Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          AcpZQoclMZ7iKcbQ/xbzKM04A+Qi5w4+0cs0Y/VTpFc=
Subject key identifier:   E9:D5:9C:73:A4:D9:05:D7:72:AC:7E:D8:0A:EC:C6:82:29:C8:DB:1E
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       310202FBC87F0EB84C1BCFB37C7FC70D2ADCE1D5
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        2804:e1c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:02:fb:c8:7f:0e:b8:4c:1b:cf:b3:7c:7f:c7:0d:2a:dc:e1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=E9D59C73A4D905D772AC7ED80AECC68229C8DB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:b3:e8:29:ac:60:36:c8:73:6b:3e:59:57:
                    aa:6c:55:73:c4:04:6e:f8:f4:ee:8b:ad:53:32:25:
                    b0:fe:65:13:ae:f9:dc:bf:87:8d:df:41:14:77:46:
                    bc:17:94:48:2e:47:9e:44:f8:87:19:ef:55:e0:0f:
                    53:a6:78:b8:74:30:29:19:44:11:1a:8f:d5:b4:84:
                    15:3e:7e:e2:bb:c6:c9:47:bd:3a:54:00:c6:ac:84:
                    f1:45:78:e5:c5:7b:c5:d2:72:e0:f9:1b:e1:38:77:
                    4d:a5:bc:eb:72:00:c4:30:b4:ba:9a:63:86:9d:38:
                    1a:c1:73:bc:5f:0f:18:1b:60:34:76:ec:80:b1:b9:
                    55:f9:32:23:96:2e:92:8a:23:dc:e7:b0:84:a7:d2:
                    9f:de:2f:cb:48:55:22:e8:fe:3f:4c:97:2f:81:6e:
                    a3:67:f7:82:bb:5b:cd:c0:1e:67:46:33:c6:b4:58:
                    cf:c0:1d:85:f2:17:4e:ce:c5:3b:c9:6b:cb:e2:aa:
                    53:7a:28:9a:38:c9:92:fc:b7:ba:e0:38:dc:3a:a4:
                    e7:55:6e:8e:8d:d2:b0:19:51:57:a3:5d:6d:d0:23:
                    59:5d:7c:55:77:7a:d4:e7:86:a0:69:11:14:4b:65:
                    cf:f0:77:a4:20:ec:99:e2:dc:c9:36:12:c0:17:d9:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D5:9C:73:A4:D9:05:D7:72:AC:7E:D8:0A:EC:C6:82:29:C8:DB:1E
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:9a:27:a5:86:a0:f0:07:4f:b9:fd:f1:af:83:e9:ce:61:
         d3:4e:75:e9:73:45:15:74:65:33:af:91:d3:8b:68:68:dd:ae:
         5d:88:15:1f:c8:64:49:77:46:3c:7d:db:b0:de:b0:5f:ab:1e:
         16:59:24:71:57:01:4d:78:ce:14:ee:2b:32:63:b2:67:a7:15:
         6f:53:87:e0:ed:4f:47:12:81:d3:0d:db:e2:3b:87:a4:11:84:
         0d:08:ad:51:79:e0:ed:8d:7e:89:51:4d:fd:9b:8f:67:50:b3:
         ec:b8:58:e9:d8:c4:a8:11:28:a3:cd:f6:20:46:84:39:4c:12:
         95:e3:9b:f1:cb:28:11:e8:70:cc:be:b4:70:57:eb:94:ec:a9:
         58:ef:d8:99:f5:dc:2d:cf:f0:27:52:66:17:4e:0d:d7:83:28:
         27:9e:36:a3:4c:c7:64:1b:15:ad:ab:f3:74:09:29:f1:a9:03:
         1b:6e:35:a4:a0:e7:c3:41:0c:8c:c4:14:4b:72:e3:b0:1d:57:
         6c:bb:d9:68:a0:a9:08:29:b5:eb:7b:5d:32:46:86:7f:f2:06:
         32:4c:07:f2:ea:61:ff:eb:e9:27:3e:91:68:15:fb:70:db:38:
         b2:78:4b:94:ff:23:66:6f:ca:3c:fd:01:33:60:25:de:a3:21:
         a8:ff:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org