Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa (raw, json)
Hash identifier:          B7TiufNgb8iVe4I98HWPlcC8iPHfqBwbxrqFP0y6kyQ=
Subject key identifier:   59:C8:1F:3E:7C:2B:62:6E:B5:35:09:52:59:C7:79:ED:CC:7E:95:FA
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       789A0BD22585C7C0F0643966BE58FB00F54E0A36
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:12 +0000
ROA not before:           Thu 19 Jan 2023 23:01:12 +0000
ROA not after:            Thu 18 Jan 2024 23:06:12 +0000
asID:                     52545
IP address blocks:        168.121.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9a:0b:d2:25:85:c7:c0:f0:64:39:66:be:58:fb:00:f5:4e:0a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:12 2023 GMT
            Not After : Jan 18 23:06:12 2024 GMT
        Subject: CN=59C81F3E7C2B626EB535095259C779EDCC7E95FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:69:36:1b:a1:e9:95:e8:f4:6b:a8:91:7b:
                    7f:c9:44:6d:c9:db:2d:1c:76:8c:46:1b:e1:3a:31:
                    63:c3:f7:74:dc:f8:2d:07:c1:18:58:7a:ae:70:db:
                    87:99:31:aa:d9:7b:f5:cb:f7:e0:53:d2:95:f3:ce:
                    8c:d4:ed:cc:a1:9c:e6:6b:d4:3a:83:fd:85:85:00:
                    9b:47:dc:5e:3c:57:5d:63:72:1e:f9:ce:e1:5c:b9:
                    15:1d:80:23:06:a5:1f:5f:71:90:ef:03:4b:0b:5b:
                    f5:0d:c5:d1:fa:e6:91:09:50:82:c8:94:a9:7f:b3:
                    4b:5f:4d:0c:87:41:a3:5f:46:b0:7c:25:b9:7c:2f:
                    31:01:2d:63:11:de:91:c0:f6:8f:34:23:36:c8:e8:
                    ab:f6:b6:47:e3:27:a6:4e:54:28:b8:91:71:36:ad:
                    a9:46:c6:db:b5:dd:e6:d2:29:7c:d1:fa:32:23:02:
                    cd:fc:ea:14:2c:8a:1b:7f:d4:49:f1:cc:2e:43:b8:
                    7c:90:04:c7:e0:80:68:0c:eb:8a:30:5b:b9:f3:f8:
                    f7:a9:de:4e:e3:4c:47:49:45:e1:27:03:e7:63:c3:
                    c1:42:af:0d:53:94:22:22:c8:e2:4c:08:d0:43:49:
                    ed:71:fc:a7:7c:68:48:d9:df:ef:5b:25:8c:86:67:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C8:1F:3E:7C:2B:62:6E:B5:35:09:52:59:C7:79:ED:CC:7E:95:FA
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32322d3232203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:b3:6d:22:45:0e:52:01:c0:ec:fa:ef:26:6a:e8:32:87:9f:
         5a:70:88:c4:2a:ca:7b:98:76:b5:03:42:72:73:3e:da:e4:f0:
         b8:68:ee:48:db:d7:a6:bd:1f:d9:8e:51:ae:a4:f3:21:d8:5f:
         34:c4:9c:e1:0f:4e:f4:65:20:f0:ee:39:ac:99:8d:27:5d:eb:
         5a:db:28:ef:5e:9b:f8:cd:10:7a:ba:52:0f:83:34:b4:c2:c5:
         78:25:dd:a1:99:d9:dd:fb:26:3b:c5:0f:ac:79:9e:30:24:a2:
         81:cc:9d:7b:71:16:fe:fc:68:d4:17:ac:15:3f:6a:79:88:c2:
         d9:a8:54:9f:91:ab:ef:ee:66:df:3a:69:58:31:82:e3:ea:3d:
         f0:ee:d3:b7:99:89:a5:22:d0:3c:48:26:7b:08:ce:e0:78:4b:
         17:0b:f9:a9:35:71:10:50:17:0d:35:b0:d1:84:4b:36:17:ff:
         c4:36:f7:31:b2:44:f0:de:6e:c9:52:a0:f6:91:e2:dd:a7:bc:
         5c:07:2d:5c:29:66:63:a1:6b:f3:43:5e:86:cf:3a:7c:95:6c:
         26:b0:1e:98:73:69:1f:c0:61:b9:f0:d4:b9:07:7d:bc:d2:29:
         d9:c7:c4:af:2c:fa:63:be:ab:17:ce:41:dc:60:02:d2:06:db:
         05:90:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org