Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3138362e3232372e382e302f32312d3231203d3e20323632373635.roa
File:                     3138362e3232372e382e302f32312d3231203d3e20323632373635.roa (raw, json)
Hash identifier:          FtzB2lxxWepI7UvVSHAx2NusY+Zp2XLNPPr4nRBsl9o=
Subject key identifier:   0F:54:CA:30:E6:9D:94:F6:29:DF:DB:65:93:7A:9D:EF:34:84:2C:02
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       3E2DC2D1D80F66F464FB90017FC2B52B876F9609
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3138362e3232372e382e302f32312d3231203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:32 +0000
ROA not before:           Tue 20 Jun 2023 13:48:32 +0000
ROA not after:            Tue 18 Jun 2024 13:53:32 +0000
asID:                     262765
IP address blocks:        186.227.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2d:c2:d1:d8:0f:66:f4:64:fb:90:01:7f:c2:b5:2b:87:6f:96:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:32 2023 GMT
            Not After : Jun 18 13:53:32 2024 GMT
        Subject: CN=0F54CA30E69D94F629DFDB65937A9DEF34842C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:2f:27:55:1f:64:07:d1:71:6d:0e:c0:1c:
                    c0:12:88:e3:98:6a:e2:9e:d7:a6:0d:1e:d6:5f:5d:
                    ba:47:6b:a1:bf:41:de:be:91:4e:5e:82:97:90:4c:
                    33:5c:1b:76:2f:86:29:c0:eb:de:dc:2f:f6:c1:28:
                    14:27:b2:4b:f7:15:85:5a:85:91:4d:2d:2f:c6:5e:
                    64:c5:39:f0:ec:1d:7f:ea:4a:2a:5a:1d:46:4f:65:
                    25:01:d3:c8:db:ac:0c:a2:e4:a9:2f:ce:21:f1:a9:
                    aa:16:7c:30:e9:f2:bc:09:8d:85:c4:c1:fd:2d:4b:
                    ea:67:ef:95:82:06:26:03:85:88:07:2d:b8:9f:3f:
                    7b:e5:69:1b:fd:c7:de:12:69:6e:2a:66:a7:6e:85:
                    e3:c8:ef:b9:0b:7e:08:77:2f:f8:db:65:d7:3c:f0:
                    9e:16:7c:9e:ce:2b:20:e6:84:47:b0:36:30:e8:d2:
                    89:96:fa:47:dd:77:ca:30:5f:e6:ee:53:94:c8:8c:
                    83:90:36:0f:db:d6:98:a1:2e:2e:27:8a:13:05:06:
                    ff:0a:e7:d7:b0:51:cb:5a:ce:b5:9d:03:d2:c1:59:
                    04:30:e7:58:39:d9:05:78:74:40:80:19:d3:7a:a1:
                    5e:6f:68:9d:38:d9:9d:a0:f3:2b:2b:d3:0a:c6:ea:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:CA:30:E6:9D:94:F6:29:DF:DB:65:93:7A:9D:EF:34:84:2C:02
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/3138362e3232372e382e302f32312d3231203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:41:38:87:41:bb:19:06:aa:27:d4:ba:b3:67:e2:b1:90:91:
         5d:b0:88:93:fe:a3:0e:f3:85:52:c8:fe:f7:63:85:8a:c8:62:
         2d:d1:71:1c:eb:a3:0b:ca:22:2f:7c:06:36:de:c3:81:ce:61:
         1b:a6:c9:7c:39:ea:40:bf:2c:2e:ca:76:d8:c4:3a:a5:3f:5e:
         42:de:2f:4c:bd:60:f0:69:e5:ed:dd:45:19:87:fe:d6:75:fb:
         87:b1:f2:bf:4e:94:78:b8:f2:f7:87:1d:3d:b5:6b:7b:bc:ea:
         94:1c:38:34:c7:50:0b:78:97:81:5a:b7:78:db:e0:77:75:81:
         5b:a0:90:bb:56:13:61:d5:45:dc:55:c1:fa:13:1b:b0:50:8e:
         f8:fa:ae:8a:b3:27:33:13:2d:2e:7d:bd:ba:0c:17:4c:df:eb:
         44:22:0d:09:6d:f3:67:93:45:d9:d0:a0:1b:58:b3:c5:1e:5e:
         33:3f:ad:de:3e:ee:ae:e1:b6:43:64:3d:61:93:fc:00:85:b3:
         37:5c:eb:2f:1e:f6:51:b1:7e:06:0f:c3:e0:af:ad:f5:f0:22:
         30:5c:d8:57:bd:d0:34:4c:e7:43:fb:75:15:65:c1:81:45:9f:
         8b:67:ed:90:c6:79:2a:e3:6c:19:da:b2:42:93:aa:4e:bc:07:
         df:a6:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org