Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3232203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3232203d3e203532353435.roa (raw, json)
Hash identifier:          h6EPrCx4pJE6WPKxIpoiycixJtYz4XHP6zqNZpAd9BM=
Subject key identifier:   F4:A9:0E:A6:E0:5B:E8:94:4F:B0:60:9D:75:2C:46:A2:40:30:35:86
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       71B95AA71F8E06E61A6EF7D06A0BD615E4AC9DB4
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3232203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b9:5a:a7:1f:8e:06:e6:1a:6e:f7:d0:6a:0b:d6:15:e4:ac:9d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=F4A90EA6E05BE8944FB0609D752C46A240303586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:f2:37:5a:57:dd:55:75:73:66:b4:f7:da:
                    cf:b6:8f:4c:c3:f5:36:7e:7f:1f:e8:bb:f8:2e:d5:
                    80:03:73:5b:26:ae:52:87:9e:c9:2b:01:a3:a0:2f:
                    a3:27:a7:6a:df:6e:a9:c7:bb:5b:5a:87:4d:b1:af:
                    cf:79:a6:6d:2f:67:7a:2e:44:26:98:a9:0c:1f:ea:
                    c7:72:3a:0f:1d:d4:08:f1:02:06:87:46:81:62:f3:
                    4c:6e:64:18:bf:35:7b:1d:79:fd:49:9f:64:b0:87:
                    46:e5:57:a9:33:4b:26:12:f4:a0:ab:91:0d:00:71:
                    ff:27:d9:88:f0:a6:4f:d9:d5:17:7d:d4:fb:e7:1c:
                    55:0f:f0:85:d7:7c:a4:60:b7:17:ed:64:52:98:8d:
                    cd:44:2d:3a:8d:10:23:f7:0c:a2:c5:b6:ee:6a:61:
                    2b:c3:42:9a:9b:93:39:8e:e2:25:ee:d9:10:06:8a:
                    5e:dd:95:83:14:cb:8c:36:4f:47:c7:89:a6:66:88:
                    e1:03:95:c1:2b:21:6c:9f:2c:2e:2e:d7:6c:50:1c:
                    b3:dc:69:8b:f2:d0:8e:52:f9:7b:4b:32:f2:d0:ec:
                    21:9a:fc:cc:cd:a8:4a:89:c6:6f:39:eb:c2:b8:72:
                    c9:0b:7a:07:88:fe:95:66:b2:32:a8:b5:7d:63:52:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:0E:A6:E0:5B:E8:94:4F:B0:60:9D:75:2C:46:A2:40:30:35:86
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3232203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:ad:93:ba:59:43:9d:17:73:96:45:62:54:84:36:b5:d9:
         79:ac:c3:ed:6a:fc:96:01:99:37:ac:1d:cd:07:55:c2:3d:10:
         a6:85:fe:fe:72:c0:f4:65:d6:97:7d:a4:76:7a:f3:06:1e:b7:
         9b:9a:04:56:f9:73:52:17:4e:a2:22:cc:24:e4:39:d4:80:80:
         0b:df:00:5f:e5:67:95:82:59:02:b2:0a:ac:4a:29:a9:e3:df:
         a5:fd:34:44:25:83:c9:3f:22:c6:88:9d:30:94:48:6a:37:5f:
         03:8c:19:5c:7f:6c:fd:2a:46:e4:1a:fe:15:14:78:e5:57:95:
         f1:7c:aa:f7:ac:a0:57:87:c8:6b:9a:54:0c:00:bb:95:63:1e:
         ec:a4:11:c4:97:c4:56:8f:1e:25:33:ee:36:11:85:75:a8:ab:
         16:3b:b7:fc:46:f3:bd:57:b3:25:9f:fb:4c:bd:ee:26:cb:97:
         b3:fd:dc:f5:96:c0:9b:38:13:9d:44:49:d5:5e:67:dc:55:49:
         d6:54:c9:a4:b4:64:25:72:70:81:88:57:af:a6:fe:3a:0d:4e:
         7a:0a:db:62:51:4e:e6:ad:0e:00:f3:5e:45:aa:9c:4f:a3:48:
         54:0c:1f:e9:bc:ab:a0:e7:0e:3d:11:9f:be:88:00:5a:78:ff:
         af:3a:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org