Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          al4h//+TE1UBOo5/19F+m21OPWteHiToAsx+KkAcn7E=
Subject key identifier:   40:91:C3:67:51:E0:60:7A:C6:5B:AD:A1:9F:6E:74:16:FA:62:6A:DF
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       271E496244B541098C190111DCDDFE145D8DF397
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:12 +0000
ROA not before:           Thu 19 Jan 2023 23:01:12 +0000
ROA not after:            Thu 18 Jan 2024 23:06:12 +0000
asID:                     52545
IP address blocks:        168.121.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1e:49:62:44:b5:41:09:8c:19:01:11:dc:dd:fe:14:5d:8d:f3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:12 2023 GMT
            Not After : Jan 18 23:06:12 2024 GMT
        Subject: CN=4091C36751E0607AC65BADA19F6E7416FA626ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:74:e7:2f:f1:eb:28:da:37:21:98:2b:a7:
                    f6:0b:df:0b:db:ef:86:21:36:88:44:6b:08:c2:b3:
                    4f:61:0e:c9:7c:b7:28:53:10:0f:ab:91:55:7a:e3:
                    c0:f1:a0:23:70:55:d8:b3:80:c3:5a:0c:bc:92:19:
                    8f:46:e2:f1:3d:31:d2:ad:c1:ed:87:5f:b3:2c:40:
                    17:0c:ea:cd:71:a5:ca:5c:28:33:9b:6e:42:6c:cc:
                    d0:ee:7f:a5:15:5f:67:90:59:69:0b:85:c7:58:b0:
                    ba:76:f8:42:bf:71:05:ac:3f:6b:1c:4d:62:28:ea:
                    1b:a8:d4:5f:cc:67:4d:a4:90:37:dc:c8:6b:c2:42:
                    5c:3f:0b:0c:c7:be:fd:b5:7e:ce:33:59:c1:a8:6d:
                    03:45:ac:14:65:05:19:30:f6:5b:82:c1:e6:6a:b5:
                    9b:5b:14:a2:02:61:9a:b9:cb:2a:83:69:7b:54:cb:
                    62:83:d0:5d:e5:5f:e1:67:d0:44:bd:6a:2b:fb:88:
                    af:3b:28:19:01:08:7a:8c:98:51:26:32:9f:7b:8b:
                    2d:5a:7b:a1:f5:9a:3c:4d:64:63:8e:b6:d6:5f:eb:
                    90:48:c9:52:31:bb:2a:e7:c5:2a:b7:93:7f:3d:e9:
                    47:71:7d:c5:cb:be:ae:2e:65:32:c0:a9:75:c3:0c:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:91:C3:67:51:E0:60:7A:C6:5B:AD:A1:9F:6E:74:16:FA:62:6A:DF
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:f0:a8:8a:52:bf:13:f7:98:1e:55:6b:ce:8d:22:7e:37:
         17:c2:7e:83:9c:0d:8c:c6:17:8e:a1:a0:1c:81:bd:90:f3:02:
         17:28:86:75:44:b5:a6:b5:4e:16:71:11:48:65:75:8c:09:c3:
         ea:75:75:4b:a8:f7:84:cd:1a:50:dc:05:b7:e5:04:35:de:69:
         84:d2:c5:de:12:f3:f6:7e:aa:bf:62:fb:4d:a3:fe:26:e4:6a:
         f0:41:9b:8f:dd:55:12:13:57:22:0f:df:30:c7:9c:a3:4a:a1:
         82:bd:d4:ca:25:ee:dc:d3:09:70:8b:25:3d:67:15:21:a9:4d:
         44:d1:4d:42:eb:a5:57:4e:88:6b:9a:ba:0d:b6:47:58:d0:61:
         92:14:14:e3:31:c9:82:81:d5:c0:78:9e:29:c1:0e:b5:d9:17:
         6e:e1:c3:f1:ee:f0:d7:ad:cb:8e:26:78:c2:e5:1e:d4:59:c1:
         ce:12:92:b0:4b:aa:a1:16:93:8c:f3:3c:bf:73:8e:67:e4:80:
         59:08:08:88:eb:93:83:28:e1:06:4c:65:9a:58:85:27:7a:7d:
         ba:f3:c6:18:f5:72:14:d6:f4:1f:ae:1d:03:29:78:d3:22:96:
         e1:69:e2:5f:ee:67:42:01:45:42:c6:94:e3:bf:55:86:bd:d5:
         72:0a:06:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJx5JYkS1QQmMGQER3N3+FF2N85cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5RjIwNTM4MjhFOUQ2QjhDQjA5NUVGM0YxRDcyNTQx
MjUyRDM2NDAeFw0yMzAxMTkyMzAxMTJaFw0yNDAxMTgyMzA2MTJaMDMxMTAvBgNV
BAMTKDQwOTFDMzY3NTFFMDYwN0FDNjVCQURBMTlGNkU3NDE2RkE2MjZBREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9g3TnL/HrKNo3IZgrp/YL3wvb
74YhNohEawjCs09hDsl8tyhTEA+rkVV648DxoCNwVdizgMNaDLySGY9G4vE9MdKt
we2HX7MsQBcM6s1xpcpcKDObbkJszNDuf6UVX2eQWWkLhcdYsLp2+EK/cQWsP2sc
TWIo6huo1F/MZ02kkDfcyGvCQlw/CwzHvv21fs4zWcGobQNFrBRlBRkw9luCweZq
tZtbFKICYZq5yyqDaXtUy2KD0F3lX+Fn0ES9aiv7iK87KBkBCHqMmFEmMp97iy1a
e6H1mjxNZGOOttZf65BIyVIxuyrnxSq3k3896UdxfcXLvq4uZTLAqXXDDMnxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQJHDZ1HgYHrGW62hn250Fvpiat8wHwYDVR0j
BBgwFoAUFJ8gU4KOnWuMsJXvPx1yVBJS02QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMS8xNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEyNTJEMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0OUYyMDUzODI4RTlENkI4
Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzEv
MzEzNjM4MmUzMTMyMzEyZTMxMzYzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoeagwDQYJKoZIhvcNAQELBQADggEBALWG8KiK
Ur8T95geVWvOjSJ+NxfCfoOcDYzGF46hoByBvZDzAhcohnVEtaa1ThZxEUhldYwJ
w+p1dUuo94TNGlDcBbflBDXeaYTSxd4S8/Z+qr9i+02j/ibkavBBm4/dVRITVyIP
3zDHnKNKoYK91Mol7tzTCXCLJT1nFSGpTUTRTULrpVdOiGuaug22R1jQYZIUFOMx
yYKB1cB4ninBDrXZF27hw/Hu8Nety44meMLlHtRZwc4SkrBLqqEWk4zzPL9zjmfk
gFkICIjrk4Mo4QZMZZpYhSd6fbrzxhj1chTW9B+uHQMpeNMiluFp4l/uZ0IBRULG
lOO/VYa91XIKBu8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org