Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32332d3233203d3e203532353435.roa
File:                     3133312e37322e34382e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          nWshrJO5vDt4YNGPCExHLFgOAGsbYCe00DQbv2Jf7VM=
Subject key identifier:   F3:54:F7:26:F4:D1:EC:BA:16:DB:C4:07:52:FF:9B:07:8D:41:90:EF
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       6437F1573BF707240A071A63E98B4C04C498DDA3
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32332d3233203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        131.72.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:37:f1:57:3b:f7:07:24:0a:07:1a:63:e9:8b:4c:04:c4:98:dd:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=F354F726F4D1ECBA16DBC40752FF9B078D4190EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3a:31:79:cb:67:1d:00:6a:dc:3b:7f:52:2b:
                    b4:e7:fc:2b:8d:a1:b4:b7:6e:f2:88:c8:9d:d8:cb:
                    48:ae:33:60:89:60:a4:39:71:53:f5:bc:2d:fc:e2:
                    68:e0:9e:f8:e3:52:c2:83:69:0e:a1:fe:05:b9:3c:
                    d1:f5:9c:87:a5:27:63:3e:5d:98:0c:de:8f:eb:ae:
                    5a:32:6f:d1:a1:d4:3a:f9:3a:1e:1c:a5:31:3b:8f:
                    08:ae:33:cf:57:e3:aa:91:7d:84:68:14:58:1e:65:
                    e5:07:a8:9f:1d:57:05:b4:32:8b:62:6a:97:e4:ae:
                    07:57:7b:d7:d9:a8:88:f2:bd:a9:40:f2:22:da:32:
                    68:3a:7e:dd:b2:c4:18:3a:6a:2c:b4:5c:b7:2c:f5:
                    d6:5b:2f:78:b0:1d:2a:fe:a9:19:99:8d:dd:09:9c:
                    7b:2a:72:dd:c2:5b:7a:d3:52:69:88:f5:d8:e4:34:
                    81:d8:11:b0:ad:16:cf:4b:75:d9:bd:c7:d4:45:61:
                    4b:ba:d7:09:c2:6a:fa:20:5d:e1:58:11:1f:e4:a5:
                    0e:59:30:14:02:2b:20:0a:09:99:dc:1d:69:91:e9:
                    9d:41:e1:6c:c6:59:a3:a4:bc:30:49:21:a8:82:a0:
                    2d:79:93:a5:ad:70:7f:dd:1e:dd:01:00:c4:0d:a3:
                    af:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:54:F7:26:F4:D1:EC:BA:16:DB:C4:07:52:FF:9B:07:8D:41:90:EF
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e34382e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:b3:74:5a:d0:d2:ec:0a:52:1f:c1:ef:9e:b5:b9:67:d8:
         35:b0:d8:ef:0e:f9:67:b0:c4:e7:14:9e:e2:0a:1f:5f:e2:5f:
         51:cc:1a:57:34:99:6c:2a:ad:6e:30:29:33:97:a4:e0:11:76:
         60:a5:4b:a9:4e:fa:ee:39:7f:de:fe:a6:50:83:35:f2:2c:32:
         e0:fe:75:b4:9c:69:7d:c3:09:59:ea:2e:0a:4a:a6:de:6f:d0:
         12:07:bb:9f:02:94:a8:31:03:ef:f1:06:9c:d9:4e:00:af:1f:
         69:4e:4a:10:45:33:6d:eb:04:45:3f:24:1a:bd:b5:fb:ca:63:
         72:1b:1e:91:f6:97:3d:7a:db:e6:63:b1:19:e7:04:d4:b4:53:
         72:d3:48:90:f6:0f:d4:41:31:82:26:2b:53:c2:8b:5c:89:64:
         68:d0:79:0b:6e:c5:71:c5:c9:81:e7:de:6c:df:cd:c1:d7:9d:
         67:ba:2a:42:fd:c9:c7:78:bb:d3:44:00:ce:55:31:1f:b1:a7:
         7d:17:14:e2:7a:8c:71:01:53:55:52:66:95:62:30:e7:d3:b6:
         73:6b:c8:79:fc:a0:1f:5b:09:94:f9:5a:52:6e:ba:f3:fa:f3:
         b2:2b:6e:f0:79:c9:ae:ec:67:4b:47:e7:bb:4c:f8:a6:4f:7a:
         ad:09:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org