Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136392e302f32342d3234203d3e203532353435.roa
File:                     3136382e3132312e3136392e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          PJ2xy4tOP18eBLaw2Lraf2YpsBijeqFWH0MMJC/6Eb4=
Subject key identifier:   31:AE:36:9E:FF:59:34:24:53:5E:6E:59:92:C0:96:08:91:12:02:52
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       65767D319B1BDC570B7E455D7C19E0FC3D3411D9
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136392e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:13 +0000
ROA not before:           Thu 19 Jan 2023 23:01:13 +0000
ROA not after:            Thu 18 Jan 2024 23:06:13 +0000
asID:                     52545
IP address blocks:        168.121.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:76:7d:31:9b:1b:dc:57:0b:7e:45:5d:7c:19:e0:fc:3d:34:11:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:13 2023 GMT
            Not After : Jan 18 23:06:13 2024 GMT
        Subject: CN=31AE369EFF593424535E6E5992C0960891120252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:b4:b6:9c:76:9f:0d:f5:17:30:b0:9d:84:
                    98:2a:f1:d6:97:09:91:ed:f4:8f:74:c7:e3:e5:d9:
                    8f:45:ab:0e:3e:c6:f6:c4:90:b4:e7:ad:80:c1:3b:
                    6b:9a:44:07:62:63:24:9a:40:0d:83:bc:ba:ad:21:
                    0b:0c:6b:cb:db:14:f7:68:e0:f8:5d:cf:a6:e4:43:
                    86:5e:a2:a6:86:6e:20:22:f1:5d:08:29:b9:3a:35:
                    23:fb:2d:d2:25:b2:ab:c7:fe:d2:c9:51:3f:64:ad:
                    f8:13:67:ca:d8:d4:f7:8e:09:41:09:6b:49:5d:b3:
                    34:f2:ab:4f:89:24:e1:57:bb:21:82:1e:71:d5:8d:
                    14:7b:6d:38:8a:ea:f2:ac:62:0f:8f:70:3a:0a:e7:
                    d2:4d:0c:4e:bc:0a:41:eb:59:d1:f5:b9:27:fd:43:
                    12:77:33:16:04:c3:65:67:ea:cb:68:50:5b:61:78:
                    f8:da:4e:76:5a:d4:19:47:04:16:84:f5:ba:6c:78:
                    3a:31:44:14:9d:b6:b0:0f:73:42:37:10:42:2a:6e:
                    35:32:32:7c:21:41:2d:4b:d2:77:21:d0:fb:6e:3f:
                    12:f3:db:bc:9a:5d:a7:21:4a:3f:bf:99:c8:25:13:
                    40:90:73:70:db:e0:04:6b:ca:92:b6:26:76:19:14:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AE:36:9E:FF:59:34:24:53:5E:6E:59:92:C0:96:08:91:12:02:52
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3136392e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:c1:b8:29:a9:5b:64:b1:54:14:b4:1d:89:e3:a5:90:58:
         ca:77:c1:99:4e:f4:58:3e:c1:42:70:9f:ee:df:92:34:06:b0:
         57:3b:00:2d:2a:f2:ee:ac:68:4a:1e:5c:20:20:2c:df:c7:f9:
         cf:c4:4f:9c:05:22:89:1a:57:63:ef:d8:ac:d4:0c:e5:f9:6f:
         9a:bc:24:f8:1c:e9:f1:64:56:b8:db:83:a4:41:67:9c:e6:46:
         ba:44:d3:6d:05:32:57:30:2a:78:b8:bc:00:6a:78:98:a2:b4:
         be:58:dc:a9:2b:e9:ad:c7:bd:07:84:34:ea:7a:44:fb:a6:9d:
         e1:e5:db:ea:52:45:3e:70:5b:4a:87:6c:a5:d1:1c:ad:90:cf:
         75:cd:76:0f:8a:44:c5:6d:d6:5c:32:51:e3:fa:4b:93:df:ef:
         e1:56:a1:5b:f0:25:cf:cf:d4:e5:d4:65:1a:5a:bd:6b:2d:19:
         90:be:f9:47:0b:d3:3c:25:0c:f0:8c:5f:74:5e:21:3e:04:08:
         ad:29:0e:f5:a4:8e:34:b9:cd:60:5e:41:30:aa:11:cc:51:61:
         64:a3:15:fa:d2:9c:91:88:d0:13:bf:6a:a4:9a:6b:ed:0f:e3:
         a8:ee:0a:31:9f:7c:7b:6a:99:2a:12:68:6a:3b:39:d4:62:e7:
         20:ea:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org