Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          L6wwoi2T2Xa+0NWNSxBBnRHdjA9q4CHJogpBuEN2agI=
Subject key identifier:   11:16:ED:70:47:90:76:1A:09:9E:11:40:AB:5F:46:85:C4:88:9C:1C
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       328612000D6398FEB3213985B3569690022E8173
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 20:08:47 +0000
ROA not before:           Tue 12 Jul 2022 20:03:47 +0000
ROA not after:            Tue 11 Jul 2023 20:08:47 +0000
asID:                     52545
IP address blocks:        168.121.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:86:12:00:0d:63:98:fe:b3:21:39:85:b3:56:96:90:02:2e:81:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 20:03:47 2022 GMT
            Not After : Jul 11 20:08:47 2023 GMT
        Subject: CN=1116ED704790761A099E1140AB5F4685C4889C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:f8:23:62:d5:75:e1:43:fe:54:af:33:b5:
                    af:c3:0e:42:4b:4c:40:32:7e:96:80:67:42:14:f8:
                    b9:8e:0a:72:5c:45:a1:c0:d1:d5:3f:53:57:c5:c3:
                    8a:85:6d:08:db:b4:5f:72:49:fe:d2:59:11:f0:c4:
                    b0:d5:29:e3:f2:52:78:af:74:6e:b9:02:2d:b0:5c:
                    1d:f6:72:0a:f4:ac:e9:be:64:18:06:67:b5:cd:e7:
                    fe:23:0f:9d:60:5d:41:15:8a:4e:1d:78:8b:fb:47:
                    34:39:2c:00:4a:cb:ef:11:fb:7b:c8:bc:b3:5b:14:
                    87:0d:07:69:b3:5b:a1:10:7a:d0:7b:c4:12:00:00:
                    1d:9b:6b:96:22:20:6f:ad:bc:bf:20:e4:d8:f8:68:
                    6b:9d:1f:78:a9:43:9d:98:a5:42:ba:93:36:15:63:
                    e1:9c:69:dd:14:2a:15:26:b7:74:21:f1:d5:78:b1:
                    89:6a:9b:59:ee:66:2a:f9:5f:ec:a3:69:12:ea:1e:
                    79:59:f4:07:2b:e1:39:a9:e0:14:36:04:08:32:0b:
                    d3:18:82:8a:34:db:44:e7:2d:45:28:ca:53:cd:46:
                    56:c6:9f:09:09:a7:2b:b4:d5:08:64:01:3d:5c:3b:
                    ad:19:39:1f:6d:74:3b:da:96:ac:ab:57:74:07:6a:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:16:ED:70:47:90:76:1A:09:9E:11:40:AB:5F:46:85:C4:88:9C:1C
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:62:ed:5e:83:ae:fa:35:9b:87:05:2a:17:a7:c8:06:bc:
         8d:7e:55:a3:0b:b5:5d:db:5f:cb:8e:d8:57:f1:e0:b0:4d:be:
         f7:26:f0:b3:20:22:11:81:91:99:e6:a9:08:1f:7b:fb:4d:84:
         3d:3a:6e:0e:08:4f:b3:45:27:d8:11:06:d9:7f:c9:2c:ac:9f:
         1e:ab:8a:50:ab:eb:43:86:e6:82:56:46:fc:8f:39:3f:68:46:
         35:f5:2d:89:6b:32:8e:51:52:55:70:e1:4b:b7:02:e6:fc:9c:
         4f:a6:02:47:ad:3f:f4:96:2a:5a:72:e3:b8:ef:b6:d2:99:7a:
         a2:a4:28:5c:1a:e9:67:5a:1a:ad:d0:08:b9:8a:bb:94:a6:6f:
         f1:fe:f5:f1:6d:4f:15:26:af:aa:ee:f6:49:60:21:6c:f0:70:
         aa:70:4e:40:fc:ae:72:8b:5b:56:6d:4d:5c:24:8c:30:c1:09:
         ca:63:b9:6a:69:42:14:79:b7:53:1f:c3:f6:f6:10:af:1c:34:
         61:18:0a:e7:24:2d:aa:86:43:8a:32:87:12:09:58:67:74:e9:
         a0:f9:b8:c1:88:b0:66:93:c7:41:61:c2:b4:1d:e7:5a:de:4b:
         c6:4b:0b:9a:86:8f:c0:4a:76:30:3b:da:24:45:25:ba:97:98:
         34:fa:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org