Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e35302e302f32332d3233203d3e203532353435.roa
File:                     3133312e37322e35302e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          OOaGD2XORPORsEBHPe4QjZq8g6FhRk6J3tWl7UhmXrc=
Subject key identifier:   F0:42:3E:12:12:4D:36:DB:63:8E:7C:2A:F5:B4:C3:FA:2F:2B:2F:75
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       6DCBBDF1933430F654AF88A67661AFD814399FD3
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e35302e302f32332d3233203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        131.72.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:bd:f1:93:34:30:f6:54:af:88:a6:76:61:af:d8:14:39:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=F0423E12124D36DB638E7C2AF5B4C3FA2F2B2F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:25:e6:33:e1:b2:d9:71:21:48:3a:c9:70:
                    27:81:d5:48:8d:29:3b:f6:90:08:5f:54:cf:b4:f4:
                    39:e0:cf:3b:2d:ff:21:89:26:05:7e:ba:83:70:30:
                    75:ce:4f:69:89:4d:bf:7d:66:b6:16:bd:52:d1:94:
                    b8:ab:e0:07:ad:c8:5a:52:d7:64:97:81:25:0f:63:
                    c7:7f:16:07:63:41:49:55:46:f3:7c:64:fe:5b:b5:
                    b2:16:d3:4d:ad:52:d5:63:70:64:e7:c6:4b:12:6e:
                    18:a7:ce:16:34:5b:d2:23:13:03:5f:21:cc:40:0a:
                    46:29:7b:3f:bf:6b:d3:52:ba:58:cc:d7:d2:69:c8:
                    b9:be:49:66:88:25:9c:42:83:34:d0:e7:2f:45:49:
                    7c:b3:7e:d9:86:34:b5:3d:aa:be:d1:bc:ef:b4:ae:
                    b3:db:55:b1:42:a4:4a:b8:87:3f:58:95:00:46:82:
                    f0:ca:ea:d8:a9:07:9b:92:82:4f:38:c1:df:09:10:
                    a3:8b:2a:e1:9e:0d:a5:c6:9f:f5:7f:59:f5:a7:bf:
                    87:65:87:87:10:c0:61:b3:e2:ec:eb:bd:1f:98:11:
                    77:e5:b4:eb:79:d0:9d:ec:86:4e:66:e5:39:ad:b8:
                    da:9d:23:57:38:c5:d6:fc:84:2e:52:ad:73:de:55:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:3E:12:12:4D:36:DB:63:8E:7C:2A:F5:B4:C3:FA:2F:2B:2F:75
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3133312e37322e35302e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:87:f0:e6:84:10:a8:02:1e:bf:7b:2c:e0:53:cd:c8:6c:
         8c:0d:95:35:fa:fb:87:50:5d:10:c8:fd:b8:4a:c8:3e:02:c2:
         c5:28:c8:ff:df:35:28:17:7b:17:d8:16:df:c7:4a:48:ab:5a:
         c7:ec:d8:be:5d:5f:2d:56:10:4b:f9:ed:66:b2:59:2c:00:4c:
         0c:13:76:af:d6:f2:53:76:8d:bc:43:a5:98:99:f5:19:9e:1b:
         4e:f6:9d:3f:75:7c:56:82:fc:97:75:e4:22:c1:3f:df:d4:fb:
         d8:a1:91:f7:42:ac:d6:86:f2:54:f1:6f:3f:d2:cb:16:10:81:
         f3:78:e2:0b:67:fe:7b:3a:9c:ca:18:8b:90:90:50:82:e7:68:
         7d:56:d5:bd:3d:be:e2:65:e3:13:47:ec:04:0f:b5:5d:ff:3d:
         08:15:6c:9b:3f:6d:fb:57:c9:b9:d7:43:fa:c3:13:51:42:32:
         5f:1c:15:5e:c8:1c:2d:c9:2d:02:a7:74:3d:d6:33:b1:3e:99:
         86:65:b9:b8:19:13:cb:be:e6:6d:b4:8a:19:69:74:7c:7e:2f:
         2b:19:0d:41:24:c9:ef:ac:1d:96:67:f2:c2:63:64:22:30:74:
         4d:0b:e6:dc:b5:3c:e9:3b:db:e5:55:b4:b0:de:d7:9d:a7:4f:
         4d:53:5a:4c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbcu98ZM0MPZUr4imdmGv2BQ5n9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1ODdDRkIwQ0ZDQzQwNjc5NjI1RUNDNTM4RkVBMTE5
NEM0QzU4NzAeFw0yMjA3MTIxNTMxNTVaFw0yMzA3MTExNTM2NTVaMDMxMTAvBgNV
BAMTKEYwNDIzRTEyMTI0RDM2REI2MzhFN0MyQUY1QjRDM0ZBMkYyQjJGNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6yXmM+Gy2XEhSDrJcCeB1UiN
KTv2kAhfVM+09Dngzzst/yGJJgV+uoNwMHXOT2mJTb99ZrYWvVLRlLir4AetyFpS
12SXgSUPY8d/FgdjQUlVRvN8ZP5btbIW002tUtVjcGTnxksSbhinzhY0W9IjEwNf
IcxACkYpez+/a9NSuljM19JpyLm+SWaIJZxCgzTQ5y9FSXyzftmGNLU9qr7RvO+0
rrPbVbFCpEq4hz9YlQBGgvDK6tipB5uSgk84wd8JEKOLKuGeDaXGn/V/WfWnv4dl
h4cQwGGz4uzrvR+YEXfltOt50J3shk5m5TmtuNqdI1c4xdb8hC5SrXPeVQrDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8EI+EhJNNttjjnwq9bTD+i8rL3UwHwYDVR0j
BBgwFoAUMlh8+wz8xAZ5Yl7MU4/qEZTExYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMC8zMjU4N0NGQjBDRkNDNDA2Nzk2MjVFQ0M1MzhGRUExMTk0QzRDNTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyNTg3Q0ZCMENGQ0M0MDY3
OTYyNUVDQzUzOEZFQTExOTRDNEM1ODcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzAv
MzEzMzMxMmUzNzMyMmUzNTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjM1
MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYNIMjANBgkqhkiG9w0BAQsFAAOCAQEAZVyH8OaEEKgC
Hr97LOBTzchsjA2VNfr7h1BdEMj9uErIPgLCxSjI/981KBd7F9gW38dKSKtax+zY
vl1fLVYQS/ntZrJZLABMDBN2r9byU3aNvEOlmJn1GZ4bTvadP3V8VoL8l3XkIsE/
39T72KGR90Ks1obyVPFvP9LLFhCB83jiC2f+ezqcyhiLkJBQgudofVbVvT2+4mXj
E0fsBA+1Xf89CBVsmz9t+1fJuddD+sMTUUIyXxwVXsgcLcktAqd0PdYzsT6ZhmW5
uBkTy77mbbSKGWl0fH4vKxkNQSTJ76wdlmfywmNkIjB0TQvm3LU86Tvb5VW0sN7X
nadPTVNaTA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org