Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32322d3232203d3e203532353435.roa
File:                     3133312e37322e34382e302f32322d3232203d3e203532353435.roa (raw, json)
Hash identifier:          eIFIr6JQzWrNPKJmDD3UaLfJMHAiD45a2KzrPopBvO0=
Subject key identifier:   21:F2:03:1F:D0:9B:44:B3:1A:9A:D4:64:C9:A0:B4:93:C9:E6:04:45
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       5209DD5676B2544FF6B1178EF8C561ECE0314498
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32322d3232203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:54 +0000
ROA not before:           Tue 12 Jul 2022 15:31:54 +0000
ROA not after:            Tue 11 Jul 2023 15:36:54 +0000
asID:                     52545
IP address blocks:        131.72.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:09:dd:56:76:b2:54:4f:f6:b1:17:8e:f8:c5:61:ec:e0:31:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:54 2022 GMT
            Not After : Jul 11 15:36:54 2023 GMT
        Subject: CN=21F2031FD09B44B31A9AD464C9A0B493C9E60445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:fe:08:f6:df:ef:58:5b:c1:58:2c:f6:ef:
                    47:31:74:9c:11:41:19:d2:25:1e:7e:ab:e4:3e:a2:
                    e1:00:ba:70:28:b7:4f:a6:9e:28:7b:36:01:fa:2a:
                    ba:14:f8:d6:3d:2a:5c:23:9d:78:7c:c2:8f:65:62:
                    f5:71:ec:0e:f9:1a:f5:65:a8:ec:31:28:bc:f2:6d:
                    c7:45:40:d0:8d:17:f1:31:db:d8:de:5d:4d:70:51:
                    f1:81:90:f2:97:03:65:06:40:34:61:f7:56:b1:5f:
                    21:d2:8a:16:72:7c:4a:8d:44:1b:13:08:9b:d7:e1:
                    c7:a3:39:29:2d:87:57:b5:cb:23:e8:94:24:21:6c:
                    ba:8e:fe:bc:9d:71:f5:d6:21:6d:4d:34:f7:b4:c6:
                    02:c0:21:8a:3a:13:d4:48:6a:2c:52:9e:19:ec:65:
                    48:22:54:4c:8d:c7:8e:bc:e9:ea:93:cf:16:eb:b6:
                    85:ff:ab:c2:c6:f1:3f:0b:13:e4:56:9d:4d:f4:bc:
                    2c:ed:f9:0e:c0:b2:de:e4:94:6b:e6:47:97:72:c5:
                    09:7d:aa:77:11:37:6a:45:48:59:66:28:bf:ba:e2:
                    06:dd:14:54:93:91:18:21:88:22:39:e1:31:8c:bc:
                    c9:6c:59:37:31:be:00:cc:6e:c3:bc:a9:db:ab:27:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F2:03:1F:D0:9B:44:B3:1A:9A:D4:64:C9:A0:B4:93:C9:E6:04:45
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32322d3232203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:67:1b:3d:9b:24:77:fb:57:0f:4a:a2:26:5f:f8:c8:a6:56:
         46:6b:4e:d0:2d:65:ac:5c:c3:21:21:9b:87:8c:b0:89:fb:b7:
         eb:ab:8c:3e:3c:01:13:d3:28:1b:9f:fb:de:67:49:cf:c7:6e:
         14:e2:65:41:6c:d3:1a:3f:04:68:1e:43:20:05:1f:b8:77:6d:
         e2:2b:5b:0a:45:0d:10:45:94:9a:76:ac:de:2d:84:b8:10:c9:
         76:68:9d:a1:4a:29:f2:e1:e6:e9:c9:49:d2:ac:08:fb:d4:bd:
         a5:47:83:c2:33:6c:01:e4:d3:11:52:54:7a:8d:35:9a:07:20:
         79:f1:30:04:70:9f:9e:5b:5a:4a:5a:06:18:8d:9d:13:3b:41:
         7b:52:e2:d9:b2:cd:31:1f:16:d6:d2:21:ef:85:55:28:88:8a:
         41:b6:bb:92:ca:3a:44:e2:ac:2c:77:bf:72:40:32:fc:10:9e:
         5e:5a:5b:04:2b:81:71:a0:8e:3d:a5:75:ba:88:3b:d8:ee:2e:
         6c:48:87:f8:da:83:5c:4d:4e:43:47:ad:55:05:49:15:ad:db:
         e9:9f:1f:30:93:40:87:26:90:fe:92:6c:62:39:6a:fd:2f:65:
         1e:c0:47:c4:ac:aa:1c:07:05:3b:f4:d4:53:51:5c:41:20:c1:
         35:05:eb:35
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUgndVnayVE/2sReO+MVh7OAxRJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1ODdDRkIwQ0ZDQzQwNjc5NjI1RUNDNTM4RkVBMTE5
NEM0QzU4NzAeFw0yMjA3MTIxNTMxNTRaFw0yMzA3MTExNTM2NTRaMDMxMTAvBgNV
BAMTKDIxRjIwMzFGRDA5QjQ0QjMxQTlBRDQ2NEM5QTBCNDkzQzlFNjA0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWP4I9t/vWFvBWCz270cxdJwR
QRnSJR5+q+Q+ouEAunAot0+mnih7NgH6KroU+NY9KlwjnXh8wo9lYvVx7A75GvVl
qOwxKLzybcdFQNCNF/Ex29jeXU1wUfGBkPKXA2UGQDRh91axXyHSihZyfEqNRBsT
CJvX4cejOSkth1e1yyPolCQhbLqO/rydcfXWIW1NNPe0xgLAIYo6E9RIaixSnhns
ZUgiVEyNx4686eqTzxbrtoX/q8LG8T8LE+RWnU30vCzt+Q7Ast7klGvmR5dyxQl9
qncRN2pFSFlmKL+64gbdFFSTkRghiCI54TGMvMlsWTcxvgDMbsO8qdurJw0VAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUIfIDH9CbRLMamtRkyaC0k8nmBEUwHwYDVR0j
BBgwFoAUMlh8+wz8xAZ5Yl7MU4/qEZTExYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMC8zMjU4N0NGQjBDRkNDNDA2Nzk2MjVFQ0M1MzhGRUExMTk0QzRDNTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyNTg3Q0ZCMENGQ0M0MDY3
OTYyNUVDQzUzOEZFQTExOTRDNEM1ODcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzAv
MzEzMzMxMmUzNzMyMmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjM1
MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoNIMDANBgkqhkiG9w0BAQsFAAOCAQEAY2cbPZskd/tX
D0qiJl/4yKZWRmtO0C1lrFzDISGbh4ywifu366uMPjwBE9MoG5/73mdJz8duFOJl
QWzTGj8EaB5DIAUfuHdt4itbCkUNEEWUmnas3i2EuBDJdmidoUop8uHm6clJ0qwI
+9S9pUeDwjNsAeTTEVJUeo01mgcgefEwBHCfnltaSloGGI2dEztBe1Li2bLNMR8W
1tIh74VVKIiKQba7kso6ROKsLHe/ckAy/BCeXlpbBCuBcaCOPaV1uog72O4ubEiH
+NqDXE1OQ0etVQVJFa3b6Z8fMJNAhyaQ/pJsYjlq/S9lHsBHxKyqHAcFO/TUU1Fc
QSDBNQXrNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org