Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier:          PNtnvMVrJ46l0dhbTu3K38XLG433rRpSbsDqF+wdR8Q=
Subject key identifier:   99:19:21:E2:17:B6:12:50:1A:B9:2D:03:21:B0:FF:10:14:F6:2C:BB
Certificate issuer:       /CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
Certificate serial:       54F092E9E64BEAB10CD1918086CB32903D3A5737
Authority key identifier: 32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
Signing time:             Tue 12 Jul 2022 15:36:55 +0000
ROA not before:           Tue 12 Jul 2022 15:31:55 +0000
ROA not after:            Tue 11 Jul 2023 15:36:55 +0000
asID:                     52545
IP address blocks:        2804:e1c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f0:92:e9:e6:4b:ea:b1:0c:d1:91:80:86:cb:32:90:3d:3a:57:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32587CFB0CFCC40679625ECC538FEA1194C4C587
        Validity
            Not Before: Jul 12 15:31:55 2022 GMT
            Not After : Jul 11 15:36:55 2023 GMT
        Subject: CN=991921E217B612501AB92D0321B0FF1014F62CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:fc:d0:7e:20:04:ef:31:f6:dc:b4:11:2d:
                    ed:88:4e:a4:21:f3:9c:ee:5e:0d:e7:6c:e0:a8:ae:
                    6c:bd:3c:cf:82:3d:e7:67:e4:27:bb:1d:a1:6c:62:
                    23:85:1d:21:89:5a:c6:39:83:5f:ec:a3:ea:e6:b4:
                    7f:be:e6:f2:b0:56:20:b1:9c:5a:78:7a:ea:2a:26:
                    57:ef:63:f3:c2:e2:e2:19:cb:8a:ec:df:fe:94:0b:
                    c4:25:29:f1:9f:22:7b:8a:a5:4e:4c:b0:49:86:66:
                    bb:3c:f7:20:a6:6a:60:12:52:4f:23:ab:00:96:17:
                    9e:c6:cd:5f:0b:7a:18:f4:de:8a:63:bf:97:3c:bb:
                    73:78:b1:e4:71:55:0d:b5:8d:2e:4c:dc:67:b7:1a:
                    0a:1d:59:e0:34:88:4f:d5:a5:dc:41:d2:c4:e1:45:
                    fd:9c:17:03:c4:bc:36:e2:70:d8:3a:68:58:78:b7:
                    b9:fa:7f:cd:dd:e6:1b:da:3c:18:a5:ab:09:74:80:
                    26:35:6b:7e:1f:c5:b2:01:b6:0c:77:a8:cb:3f:35:
                    7a:87:a8:73:da:2a:7c:f5:41:9f:83:ea:7a:32:de:
                    76:ad:94:53:5e:06:1e:47:3e:cb:19:cc:ba:ea:db:
                    2f:41:f2:67:b4:fc:b8:36:11:4b:e1:4a:11:3b:0e:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:21:E2:17:B6:12:50:1A:B9:2D:03:21:B0:FF:10:14:F6:2C:BB
            X509v3 Authority Key Identifier:
                keyid:32:58:7C:FB:0C:FC:C4:06:79:62:5E:CC:53:8F:EA:11:94:C4:C5:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32587CFB0CFCC40679625ECC538FEA1194C4C587.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/0/323830343a6531633a3a2f34382d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:0c:20:78:8c:bb:b1:86:eb:d0:b6:52:5e:fc:80:45:9d:
         8c:4e:50:4d:ac:65:a2:9f:eb:fa:9a:d9:92:ae:9b:2b:ed:8c:
         55:1b:7a:0f:8e:c2:81:96:ad:74:6e:31:4f:76:7d:03:8b:5b:
         13:b0:e3:72:0f:cc:b4:b1:2e:75:9f:ce:ed:e6:dd:59:09:75:
         35:cf:f4:8c:4f:f4:ca:2f:e5:a0:16:d8:15:2e:e1:06:93:1f:
         bb:4c:cf:88:fa:13:9f:33:15:41:8a:60:37:33:bf:42:1e:3f:
         0c:f3:24:73:39:a8:7c:d4:67:df:89:f0:ec:03:36:84:77:ea:
         f5:28:09:b5:85:18:af:68:4c:da:74:f9:d2:a3:c6:0a:1d:e8:
         fa:12:c7:56:b2:15:7a:b6:92:f0:3c:df:a0:e6:fb:f4:70:51:
         e5:30:a3:7f:3a:38:96:b8:c4:30:11:db:96:28:a6:00:37:f1:
         f5:c8:67:fa:38:12:3d:c6:21:1d:e1:1f:3e:25:53:e9:e2:6a:
         22:ca:a6:09:57:ac:1d:64:6c:9e:67:20:65:d7:fe:54:8a:2a:
         19:7f:30:a5:29:c7:82:25:23:71:00:47:eb:7f:de:34:fd:4f:
         9d:0f:54:2f:7b:49:ce:e0:3d:c9:a6:dc:4e:d3:d9:0c:72:e3:
         84:3b:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org