Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e34382e302f32342d3234203d3e203532353435.roa
File:                     3133312e37322e34382e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          jHi0tjhBUD62MLSesfmAbwMJ5yLHeifYYuA/ePJnhaQ=
Subject key identifier:   49:AB:CD:0B:A3:65:A0:AC:C7:EE:7A:ED:9E:3D:6C:CF:BF:72:2C:AC
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       1AB35E28CB586457D9E3995F0D0231E82E95766F
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e34382e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:13 +0000
ROA not before:           Thu 19 Jan 2023 23:01:13 +0000
ROA not after:            Thu 18 Jan 2024 23:06:13 +0000
asID:                     52545
IP address blocks:        131.72.48.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b3:5e:28:cb:58:64:57:d9:e3:99:5f:0d:02:31:e8:2e:95:76:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:13 2023 GMT
            Not After : Jan 18 23:06:13 2024 GMT
        Subject: CN=49ABCD0BA365A0ACC7EE7AED9E3D6CCFBF722CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:9d:cb:e5:61:07:27:48:38:15:ed:91:d6:
                    b5:43:e1:f7:4d:74:32:16:7a:2b:c1:f6:4f:59:60:
                    62:f6:20:b3:d2:33:d5:c0:3e:c5:b5:af:4c:65:2c:
                    8c:7f:72:56:38:59:89:94:3d:04:0d:ea:78:81:4c:
                    d4:dd:d2:34:18:15:3a:3f:bf:51:26:d9:8b:6b:bd:
                    dc:33:a7:5e:c4:b6:f1:de:cb:e9:35:9a:e3:7e:c7:
                    b8:87:52:db:cb:e4:1c:59:1a:6d:e9:70:99:9b:4c:
                    c6:26:b5:3e:98:39:ce:58:75:0a:23:02:c0:fd:43:
                    66:8a:d2:e2:d1:93:0c:46:34:50:d7:3f:e6:f2:b3:
                    47:98:57:a9:bf:c2:9d:23:94:b2:c2:a1:b5:2d:7f:
                    69:9b:70:44:e4:a5:5c:9d:21:7c:d4:64:4b:76:e3:
                    f4:a5:10:63:de:23:d2:87:be:22:66:27:44:2a:e7:
                    4f:30:14:23:62:4f:ae:f9:0f:44:bd:c4:98:c6:96:
                    da:c0:82:0a:bc:79:fa:6b:3d:e9:54:89:56:3b:41:
                    7f:d5:1d:ab:fc:18:2d:ea:ab:ce:0e:cf:9c:51:a2:
                    02:f6:e2:bf:b3:56:74:c8:59:f2:0f:de:65:5f:f1:
                    aa:a9:ad:5f:a4:a0:b2:0a:00:59:32:67:31:91:4e:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AB:CD:0B:A3:65:A0:AC:C7:EE:7A:ED:9E:3D:6C:CF:BF:72:2C:AC
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e34382e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:ec:1f:af:87:2c:12:3d:bb:3b:bd:2d:56:01:63:4e:ba:
         77:d4:49:cd:d8:23:e2:4e:3b:85:81:f9:f8:20:a0:e0:0e:01:
         0c:46:ed:54:c9:68:95:4e:34:58:07:5a:59:73:a7:cd:71:80:
         41:85:14:a3:60:f7:bb:fc:ca:ff:09:0e:ca:ee:bc:67:c7:16:
         39:10:c0:66:b0:50:95:32:d9:7a:47:20:03:c8:c4:c4:00:a8:
         e6:d5:0d:88:52:ab:11:e9:42:3a:ee:6b:2c:34:87:2b:34:55:
         4f:69:2a:4e:2a:33:ce:dd:8a:8d:c1:eb:89:b4:07:92:5b:f4:
         32:57:5c:dd:cd:3c:d0:40:34:20:d6:d4:d7:d4:cd:48:bb:75:
         40:d0:db:16:31:8b:a5:9f:ab:ad:96:77:28:2b:7d:ec:a5:ce:
         fd:cc:83:c0:b4:a3:bc:c9:ff:b7:87:3c:39:30:f0:71:8c:03:
         1b:31:8e:3c:eb:04:88:c6:f2:bc:a9:e0:b0:bf:dc:5c:64:ea:
         2a:4d:d5:e6:1e:18:4e:05:0d:7b:d5:f6:2b:d4:b9:39:bb:8f:
         38:8b:1d:2d:d3:0b:f2:97:bf:53:fc:12:98:aa:d9:13:91:46:
         cb:f3:db:11:a4:47:f9:c2:16:c6:1b:ee:77:0b:53:b5:fd:de:
         fa:9b:e4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org