Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
File:                     3133312e37322e34382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          ziwiHQvkgKh3v9MMPcNcJLRG8oGtjEHE+PJN0lKiyNY=
Subject key identifier:   BB:F2:EB:46:A4:D2:F6:04:DF:9D:2C:38:92:F2:5D:A9:2D:FF:67:07
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       3FA2E9C3A45BBBE17DC3991C9250A4D49B6C035F
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 30 Oct 2023 21:41:03 +0000
ROA not before:           Mon 30 Oct 2023 21:36:03 +0000
ROA not after:            Mon 28 Oct 2024 21:41:03 +0000
asID:                     52545
IP address blocks:        131.72.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:e9:c3:a4:5b:bb:e1:7d:c3:99:1c:92:50:a4:d4:9b:6c:03:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Oct 30 21:36:03 2023 GMT
            Not After : Oct 28 21:41:03 2024 GMT
        Subject: CN=BBF2EB46A4D2F604DF9D2C3892F25DA92DFF6707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:12:32:81:50:ae:89:c9:d5:68:01:e6:b2:
                    c9:87:4b:95:3d:7e:1f:c5:72:ff:d5:9c:02:d9:99:
                    e5:36:ea:fc:f7:81:c7:c6:4c:12:da:b4:42:a7:0b:
                    de:6d:b2:f8:51:9b:8b:16:fe:53:7e:48:83:49:b0:
                    b2:16:55:73:81:74:4a:3b:81:7a:71:60:48:9b:de:
                    0d:0b:05:89:71:1e:d4:ec:80:c8:0f:22:53:18:c4:
                    1e:b0:30:48:01:ee:fa:7b:29:55:b3:91:ab:6c:c5:
                    00:1e:26:4b:98:2f:99:12:18:37:ac:d9:40:5e:a4:
                    4b:e0:b4:0d:04:b4:0b:5c:48:08:37:e9:ce:4a:b5:
                    1c:77:cf:04:29:14:e2:32:3e:85:f8:9c:db:3e:8a:
                    d7:48:dd:58:ae:5b:7a:57:b2:c9:f1:f8:1a:02:60:
                    90:6e:3b:d8:83:4b:56:47:82:1e:e3:e7:00:ce:3d:
                    7c:09:f0:d6:9c:1b:33:c0:3f:1b:ec:e8:e7:99:10:
                    5b:54:56:af:a9:21:b3:ad:cd:ff:7b:36:4c:2d:78:
                    de:22:4b:f7:7a:e6:e4:e8:3e:ca:b2:f9:89:c6:35:
                    7e:ca:e9:3d:1f:52:df:08:f5:ba:09:76:52:d9:f2:
                    70:32:54:fd:bd:c8:f9:84:63:12:54:d5:43:32:bf:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F2:EB:46:A4:D2:F6:04:DF:9D:2C:38:92:F2:5D:A9:2D:FF:67:07
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e34382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:50:4e:18:d5:8b:df:a6:e5:d2:e7:ae:79:bb:52:7d:0d:4f:
         ba:04:9c:13:87:fb:fc:15:6b:db:3f:7d:4e:35:d4:4e:51:77:
         cf:7d:28:2c:a6:f6:e7:07:f4:02:13:b0:a7:13:3a:bb:f5:88:
         b3:6e:18:f7:6f:30:5b:ed:d6:1b:9b:64:6d:7d:78:82:2e:dd:
         b6:51:75:7a:1f:a0:42:01:65:3d:72:af:76:f7:ab:05:81:0c:
         ad:ba:c1:2d:8f:97:f8:16:18:6f:28:15:2d:26:a1:ca:e5:15:
         af:80:8a:b6:b9:1d:9f:f7:74:ac:2d:08:62:78:40:96:b1:ea:
         bb:bc:24:21:8b:7c:5b:6f:24:a7:07:85:a4:10:aa:3e:07:0a:
         9e:d5:44:61:93:e9:11:5a:2e:b2:55:f3:51:5f:65:14:43:5d:
         de:23:71:52:68:90:aa:51:85:18:43:59:6d:ea:a6:41:63:62:
         67:51:c1:67:b4:83:4f:10:8d:c5:9f:1b:53:9c:8b:83:be:27:
         82:24:66:fb:00:4d:0e:74:2e:53:71:8a:f0:ca:b4:45:96:98:
         7f:4c:a0:a8:e1:bb:6c:9d:51:ba:ed:a7:30:ec:f2:3c:58:a1:
         b9:23:03:b1:1f:4f:3a:ef:f7:88:ee:5d:f0:7d:58:6b:78:55:
         37:47:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org