Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32342d3234203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          y4jofBnlC5c7oMK7f+406mTRNwNXq8iF8QwhcXeMazE=
Subject key identifier:   11:0F:D4:F6:5B:CB:6F:DA:D2:80:3C:30:BF:23:8D:CC:9F:99:DC:9D
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       3179EA84F9434300D3052628874B3B003C7C9504
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:12 +0000
ROA not before:           Thu 19 Jan 2023 23:01:12 +0000
ROA not after:            Thu 18 Jan 2024 23:06:12 +0000
asID:                     52545
IP address blocks:        168.121.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:79:ea:84:f9:43:43:00:d3:05:26:28:87:4b:3b:00:3c:7c:95:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:12 2023 GMT
            Not After : Jan 18 23:06:12 2024 GMT
        Subject: CN=110FD4F65BCB6FDAD2803C30BF238DCC9F99DC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:fc:8f:09:17:e0:63:12:f9:5e:47:e8:29:
                    2c:ac:0e:9f:ae:82:1f:1f:26:f4:5d:50:c2:b1:5b:
                    61:f6:8d:ed:8e:e8:a3:a3:c5:34:ab:14:34:ea:bf:
                    13:3c:6b:81:14:fe:24:62:a2:9c:ab:a2:6c:c7:a4:
                    54:88:77:d4:c3:bd:69:14:ca:07:2d:a2:2d:2a:2e:
                    53:6a:09:ee:46:54:78:67:9f:44:15:05:12:07:f2:
                    2d:dc:3d:cd:06:eb:f0:e4:2d:0b:40:76:e5:e1:18:
                    53:24:ce:41:be:7b:3c:10:ee:6e:a9:16:19:d0:49:
                    a8:24:09:d0:31:0c:ae:d1:fa:e4:73:81:b6:c6:38:
                    ee:b2:94:c3:10:51:1c:bc:f2:b0:be:42:79:b0:a7:
                    04:28:95:82:01:99:6a:18:70:ce:d1:e1:c3:8b:d8:
                    f0:83:92:40:55:a5:40:9d:23:4f:ea:db:f0:bb:1e:
                    a9:16:39:04:7e:35:82:00:1e:e0:44:46:86:25:47:
                    6b:ec:ae:ec:2b:49:5b:d0:85:6a:29:6b:52:c8:79:
                    3a:8d:b7:8c:05:4a:82:9c:26:28:97:7a:55:1a:2c:
                    e9:e1:7f:83:a3:2e:bb:a4:57:df:e1:75:d0:b3:6a:
                    28:35:33:de:8e:2a:51:5c:eb:53:29:d9:ea:d8:41:
                    98:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0F:D4:F6:5B:CB:6F:DA:D2:80:3C:30:BF:23:8D:CC:9F:99:DC:9D
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136382e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:70:6c:93:fb:91:2e:16:6f:44:07:70:62:67:8a:7e:dc:ec:
         bd:03:d9:a5:17:87:c6:bc:02:4a:ab:06:52:7d:f4:a6:15:a1:
         b2:84:0f:3a:61:ff:6a:07:df:33:98:e1:a0:a6:6a:ea:00:92:
         22:b5:6a:f3:46:21:56:1c:b4:a1:90:ed:4a:55:4b:c6:7b:27:
         26:b7:e9:b3:d6:89:7e:03:de:11:1b:13:53:dd:09:71:87:eb:
         c8:bb:d2:68:51:53:2e:91:56:1e:ff:33:a4:9b:8d:38:59:2c:
         cf:52:9b:3a:28:3e:f8:a4:65:e6:98:0e:82:c6:32:14:8b:13:
         28:f8:58:cd:d7:40:a0:11:f5:62:7f:7e:14:26:cf:7e:e8:f0:
         4e:43:4c:49:a6:b9:05:ca:0c:e0:8a:85:82:76:24:cd:cb:c0:
         39:c2:ea:4f:60:ae:71:78:1e:88:6c:9e:f9:da:8e:c8:aa:c6:
         f5:51:c8:8d:10:9d:90:72:6c:6b:28:27:72:64:a2:12:3a:c2:
         76:27:d8:de:5d:e6:e4:17:b7:e0:64:6d:74:72:10:07:47:3c:
         97:97:d1:62:50:a0:dd:3a:be:4a:b5:31:d3:59:e0:64:28:71:
         98:69:10:69:d8:e8:8c:c9:17:f1:22:b1:a6:b0:ec:5e:8b:db:
         d7:47:fc:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMXnqhPlDQwDTBSYoh0s7ADx8lQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5RjIwNTM4MjhFOUQ2QjhDQjA5NUVGM0YxRDcyNTQx
MjUyRDM2NDAeFw0yMzAxMTkyMzAxMTJaFw0yNDAxMTgyMzA2MTJaMDMxMTAvBgNV
BAMTKDExMEZENEY2NUJDQjZGREFEMjgwM0MzMEJGMjM4RENDOUY5OURDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYPyPCRfgYxL5XkfoKSysDp+u
gh8fJvRdUMKxW2H2je2O6KOjxTSrFDTqvxM8a4EU/iRiopyromzHpFSId9TDvWkU
ygctoi0qLlNqCe5GVHhnn0QVBRIH8i3cPc0G6/DkLQtAduXhGFMkzkG+ezwQ7m6p
FhnQSagkCdAxDK7R+uRzgbbGOO6ylMMQURy88rC+QnmwpwQolYIBmWoYcM7R4cOL
2PCDkkBVpUCdI0/q2/C7HqkWOQR+NYIAHuBERoYlR2vsruwrSVvQhWopa1LIeTqN
t4wFSoKcJiiXelUaLOnhf4OjLrukV9/hddCzaig1M96OKlFc61Mp2erYQZj1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEQ/U9lvLb9rSgDwwvyONzJ+Z3J0wHwYDVR0j
BBgwFoAUFJ8gU4KOnWuMsJXvPx1yVBJS02QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMS8xNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEyNTJEMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0OUYyMDUzODI4RTlENkI4
Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzEv
MzEzNjM4MmUzMTMyMzEyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoeagwDQYJKoZIhvcNAQELBQADggEBAJVwbJP7
kS4Wb0QHcGJnin7c7L0D2aUXh8a8AkqrBlJ99KYVobKEDzph/2oH3zOY4aCmauoA
kiK1avNGIVYctKGQ7UpVS8Z7Jya36bPWiX4D3hEbE1PdCXGH68i70mhRUy6RVh7/
M6SbjThZLM9SmzooPvikZeaYDoLGMhSLEyj4WM3XQKAR9WJ/fhQmz37o8E5DTEmm
uQXKDOCKhYJ2JM3LwDnC6k9grnF4HohsnvnajsiqxvVRyI0QnZBybGsoJ3JkohI6
wnYn2N5d5uQXt+BkbXRyEAdHPJeX0WJQoN06vkq1MdNZ4GQocZhpEGnY6IzJF/Ei
saaw7F6L29dH/Ag=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org