Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa (raw, json)
Hash identifier:          42gVqyMEtg9YIwRRy/Y1vB3iswQqhuL4OSpB1PqRJ7I=
Subject key identifier:   1C:44:BC:70:CF:CC:DC:2B:66:77:AB:36:AF:36:85:46:30:A8:5B:A2
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       6848715B9FA2F1DBFF1766EBB091A5F44958440B
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        168.121.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:48:71:5b:9f:a2:f1:db:ff:17:66:eb:b0:91:a5:f4:49:58:44:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=1C44BC70CFCCDC2B6677AB36AF36854630A85BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:76:00:8d:63:f2:2a:d1:8e:f7:7b:8d:1b:
                    01:60:6d:64:a5:5e:17:f9:53:9f:86:b1:09:1a:45:
                    f6:41:fd:fc:2a:65:6c:eb:f3:ab:34:78:0a:ad:79:
                    04:82:8b:e8:c6:b2:75:66:b8:66:50:f4:b4:5b:82:
                    4f:17:77:b3:e4:00:48:ec:08:ba:68:6e:bd:3c:9a:
                    6c:99:91:3d:c3:70:4e:a4:6f:f2:98:a9:e5:e4:a1:
                    b4:94:28:ee:be:85:99:a8:b4:0b:c4:44:f8:b9:ae:
                    fb:54:2b:87:04:7d:9a:45:ca:f2:48:f7:d9:7c:4b:
                    a2:a8:dc:6b:af:61:dc:09:a5:12:5f:b2:51:12:eb:
                    95:46:19:d2:af:21:37:6e:d3:c7:48:62:1a:31:44:
                    ce:0f:1a:c3:b0:db:bb:e3:75:88:c1:87:07:7c:a5:
                    9b:ad:76:85:cd:ab:49:13:94:df:a8:f3:78:72:a1:
                    dc:9e:6e:11:f8:ba:6a:73:16:b8:b6:e4:6b:49:e6:
                    07:91:17:90:c7:09:94:de:34:aa:e1:a9:0f:f5:76:
                    04:86:1a:ff:3a:a3:a8:23:f5:01:22:a7:cf:f0:e2:
                    1e:26:17:96:8f:54:7d:d0:bd:41:b1:b0:ff:ad:7a:
                    d4:4b:d1:6e:b5:59:3d:2b:20:2a:9f:eb:3a:06:7b:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:44:BC:70:CF:CC:DC:2B:66:77:AB:36:AF:36:85:46:30:A8:5B:A2
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:a7:2b:1e:f6:e4:39:6f:a8:0d:af:01:1f:06:fc:a4:e0:2c:
         46:9f:ba:97:c6:4c:b6:22:b9:a5:1d:9d:ac:5c:60:b6:64:3c:
         04:f8:34:c4:42:ff:5b:5e:d9:50:6e:df:dc:d8:17:db:28:95:
         3d:d9:eb:8c:68:b1:af:05:a0:e3:15:d4:09:a8:54:88:af:cb:
         b3:39:af:e7:c1:f2:77:a9:a9:d5:f5:2e:dc:1e:34:8e:c0:a1:
         7b:c3:e9:86:8c:01:ee:b3:d9:d5:d5:cc:ec:9f:f4:e2:24:86:
         3b:e0:db:a2:f1:c8:4c:64:0e:e0:45:58:22:97:05:f7:24:be:
         ea:3c:0f:39:d6:d1:d4:7a:2d:a2:77:33:f7:99:8c:c8:f8:2a:
         b8:41:ec:8b:af:71:be:8c:1f:16:9f:68:38:b6:ef:94:a6:9e:
         41:4c:d0:d2:bf:5d:3d:2d:f8:dc:70:13:94:82:f5:04:1b:ee:
         f2:13:a0:e7:37:3a:a6:8f:6c:02:32:a4:14:5c:6f:59:23:8d:
         df:33:59:c9:db:72:6a:9d:fc:df:77:35:77:89:fc:0b:09:1b:
         22:8d:6d:71:97:67:93:94:da:2b:ba:73:ea:d7:65:3c:cd:bb:
         5c:ee:38:e8:a9:d4:a1:c9:73:8d:31:89:8e:7f:b6:bc:91:3d:
         0c:9b:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org