Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          9rLFMsWqdJmhEPlCIH9g1/ms/yc2X8acuutiBMl3cyk=
Subject key identifier:   68:8F:11:6A:91:17:73:75:BC:C2:2B:B6:0D:B4:75:62:EC:CC:CB:65
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       67A857D4049C3352E9EB967D34C8CD4404DA4D1B
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 30 Oct 2023 21:39:43 +0000
ROA not before:           Mon 30 Oct 2023 21:34:43 +0000
ROA not after:            Mon 28 Oct 2024 21:39:43 +0000
asID:                     52545
IP address blocks:        168.121.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a8:57:d4:04:9c:33:52:e9:eb:96:7d:34:c8:cd:44:04:da:4d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Oct 30 21:34:43 2023 GMT
            Not After : Oct 28 21:39:43 2024 GMT
        Subject: CN=688F116A91177375BCC22BB60DB47562ECCCCB65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:57:06:66:f1:64:78:a9:50:4a:9a:20:f7:
                    56:16:32:94:fa:64:9f:80:7b:e4:4c:92:2b:46:19:
                    99:3d:3b:00:b5:cc:0a:4c:38:31:fa:aa:84:71:3d:
                    f2:12:08:58:a9:f3:43:ef:4b:c5:c8:39:13:90:38:
                    0b:cf:47:15:0f:43:f5:83:a1:0a:76:f1:c7:4c:85:
                    c6:bc:89:09:42:c3:60:d2:4f:62:05:14:7e:b4:58:
                    d2:2e:5a:2d:51:30:22:18:77:6d:17:e5:4f:54:75:
                    7e:66:31:8e:62:31:ea:a6:9f:51:de:c7:e0:14:75:
                    0f:69:29:70:e4:df:c4:33:f4:02:cb:8b:55:66:f5:
                    ec:8d:1f:60:d7:97:26:28:fe:89:d9:57:c8:ed:36:
                    a3:bb:fd:e4:03:a8:b2:b2:54:58:62:5e:ef:31:7d:
                    d8:82:73:b9:89:4c:bb:94:04:6a:a3:5d:79:61:c8:
                    07:80:c4:1c:78:b1:12:03:82:c5:5a:52:48:9c:71:
                    4c:1d:f9:39:f4:51:f2:4d:59:94:2e:94:a4:2d:ee:
                    c3:03:f3:a0:73:13:40:42:11:7e:3b:d6:17:aa:75:
                    1c:58:2a:48:ba:17:dc:be:dd:5d:27:9f:b2:35:91:
                    85:e5:d4:44:a7:73:4a:67:57:54:0f:b1:a7:04:05:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8F:11:6A:91:17:73:75:BC:C2:2B:B6:0D:B4:75:62:EC:CC:CB:65
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:a2:b0:c0:2a:d8:71:c7:70:9f:39:12:9d:64:7b:ab:4c:73:
         c4:7b:a1:6a:c6:55:5d:0a:98:e0:9a:67:72:ed:13:16:81:a3:
         90:f2:a5:f9:c8:1d:86:99:85:a8:1c:6d:5e:2f:a5:df:6a:3d:
         c4:47:01:b8:76:77:ae:40:97:e3:81:51:eb:10:3b:fa:05:b6:
         2c:68:ae:59:3a:e8:b6:0b:de:9c:ff:47:3a:df:58:53:5e:87:
         ba:b7:e2:3f:5d:d9:77:4c:41:67:36:06:26:f8:d8:44:5e:47:
         09:b1:27:e3:63:ec:ce:74:f9:e6:91:00:6f:93:d3:53:0b:79:
         ec:5b:6f:4e:ee:c3:36:a6:0b:80:bf:4a:d4:8f:74:a5:7d:8d:
         8e:39:1c:cb:f9:82:4a:ef:a3:fd:1e:2f:f6:00:65:e7:e4:a0:
         5c:3a:3d:71:31:34:81:c6:72:2e:ff:b1:f3:58:8c:b0:2d:7b:
         4b:8d:0d:63:45:3d:3f:97:69:e2:46:d1:7f:1d:a3:3b:66:f2:
         52:30:d1:00:5f:6b:b3:cc:c0:be:6c:ad:2f:3a:78:45:fc:e3:
         6b:d0:8c:fb:28:87:42:f9:17:be:0b:33:be:c9:6d:63:b8:28:
         1f:79:f9:01:fb:b2:33:30:96:fa:9d:71:a0:1a:11:8b:19:e8:
         43:ce:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org