Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          LU3sblgz+NASJkxyovd+HUGme+U55zlSVPKbO0o6vho=
Subject key identifier:   DF:0F:AF:0B:E5:68:C8:64:E8:19:D6:10:EA:4F:59:03:3A:90:72:B7
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       0C3E9068245E026B6E42DDF7AB1155D0F0DF405D
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 20:09:04 +0000
ROA not before:           Tue 12 Jul 2022 20:04:04 +0000
ROA not after:            Tue 11 Jul 2023 20:09:04 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3e:90:68:24:5e:02:6b:6e:42:dd:f7:ab:11:55:d0:f0:df:40:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 20:04:04 2022 GMT
            Not After : Jul 11 20:09:04 2023 GMT
        Subject: CN=DF0FAF0BE568C864E819D610EA4F59033A9072B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:75:3a:10:0d:bd:62:d7:55:a8:2e:e0:55:
                    9b:e2:cf:94:88:be:d7:26:ef:22:5d:2c:2e:44:bd:
                    44:7d:b4:69:2c:e9:21:e6:41:7d:76:5a:6b:e5:77:
                    27:6d:f1:66:70:5f:86:d3:b9:b8:b6:f1:9e:2c:2c:
                    09:8b:b8:06:2d:93:c6:fd:0c:7d:3a:c9:60:e0:a6:
                    67:8c:41:16:03:cc:59:3a:6b:f4:da:47:67:84:1b:
                    01:0a:69:bf:d5:14:c4:8d:eb:ef:e1:f7:a8:2c:af:
                    f5:d1:b8:dd:4b:d4:39:b7:ba:6d:95:c9:09:02:df:
                    04:4c:15:97:6a:fc:0c:cf:af:ae:a0:89:fd:e4:c1:
                    97:3a:7f:23:9f:2b:0b:7d:7a:1c:48:f0:9d:86:cd:
                    40:20:5a:fa:00:95:8d:d0:ed:86:2e:36:9b:ea:38:
                    ea:eb:4d:fd:18:ad:23:45:61:9d:c4:a3:1b:9d:e3:
                    60:8e:bb:bc:ba:2c:63:66:27:7d:39:3a:a3:3b:8a:
                    0d:57:37:dc:ab:20:e5:41:2f:60:67:e4:bc:4c:ef:
                    da:ee:57:6e:f3:ef:15:bc:37:da:e1:06:af:17:46:
                    15:57:cc:9b:77:9e:e7:50:33:75:74:aa:90:f7:db:
                    6a:df:b1:57:5b:2c:98:9c:f2:04:07:63:cf:0b:74:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0F:AF:0B:E5:68:C8:64:E8:19:D6:10:EA:4F:59:03:3A:90:72:B7
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f3:76:fb:d3:8c:b0:6e:fa:46:da:f7:c2:c0:b8:24:8f:b1:
         03:df:a3:46:96:a3:28:f4:5c:7b:79:86:26:01:91:8c:72:09:
         96:f5:9d:9e:56:e1:e1:d1:71:d5:f3:83:96:80:70:b1:c5:84:
         40:0e:8c:2e:41:a0:58:88:71:3f:1e:31:83:70:91:0b:4f:17:
         6e:b8:39:0d:8a:2d:6e:ed:46:74:7a:38:ef:ed:fa:b3:62:c6:
         6b:04:25:98:da:0f:b5:90:be:9d:a4:9e:e6:a9:02:5b:e0:2f:
         7c:d8:2a:0e:1f:80:3a:16:76:b0:f2:c6:9d:8e:a3:b0:f6:4b:
         51:ad:df:07:c9:41:2e:46:58:13:56:5b:8b:99:93:50:21:8e:
         3c:00:7e:11:13:33:2b:91:32:3b:88:7d:9a:31:4d:11:ee:46:
         2e:be:2e:99:3a:59:ba:3a:8c:31:fa:31:2d:91:70:13:c2:0f:
         38:9c:56:47:f1:9e:79:c9:68:98:08:64:33:bc:74:0f:ef:87:
         94:46:80:b4:4a:94:54:6b:5c:0e:ef:67:90:ce:fb:e4:bf:79:
         10:37:ab:3a:81:05:ed:f8:59:80:ae:d8:bd:f0:74:58:a7:1c:
         fb:ee:5b:9e:21:44:86:32:cc:2c:e3:60:dc:b1:9e:70:2e:a4:
         9b:7f:63:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org