Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32342d3234203d3e20323632373635.roa
File:                     3137302e38302e3135322e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          focL7QcCE87V1ZvK9dDvn/0AJ3Sx4cu2qex0S54rsyg=
Subject key identifier:   36:77:5F:91:DB:61:FE:94:D8:22:AD:93:C9:7D:1F:65:E4:DC:14:54
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       1F333F949D44EA86EF1C65AAB3B17FE3909A52AC
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32342d3234203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:28 +0000
ROA not before:           Tue 20 Jun 2023 13:48:28 +0000
ROA not after:            Tue 18 Jun 2024 13:53:28 +0000
asID:                     262765
IP address blocks:        170.80.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:33:3f:94:9d:44:ea:86:ef:1c:65:aa:b3:b1:7f:e3:90:9a:52:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:28 2023 GMT
            Not After : Jun 18 13:53:28 2024 GMT
        Subject: CN=36775F91DB61FE94D822AD93C97D1F65E4DC1454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:47:86:dd:08:49:2c:e6:8f:d3:5a:ae:89:
                    10:0d:ae:b6:66:c4:f1:74:2a:b1:b0:08:47:8d:6e:
                    c5:35:18:9f:2f:31:0a:a5:4a:65:b2:12:ff:5f:62:
                    c9:a9:3f:87:66:32:76:5f:5f:f5:d4:c7:dc:c7:5b:
                    36:12:6f:3d:51:d8:51:42:88:65:05:aa:65:22:90:
                    07:f0:b5:8c:ba:c0:7d:07:71:1c:3e:fc:11:59:a9:
                    5d:3e:6f:7d:85:e0:18:9a:df:1f:7d:5e:01:dd:5e:
                    38:a2:dd:5f:5a:27:38:b2:90:2e:0c:f3:e8:06:2a:
                    06:9d:bd:94:6d:b2:13:87:29:ec:29:a5:c6:15:04:
                    f0:2e:bf:31:91:8d:3e:75:84:f0:35:b9:e1:af:cf:
                    ef:9d:3d:58:0e:9a:24:ff:e7:af:90:97:37:56:bf:
                    c4:fc:4e:21:69:ce:bb:37:70:ca:b0:9d:49:c7:a4:
                    60:62:bc:78:3f:ad:2b:ff:67:6f:be:e0:e5:38:1d:
                    1c:55:b2:55:b5:c4:5d:bc:16:1f:b9:79:d6:5d:2b:
                    1a:fb:3e:db:94:ec:be:b4:ad:78:a9:63:14:54:ad:
                    e5:2d:f4:71:65:de:d7:b9:05:78:a8:72:fd:52:8a:
                    a0:00:c9:b4:3d:e3:87:25:89:49:26:27:44:60:d1:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:77:5F:91:DB:61:FE:94:D8:22:AD:93:C9:7D:1F:65:E4:DC:14:54
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3137302e38302e3135322e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:f0:ef:8b:c9:de:be:7b:da:7a:ec:ce:75:4d:6d:42:f8:3b:
         15:3b:3f:8b:d8:f0:3e:52:d5:23:0b:64:15:36:17:16:b5:c0:
         43:f6:e8:3c:ed:86:68:3b:f8:d1:ee:03:ce:5e:c8:3d:a7:11:
         0c:aa:12:21:9f:5a:50:5e:81:07:77:79:ce:b3:a3:74:ff:03:
         3f:ee:87:a8:be:1f:ac:62:9c:c5:ac:d4:a5:00:45:69:e9:94:
         a2:0a:a4:07:c7:86:51:0e:fe:1c:7e:66:71:34:56:f7:4a:7c:
         58:0a:47:4a:de:50:54:37:9a:da:e6:cb:cb:17:5a:b2:fd:a3:
         73:0c:85:63:fa:00:46:cf:2a:40:be:16:18:34:e2:41:2b:58:
         c2:86:29:5d:14:56:0a:a2:02:64:c7:40:2f:9d:c9:7b:8c:72:
         3a:46:7d:92:25:36:8a:5f:69:3d:97:1f:f5:ac:d5:0b:86:17:
         cd:07:78:91:e6:8e:06:a0:c2:b1:0a:a5:7d:3b:da:86:2b:b4:
         1b:fb:56:37:08:65:a5:89:f5:7e:7e:22:b1:cc:57:d4:51:2b:
         e0:63:0e:4b:04:7f:34:2c:8f:08:ec:f7:a3:f5:0d:e7:d3:f4:
         de:27:0c:04:0e:3a:47:54:d2:84:a8:f9:27:99:4c:c4:17:90:
         e7:fb:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org