Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3138362e3232372e31342e302f32332d3233203d3e20323632373635.roa
File:                     3138362e3232372e31342e302f32332d3233203d3e20323632373635.roa (raw, json)
Hash identifier:          XCHIB9tom54oauIXgBC9tPlLPRHDT9tgQ9BC+k7ilSc=
Subject key identifier:   01:19:A9:5C:01:D7:F4:B1:D3:00:BA:9C:11:2D:24:11:F4:85:49:83
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       3C8EF40BED8899398424AD0B0C8C09E17CD9558D
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3138362e3232372e31342e302f32332d3233203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:20 +0000
ROA not before:           Tue 20 Jun 2023 13:48:20 +0000
ROA not after:            Tue 18 Jun 2024 13:53:20 +0000
asID:                     262765
IP address blocks:        186.227.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8e:f4:0b:ed:88:99:39:84:24:ad:0b:0c:8c:09:e1:7c:d9:55:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:20 2023 GMT
            Not After : Jun 18 13:53:20 2024 GMT
        Subject: CN=0119A95C01D7F4B1D300BA9C112D2411F4854983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:85:05:0a:63:7c:cb:1c:1d:ac:0d:27:fd:
                    ef:4d:80:ea:b1:68:27:72:66:14:65:f6:52:7f:f5:
                    19:e0:7b:f2:d6:ab:62:ce:49:91:71:0c:6b:e8:90:
                    4e:45:d0:37:3e:8b:b4:f9:54:4f:f7:8b:a1:e0:a2:
                    64:fe:b8:80:3a:7d:69:2f:b3:70:6e:f4:b0:af:a1:
                    3a:d8:64:3c:a3:21:51:05:18:20:b2:ec:46:dc:76:
                    c3:56:d9:4e:fc:88:e4:d9:b3:b3:b7:aa:f3:7d:19:
                    ce:8e:fd:b9:bd:86:76:b2:32:f6:3a:ec:2a:8c:1a:
                    a7:4b:52:3e:98:68:fc:98:58:80:e0:87:95:06:f8:
                    04:83:a9:2d:3c:8e:22:7f:50:f0:90:67:a6:64:89:
                    16:42:7b:bc:d8:20:ec:49:2c:30:ca:13:75:f2:83:
                    fd:48:87:d0:ae:2f:97:ef:25:62:13:7a:fa:bb:3b:
                    4d:8c:37:20:89:33:f7:70:66:a7:c5:6d:ea:00:05:
                    71:a9:e9:0e:72:b1:b7:96:b4:c1:6d:34:5c:b5:45:
                    66:e7:9f:37:bf:b6:c3:c1:69:b0:58:28:b1:7d:02:
                    19:0b:3c:c8:d0:81:80:7a:0c:df:93:cc:28:fa:12:
                    ca:e9:a1:e5:e7:ed:a4:e6:07:96:7c:09:15:a0:c6:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:19:A9:5C:01:D7:F4:B1:D3:00:BA:9C:11:2D:24:11:F4:85:49:83
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3138362e3232372e31342e302f32332d3233203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:d8:bf:4e:61:7f:59:a9:b7:9b:39:5f:d2:cf:72:97:59:95:
         2a:cf:49:20:06:69:89:f8:5c:79:7f:64:44:be:64:b9:9a:8b:
         25:32:53:38:b6:38:f6:c0:a8:45:93:b2:a4:e2:1e:8c:19:88:
         4b:53:34:87:bb:b6:e2:ce:61:16:29:59:03:9f:e3:86:e7:d6:
         44:7f:c1:0f:8a:88:5c:13:2e:cd:fb:e1:77:17:a2:00:10:c5:
         15:51:38:e8:e5:d8:b3:96:19:13:cc:7b:5f:c9:4a:d5:af:12:
         c4:3b:46:58:2c:67:ef:ec:40:62:f5:e2:0e:b8:6e:1b:1e:7c:
         a2:78:cc:d9:ab:c6:af:59:f4:e4:fa:24:71:43:ae:a1:86:93:
         11:c8:41:28:7d:c9:86:9e:a7:12:ec:f1:3f:33:d7:03:a4:2b:
         7a:8f:65:a2:cc:92:d2:f1:74:70:2b:3c:23:11:6c:94:dc:26:
         78:4d:f7:a2:5e:e5:49:1d:d1:cf:28:7d:ed:82:51:b7:47:5b:
         3e:ca:04:aa:35:16:ea:8e:31:64:a9:14:73:00:c2:be:c6:4a:
         cd:61:19:e1:ba:6d:da:1f:6f:9f:6d:d2:39:76:b6:91:14:04:
         08:a2:f7:01:8f:bc:c0:70:47:b5:bd:18:b1:c4:13:a4:10:10:
         68:12:40:c1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPI70C+2ImTmEJK0LDIwJ4XzZVY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2
RDhCNTNBNDAeFw0yMzA2MjAxMzQ4MjBaFw0yNDA2MTgxMzUzMjBaMDMxMTAvBgNV
BAMTKDAxMTlBOTVDMDFEN0Y0QjFEMzAwQkE5QzExMkQyNDExRjQ4NTQ5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZoUFCmN8yxwdrA0n/e9NgOqx
aCdyZhRl9lJ/9Rnge/LWq2LOSZFxDGvokE5F0Dc+i7T5VE/3i6HgomT+uIA6fWkv
s3Bu9LCvoTrYZDyjIVEFGCCy7EbcdsNW2U78iOTZs7O3qvN9Gc6O/bm9hnayMvY6
7CqMGqdLUj6YaPyYWIDgh5UG+ASDqS08jiJ/UPCQZ6ZkiRZCe7zYIOxJLDDKE3Xy
g/1Ih9CuL5fvJWITevq7O02MNyCJM/dwZqfFbeoABXGp6Q5ysbeWtMFtNFy1RWbn
nze/tsPBabBYKLF9AhkLPMjQgYB6DN+TzCj6EsrpoeXn7aTmB5Z8CRWgxq8PAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUARmpXAHX9LHTALqcES0kEfSFSYMwHwYDVR0j
BBgwFoAUXOGjgFIiV5inxaJZJpAz/G2LU6QwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzAvNUNFMUEzODA1MjIyNTc5OEE3QzVBMjU5MjY5MDMzRkM2RDhCNTNBNC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC81Q0UxQTM4MDUyMjI1Nzk4QTdD
NUEyNTkyNjkwMzNGQzZEOEI1M0E0LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzAvMzEz
ODM2MmUzMjMyMzcyZTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAG64w4wDQYJKoZIhvcNAQELBQADggEBAB3Yv05hf1mp
t5s5X9LPcpdZlSrPSSAGaYn4XHl/ZES+ZLmaiyUyUzi2OPbAqEWTsqTiHowZiEtT
NIe7tuLOYRYpWQOf44bn1kR/wQ+KiFwTLs374XcXogAQxRVROOjl2LOWGRPMe1/J
StWvEsQ7RlgsZ+/sQGL14g64bhsefKJ4zNmrxq9Z9OT6JHFDrqGGkxHIQSh9yYae
pxLs8T8z1wOkK3qPZaLMktLxdHArPCMRbJTcJnhN96Je5Ukd0c8ofe2CUbdHWz7K
BKo1FuqOMWSpFHMAwr7GSs1hGeG6bdofb59t0jl2tpEUBAii9wGPvMBwR7W9GLHE
E6QQEGgSQME=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org