Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          2xl+6S2zMzAl9096LkRq+0y7GWRMC/FlE3v7qO6UwmI=
Subject key identifier:   7D:31:0F:3D:1F:7B:72:6E:62:78:22:E9:99:AE:EC:23:14:80:12:BC
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       30432376F4164B8592FCA14A0B1848BBB6EB112A
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:54 +0000
ROA not before:           Tue 12 Jul 2022 15:31:54 +0000
ROA not after:            Tue 11 Jul 2023 15:36:54 +0000
asID:                     52545
IP address blocks:        168.121.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:43:23:76:f4:16:4b:85:92:fc:a1:4a:0b:18:48:bb:b6:eb:11:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:54 2022 GMT
            Not After : Jul 11 15:36:54 2023 GMT
        Subject: CN=7D310F3D1F7B726E627822E999AEEC23148012BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:77:b5:a0:4b:5e:c2:88:6a:a6:5a:b5:23:
                    77:25:26:a2:3c:f6:dd:bf:6f:9a:61:ed:ee:27:08:
                    40:7f:05:15:33:1c:2e:ca:95:1d:3a:53:a4:10:66:
                    40:a8:7b:77:fb:c2:bb:e2:59:2e:4c:a7:1b:07:ee:
                    23:57:70:6d:d8:e4:71:19:a7:f7:16:21:41:93:01:
                    40:c0:42:5b:30:ce:3b:20:06:21:85:58:97:e7:20:
                    5a:82:1d:46:75:5d:c4:6b:7a:5a:5d:c2:43:16:01:
                    b0:d8:42:75:bb:ef:94:93:3e:83:c8:ea:cf:d2:3d:
                    51:dc:38:dc:40:7c:76:1f:e4:b5:3a:16:91:d8:9e:
                    f1:85:2d:a3:10:42:ab:b7:a3:67:3b:9c:f4:f6:1b:
                    85:67:96:6e:5f:36:a5:80:ae:04:53:3e:43:11:ec:
                    bf:3e:23:b0:95:3d:03:ec:df:1f:84:8d:3f:1c:3e:
                    50:8d:46:b4:74:16:0a:49:68:3f:51:01:d3:67:a6:
                    a8:27:8d:d3:6d:8b:d6:23:9d:b0:a8:bd:72:c2:5f:
                    77:59:4e:b2:7f:0f:5c:34:11:81:02:53:be:48:f3:
                    c7:9d:54:18:42:15:2e:d2:a7:0a:88:8e:f2:cb:f0:
                    ef:53:22:ec:e6:b0:bd:a2:fe:49:ea:67:09:74:06:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:31:0F:3D:1F:7B:72:6E:62:78:22:E9:99:AE:EC:23:14:80:12:BC
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:47:fb:04:d2:3e:4e:f6:61:0c:62:10:95:ee:24:57:24:
         f3:56:9a:fe:a4:af:a7:89:19:c6:ed:ca:40:ac:58:35:f7:56:
         d5:fa:58:63:08:c3:1c:ff:f2:88:fe:b3:42:c7:9b:3e:db:ab:
         d6:7c:fb:6d:d8:c9:8b:5a:0c:d3:6b:56:fd:ca:91:ad:df:a3:
         e0:3f:f5:97:b5:71:a4:d9:55:1c:4f:b2:0e:0a:b7:47:3f:2b:
         6d:c0:46:10:61:6c:20:a3:38:01:7e:18:7c:d7:0e:13:69:e0:
         b7:50:31:d2:f5:3a:cc:9c:9f:6a:d2:e0:f6:a6:b7:a8:a2:3e:
         d2:21:ce:c3:fc:c1:45:b4:c8:c0:11:4d:ca:72:e3:a3:6f:33:
         93:b6:e6:02:81:9d:2f:9e:3a:3d:6d:1c:b0:18:8a:d9:57:83:
         b6:b9:5a:93:7e:c9:ec:af:cd:08:85:0d:b8:dc:b1:55:0d:99:
         11:5b:41:53:77:67:32:55:f1:9c:50:c7:b0:4d:e6:38:bd:30:
         88:06:b0:3b:94:c2:eb:30:c7:88:a1:cc:e2:52:06:ff:83:fc:
         e9:05:19:7b:e0:94:9a:e1:19:6b:a6:ce:30:c5:23:c5:35:45:
         cb:1b:a5:f5:e8:df:a0:a1:eb:a6:b3:72:33:ac:49:cb:7c:f8:
         d8:44:46:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMEMjdvQWS4WS/KFKCxhIu7brESowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI1ODdDRkIwQ0ZDQzQwNjc5NjI1RUNDNTM4RkVBMTE5
NEM0QzU4NzAeFw0yMjA3MTIxNTMxNTRaFw0yMzA3MTExNTM2NTRaMDMxMTAvBgNV
BAMTKDdEMzEwRjNEMUY3QjcyNkU2Mjc4MjJFOTk5QUVFQzIzMTQ4MDEyQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR33e1oEtewohqplq1I3clJqI8
9t2/b5ph7e4nCEB/BRUzHC7KlR06U6QQZkCoe3f7wrviWS5MpxsH7iNXcG3Y5HEZ
p/cWIUGTAUDAQlswzjsgBiGFWJfnIFqCHUZ1XcRrelpdwkMWAbDYQnW775STPoPI
6s/SPVHcONxAfHYf5LU6FpHYnvGFLaMQQqu3o2c7nPT2G4Vnlm5fNqWArgRTPkMR
7L8+I7CVPQPs3x+EjT8cPlCNRrR0FgpJaD9RAdNnpqgnjdNti9YjnbCovXLCX3dZ
TrJ/D1w0EYECU75I88edVBhCFS7SpwqIjvLL8O9TIuzmsL2i/knqZwl0Bo85AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfTEPPR97cm5ieCLpma7sIxSAErwwHwYDVR0j
BBgwFoAUMlh8+wz8xAZ5Yl7MU4/qEZTExYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMC8zMjU4N0NGQjBDRkNDNDA2Nzk2MjVFQ0M1MzhGRUExMTk0QzRDNTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyNTg3Q0ZCMENGQ0M0MDY3
OTYyNUVDQzUzOEZFQTExOTRDNEM1ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzYzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoeagwDQYJKoZIhvcNAQELBQADggEBACW8R/sE
0j5O9mEMYhCV7iRXJPNWmv6kr6eJGcbtykCsWDX3VtX6WGMIwxz/8oj+s0LHmz7b
q9Z8+23YyYtaDNNrVv3Kka3fo+A/9Ze1caTZVRxPsg4Kt0c/K23ARhBhbCCjOAF+
GHzXDhNp4LdQMdL1Osycn2rS4Pamt6iiPtIhzsP8wUW0yMARTcpy46NvM5O25gKB
nS+eOj1tHLAYitlXg7a5WpN+yeyvzQiFDbjcsVUNmRFbQVN3ZzJV8ZxQx7BN5ji9
MIgGsDuUwuswx4ihzOJSBv+D/OkFGXvglJrhGWumzjDFI8U1RcsbpfXo36Ch66az
cjOsSct8+NhERi4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org