A06166CC66DA56F8FAF97E70BE22E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:65:74:d7:ad:a0:87:11:63:71:a2:1c:4b:
                    23:15:d6:50:ab:8e:e1:88:0d:b8:aa:7a:ca:a8:91:
                    80:4f:ec:fd:43:7b:84:69:21:ba:82:ba:f4:d1:6f:
                    bd:f4:12:49:f6:9f:de:d0:ff:c5:b4:62:0f:50:07:
                    26:c2:3f:05:81:57:ba:f7:7e:ab:53:53:50:8e:79:
                    61:5c:19:2f:34:fe:21:59:a0:e7:df:03:48:db:f7:
                    b1:24:f8:1a:5a:48:85:ac:5b:83:5a:b8:d5:27:b0:
                    fe:f6:2f:59:66:e0:00:9b:98:12:71:71:69:9e:e3:
                    41:c8:a2:fb:81:4a:38:88:e2:d9:0b:10:ca:4d:45:
                    c4:fc:7d:89:fd:20:e3:a1:a1:2d:d3:a2:9e:93:ae:
                    72:ba:09:f7:1b:d9:1f:3f:b5:b6:7a:51:b5:3f:bd:
                    c2:60:45:c8:84:3c:93:89:17:1f:03:3d:d8:be:ad:
                    a7:94:d8:c0:5d:13:a2:09:1d:99:d3:a3:9c:63:c7:
                    b9:e9:59:a7:45:f2:fb:e3:da:b5:10:80:78:56:4e:
                    90:9d:a4:fb:c0:5f:39:fc:b0:d9:6d:3a:bb:fb:70:
                    bb:2e:04:29:13:97:05:5c:47:dc:60:2d:41:10:25:
                    d4:67:b1:34:5a:c8:5c:f4:d5:6c:0b:9b:83:b9:32:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CB:C1:DA:EA:3A:06:16:6C:C6:6D:A5:6F:8F:AF:97:E7:0B:E2:2E
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:35:56:bd:74:3c:ae:05:ca:5e:56:6d:b1:46:ba:48:f7:62:
         15:e2:de:06:23:46:6c:de:99:60:76:0d:3c:68:ae:d1:15:70:
         22:c9:0f:23:06:2e:f3:88:a3:dc:37:b9:3f:62:39:aa:e6:a3:
         1d:76:cc:67:44:6d:d4:89:32:56:05:57:a1:d6:5d:d4:e2:d8:
         81:0d:90:38:03:63:00:d7:00:f7:91:2d:69:97:32:65:9d:7c:
         e0:7f:95:a2:42:e8:d7:e7:90:f1:14:ee:93:fe:07:a6:3c:69:
         13:07:81:15:11:0b:df:d7:33:c1:73:57:01:d8:a7:1d:37:12:
         de:7f:cb:f5:6c:a2:32:3d:c7:f8:0a:b7:2b:9f:7d:3f:33:ec:
         f9:ea:92:d2:e6:50:f7:0b:1e:9a:1c:7c:cf:13:fd:99:15:62:
         53:86:ab:9d:fd:39:20:b2:6e:ef:2e:03:5d:3f:26:ad:1a:da:
         36:67:d0:7a:b5:61:15:c7:46:71:a4:76:be:f1:fb:f8:ee:b1:
         64:73:e1:7a:81:b3:9a:cb:54:97:3d:7f:00:8c:0d:50:b4:45:
         db:71:59:f4:25:04:b5:0d:47:d0:b2:9c:bc:a8:db:9c:25:0f:
         12:2d:2d:ca:63:bf:0b:54:9c:19:f8:3f:ff:a5:b0:93:2f:92:
         63:04:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:41 2025 by rpki-client