Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e35302e302f32342d3234203d3e203532353435.roa
File:                     3133312e37322e35302e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          v8D/DNP4v9/8W/K0ov3kicoSOZV8zpa2DVL4gv69LTs=
Subject key identifier:   A8:F3:4E:EF:47:FE:0E:CF:1D:61:4E:A0:56:86:21:CA:2B:1C:D7:09
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       1A97EE0D04C0852ED062BCCF9D9B249E144D0CAD
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e35302e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:12 +0000
ROA not before:           Thu 19 Jan 2023 23:01:12 +0000
ROA not after:            Thu 18 Jan 2024 23:06:12 +0000
asID:                     52545
IP address blocks:        131.72.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:97:ee:0d:04:c0:85:2e:d0:62:bc:cf:9d:9b:24:9e:14:4d:0c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:12 2023 GMT
            Not After : Jan 18 23:06:12 2024 GMT
        Subject: CN=A8F34EEF47FE0ECF1D614EA0568621CA2B1CD709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:48:36:28:30:da:fd:85:d2:ee:e6:af:32:45:
                    88:67:eb:23:f9:0b:68:a1:4a:ac:2f:41:c5:8a:4a:
                    0f:e2:67:85:10:b3:60:8b:72:c5:e9:9c:92:45:e3:
                    21:fa:03:02:6d:81:ee:e0:b6:66:f5:24:b5:af:da:
                    85:13:32:da:dc:68:66:d9:f9:7e:47:71:87:9f:60:
                    ec:f2:f8:96:19:5a:12:1b:05:98:f5:8f:e5:de:85:
                    39:41:ef:82:ee:df:d1:86:f7:99:af:9a:aa:83:50:
                    2d:34:7c:67:60:17:13:d6:bd:60:58:be:56:c0:e8:
                    46:79:14:70:8d:2c:e9:41:e8:16:2c:08:90:47:36:
                    34:17:2a:22:85:4e:86:8b:c7:01:89:1b:96:23:60:
                    2a:dc:da:37:25:b1:c4:79:85:77:27:d0:40:3f:54:
                    fe:a3:54:ac:17:36:3c:ca:66:32:bb:8d:66:6a:2c:
                    af:fe:c9:32:5b:3c:b7:fc:d6:b9:8e:1a:90:b2:a7:
                    a4:7d:98:41:d8:11:1a:15:7b:e8:4d:9c:7d:77:d1:
                    63:56:0d:e3:2d:c9:80:4f:86:a4:ef:6a:0f:23:01:
                    89:c0:a8:78:94:71:e8:60:1d:96:71:79:b7:50:ab:
                    6a:ee:fa:c4:ad:25:02:14:fe:aa:e5:49:ca:26:25:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:4E:EF:47:FE:0E:CF:1D:61:4E:A0:56:86:21:CA:2B:1C:D7:09
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3133312e37322e35302e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:17:ef:c6:79:ba:1e:b7:f9:2f:0a:00:87:b7:3d:4a:b5:f2:
         70:3d:d6:c2:a3:90:9e:74:78:e5:26:6b:e8:e8:ca:6c:0d:6a:
         df:f1:f8:c1:cc:f0:12:e3:7b:57:31:a8:d2:74:a5:b4:5e:c7:
         85:c4:88:9e:3a:92:d5:08:08:28:be:78:d2:47:00:ed:61:50:
         7c:54:71:db:15:31:20:00:84:22:ad:24:5b:56:33:8b:2f:0b:
         a4:a4:60:21:fe:d8:1c:65:b2:58:96:44:a1:1d:be:6a:82:66:
         51:52:3a:d9:f1:f5:f1:50:19:5e:74:7c:12:ef:8a:c7:c4:10:
         b8:b3:90:3e:69:21:d9:09:5f:97:3f:99:7b:d8:84:5a:49:8f:
         a4:04:6f:07:5b:f7:d6:67:f3:da:35:99:dd:a8:c7:f2:39:b9:
         ca:0c:7d:33:11:cf:3c:6a:32:b6:70:b0:d6:10:95:1e:81:76:
         ad:1e:dd:35:f0:26:ba:75:07:d5:dc:37:01:fa:6e:b0:56:18:
         5c:c5:87:aa:c9:22:33:79:32:52:6c:ac:18:b2:73:24:27:8c:
         00:10:d5:32:1c:8d:a4:17:c9:93:40:57:24:73:24:9a:ab:f9:
         c1:4d:ce:d6:48:2f:b3:c3:d7:e0:c1:21:35:cd:b5:cd:52:a9:
         0f:e2:40:ea
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUGpfuDQTAhS7QYrzPnZsknhRNDK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5RjIwNTM4MjhFOUQ2QjhDQjA5NUVGM0YxRDcyNTQx
MjUyRDM2NDAeFw0yMzAxMTkyMzAxMTJaFw0yNDAxMTgyMzA2MTJaMDMxMTAvBgNV
BAMTKEE4RjM0RUVGNDdGRTBFQ0YxRDYxNEVBMDU2ODYyMUNBMkIxQ0Q3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SDYoMNr9hdLu5q8yRYhn6yP5
C2ihSqwvQcWKSg/iZ4UQs2CLcsXpnJJF4yH6AwJtge7gtmb1JLWv2oUTMtrcaGbZ
+X5HcYefYOzy+JYZWhIbBZj1j+XehTlB74Lu39GG95mvmqqDUC00fGdgFxPWvWBY
vlbA6EZ5FHCNLOlB6BYsCJBHNjQXKiKFToaLxwGJG5YjYCrc2jclscR5hXcn0EA/
VP6jVKwXNjzKZjK7jWZqLK/+yTJbPLf81rmOGpCyp6R9mEHYERoVe+hNnH130WNW
DeMtyYBPhqTvag8jAYnAqHiUcehgHZZxebdQq2ru+sStJQIU/qrlScomJcTPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqPNO70f+Ds8dYU6gVoYhyisc1wkwHwYDVR0j
BBgwFoAUFJ8gU4KOnWuMsJXvPx1yVBJS02QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMS8xNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEyNTJEMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0OUYyMDUzODI4RTlENkI4
Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzEv
MzEzMzMxMmUzNzMyMmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1
MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAINIMjANBgkqhkiG9w0BAQsFAAOCAQEAfhfvxnm6Hrf5
LwoAh7c9SrXycD3WwqOQnnR45SZr6OjKbA1q3/H4wczwEuN7VzGo0nSltF7HhcSI
njqS1QgIKL540kcA7WFQfFRx2xUxIACEIq0kW1Yziy8LpKRgIf7YHGWyWJZEoR2+
aoJmUVI62fH18VAZXnR8Eu+Kx8QQuLOQPmkh2Qlflz+Ze9iEWkmPpARvB1v31mfz
2jWZ3ajH8jm5ygx9MxHPPGoytnCw1hCVHoF2rR7dNfAmunUH1dw3AfpusFYYXMWH
qskiM3kyUmysGLJzJCeMABDVMhyNpBfJk0BXJHMkmqv5wU3O1kgvs8PX4MEhNc21
zVKpD+JA6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org