Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
File:                     3133312e37322e34382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          U61jCz0UyupPLWawgTFmkvrGo0ByAq8BMoR3TlSMZSw=
Subject key identifier:   A0:B0:83:DC:DB:CB:C3:01:8C:90:BE:0E:03:50:00:BE:41:AB:26:89
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       5C69EC52874FC6D335F5EF1EAB3E94FAA9F9D0B5
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 20:07:44 +0000
ROA not before:           Tue 12 Jul 2022 20:02:44 +0000
ROA not after:            Tue 11 Jul 2023 20:07:44 +0000
asID:                     52545
IP address blocks:        131.72.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:69:ec:52:87:4f:c6:d3:35:f5:ef:1e:ab:3e:94:fa:a9:f9:d0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 20:02:44 2022 GMT
            Not After : Jul 11 20:07:44 2023 GMT
        Subject: CN=A0B083DCDBCBC3018C90BE0E035000BE41AB2689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:15:39:a1:2d:e0:57:84:9b:35:b6:2b:88:3a:
                    77:44:03:ae:ca:e3:b4:0f:dc:4c:65:4d:c6:44:52:
                    f0:6e:bb:9d:22:2e:3a:7d:3b:e3:77:e6:db:84:65:
                    6c:f7:80:f5:41:2b:37:74:25:ad:ff:9d:df:03:20:
                    fb:24:eb:7e:ee:c6:ff:97:34:04:cc:50:a5:8e:f6:
                    84:01:ee:a8:67:b6:ca:ea:e8:0d:eb:da:5a:6a:db:
                    9f:a6:90:45:12:ec:7d:74:8a:95:b4:0b:07:18:cb:
                    e6:76:94:34:a7:eb:7e:86:5b:43:f6:06:5f:3e:19:
                    2e:48:d4:61:62:c9:84:bf:69:ed:94:d7:a1:a6:33:
                    b8:63:bf:a6:fc:a4:25:df:d7:95:54:0e:d6:5a:02:
                    29:0b:32:44:81:77:36:01:52:d3:58:02:b0:73:93:
                    1e:88:09:ec:61:d8:0a:34:cd:fc:09:be:a9:be:d7:
                    1f:69:f3:7c:0c:b8:03:45:54:0d:28:27:1a:4f:b3:
                    b0:46:d3:30:d3:6f:f1:95:f0:a4:0a:43:26:56:e8:
                    38:46:7e:ad:3b:8f:d2:86:b4:83:e2:30:22:09:48:
                    2d:15:40:1f:7f:68:b8:ca:33:31:26:24:25:ac:14:
                    30:16:83:00:4f:0e:4b:31:81:90:f5:11:a3:3b:08:
                    61:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B0:83:DC:DB:CB:C3:01:8C:90:BE:0E:03:50:00:BE:41:AB:26:89
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:ba:c2:32:9d:e2:41:82:8c:ca:23:76:04:45:cb:01:3d:
         97:d5:b5:6c:08:83:e2:60:c7:2c:54:2d:03:d1:21:fa:1d:d0:
         cc:2c:43:08:3c:97:19:b2:68:01:14:a9:12:db:67:3a:bd:19:
         d0:c1:ff:ec:59:95:e1:28:c9:14:1f:e5:ff:cd:09:76:c0:1b:
         6c:ab:c4:33:54:de:ef:81:0f:46:6c:43:bf:b3:f8:8d:39:42:
         3e:60:a7:6f:5d:75:7a:3f:bc:bc:1f:1f:8c:99:a7:97:ef:05:
         52:1c:97:18:d5:78:46:10:30:5a:e2:ec:24:b6:64:bf:43:9b:
         e1:29:86:91:66:6b:3d:46:27:f6:41:6e:49:b7:b6:27:59:e7:
         82:01:db:47:ad:6c:9f:04:9f:e6:00:22:61:0d:c1:dd:11:72:
         11:83:1f:f4:32:4d:ff:73:49:6c:3e:be:33:92:a9:61:02:6d:
         54:2c:e6:ef:c3:82:6e:da:56:46:02:e0:26:fe:7c:e0:90:65:
         3b:e7:a1:c9:bf:b5:1d:d9:e7:91:61:b7:1d:db:ea:b0:90:ca:
         6e:11:56:fd:45:54:97:ab:82:ac:9a:2e:71:d1:31:b8:4f:a5:
         32:aa:20:d7:8c:85:fc:29:99:6c:02:d1:9d:be:e6:84:7d:bf:
         63:ad:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org