Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          KE+ntnRpTGNufqEJbmTDfugEqklWzUg/WHOl2z1fUc4=
Subject key identifier:   0F:06:B5:98:B6:6D:4F:0C:1E:1A:B1:BD:9E:3C:C6:6A:5A:39:EC:6F
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       04FF721DE28A00639B2CBF4AAB7F27E9E7BFD728
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:54 +0000
ROA not before:           Tue 12 Jul 2022 15:31:54 +0000
ROA not after:            Tue 11 Jul 2023 15:36:54 +0000
asID:                     52545
IP address blocks:        2804:e1c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ff:72:1d:e2:8a:00:63:9b:2c:bf:4a:ab:7f:27:e9:e7:bf:d7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:54 2022 GMT
            Not After : Jul 11 15:36:54 2023 GMT
        Subject: CN=0F06B598B66D4F0C1E1AB1BD9E3CC66A5A39EC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:56:65:d4:cf:53:b1:b7:1f:4e:2a:ee:e1:
                    af:f2:88:a9:fd:76:be:af:a0:31:68:dc:17:1d:c8:
                    aa:b5:77:7c:58:46:55:ba:6f:49:ed:ab:e1:de:f5:
                    32:f1:be:34:50:37:fe:6a:93:dc:0d:fe:d4:61:a0:
                    6d:07:57:72:b7:95:cf:e6:f9:3a:e6:ee:94:ca:43:
                    79:dc:20:b1:f7:3c:b6:b2:67:f1:7d:f8:d2:3a:35:
                    d0:b6:99:7e:f3:1d:9a:b5:1e:5d:b9:5d:d8:18:ee:
                    aa:92:ae:b9:7f:d5:bb:1f:29:53:fe:3e:5c:af:0f:
                    e8:0c:38:7a:cc:0d:a6:87:f8:a0:05:f5:b1:4d:ec:
                    e9:3e:ea:1b:25:6b:7d:f4:85:fa:5c:d7:b8:4b:ae:
                    f9:96:72:08:3c:28:51:32:55:08:25:72:61:38:d8:
                    c0:91:6d:b8:85:00:c2:ab:97:a1:97:9c:1d:bd:9c:
                    d5:f9:12:29:2e:a7:82:9e:c2:71:fe:d9:7f:ed:a1:
                    a2:9c:c3:0b:dd:0e:fa:4b:cb:4a:b7:29:a6:34:9b:
                    6f:36:9a:84:f0:6e:09:06:84:55:a3:f8:87:8d:a3:
                    17:d8:74:c8:7a:0b:06:b6:d4:c0:23:cf:83:37:73:
                    8f:ee:be:5d:a9:fb:6f:18:b0:78:9b:f9:91:05:7c:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:06:B5:98:B6:6D:4F:0C:1E:1A:B1:BD:9E:3C:C6:6A:5A:39:EC:6F
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:74:33:0f:15:3c:9c:a8:bc:f0:ca:b4:dc:c8:83:bf:1b:
         ad:2e:a9:3b:94:53:05:5b:ab:a5:40:7a:a0:86:18:3e:8e:16:
         ae:40:6c:73:d3:fc:ef:15:a6:6b:af:30:8b:99:65:73:4e:db:
         80:f8:47:bd:9a:d1:46:4a:9c:c2:88:0d:79:be:3a:06:df:37:
         3a:9d:91:26:4a:be:15:f1:d2:1d:50:da:20:b0:2f:f1:83:fa:
         fb:cc:55:79:87:52:fc:3e:52:a4:f3:0f:b5:ce:75:e8:ec:4d:
         4f:e0:67:e7:f1:27:4e:38:c2:db:ae:12:8f:0e:0c:73:01:44:
         dc:28:c6:14:cc:e2:c1:2d:82:a8:6f:ba:a1:dd:c6:5b:1f:ae:
         7a:df:ae:86:ba:4a:78:9b:df:e8:24:c7:1c:5b:cc:cc:9c:35:
         2f:be:5d:db:24:6e:db:60:a1:0e:30:05:e2:92:e0:4c:25:71:
         41:61:77:7a:ad:9f:e3:74:ce:73:05:3c:bd:85:b5:2e:29:70:
         ce:1d:bf:3a:5e:c2:27:41:7f:3a:9c:ed:fb:28:c7:02:cc:fe:
         32:54:9c:20:0b:a5:8e:dd:a0:bf:78:ef:5b:d7:f8:d7:d5:f7:
         ad:f7:94:2c:8d:af:28:2b:36:ff:8c:e4:ff:e5:32:94:7f:bf:
         be:72:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org