Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137302e302f32342d3234203d3e203532353435.roa
File:                     3136382e3132312e3137302e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          2Ve0l/gQTmNR9OGamm0qtRi0u/knkRthfatbv78iOx0=
Subject key identifier:   9D:46:8F:61:11:E9:AB:C1:64:37:AF:02:A3:FB:40:F1:A5:21:E9:50
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       60D7D10A7CF2ED10893A7E39CCED92C905B2B5
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137302e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:13 +0000
ROA not before:           Thu 19 Jan 2023 23:01:13 +0000
ROA not after:            Thu 18 Jan 2024 23:06:13 +0000
asID:                     52545
IP address blocks:        168.121.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d7:d1:0a:7c:f2:ed:10:89:3a:7e:39:cc:ed:92:c9:05:b2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:13 2023 GMT
            Not After : Jan 18 23:06:13 2024 GMT
        Subject: CN=9D468F6111E9ABC16437AF02A3FB40F1A521E950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:93:5d:42:a4:4a:a4:e1:3b:72:33:62:aa:
                    48:d7:59:41:8f:53:47:33:11:f0:98:4e:cd:ea:3d:
                    42:67:cf:b5:ae:16:7a:47:b8:4b:78:23:43:9a:41:
                    8a:6e:ab:fb:38:9f:49:47:d0:24:dc:83:3f:64:74:
                    9f:f4:8f:67:c0:ad:b0:9e:74:96:3d:71:5c:5b:ef:
                    71:e9:9e:7f:f0:d2:e0:b5:7e:f0:31:33:b2:bc:f4:
                    63:30:0c:65:a4:01:8a:cf:ce:b5:41:5d:69:4c:24:
                    5b:4c:ee:26:80:6d:3f:07:d8:dd:2b:56:a6:22:a0:
                    3b:d9:e8:46:c7:85:95:8d:d5:9b:4c:54:ce:b0:31:
                    bd:c2:10:df:1f:ce:d4:b5:a4:a6:04:0c:ba:fe:61:
                    b2:f3:3c:d5:b6:7d:96:41:71:32:16:15:67:6d:63:
                    ea:36:40:12:79:92:41:9f:09:0e:69:84:36:c5:f1:
                    bf:2c:b9:09:30:e3:cc:20:52:bf:e1:40:0c:a9:9e:
                    48:33:3e:3a:63:40:0d:bb:aa:08:de:5f:75:f7:b7:
                    66:85:19:a0:38:bc:8b:d2:1c:82:2a:de:a0:ee:dc:
                    df:dc:4f:ce:03:07:62:d9:08:85:7e:b0:b7:3d:58:
                    f7:c8:4d:9b:71:53:6d:77:d1:15:b9:f3:d4:28:ee:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:46:8F:61:11:E9:AB:C1:64:37:AF:02:A3:FB:40:F1:A5:21:E9:50
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137302e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:11:9d:86:cb:4d:ee:cd:dd:79:5f:d1:cc:33:90:9e:de:
         0d:d0:9a:50:2e:cb:47:2b:2a:fc:76:83:98:c3:7e:1a:cb:92:
         62:b4:bb:db:ec:ba:cd:14:b8:2c:52:48:ef:88:49:bb:fa:c5:
         e6:94:c4:d7:bb:09:ea:24:96:96:d7:44:33:8c:89:8b:c0:f0:
         ba:4a:11:f3:70:df:a2:8c:14:ea:f4:e1:bf:fe:8d:00:db:6b:
         bc:b3:69:fc:86:97:ef:32:a2:a9:c9:4b:e3:bd:10:7c:fb:39:
         1e:c1:2f:9d:34:06:8f:93:e4:2b:0d:7c:fd:2f:30:8a:02:6f:
         fe:c9:26:f4:16:e4:35:59:6f:c6:a3:d7:a1:44:c1:38:62:a8:
         fa:75:25:04:3f:24:5d:54:61:f5:a7:5b:8e:26:c4:75:b2:05:
         d4:50:e5:40:5b:6a:11:57:dd:43:ce:42:8d:83:8d:69:5e:36:
         31:95:cd:c9:62:e9:31:8a:db:f0:e2:42:7d:a7:8f:27:f5:1f:
         3f:ed:21:2f:41:d0:96:49:94:58:ca:ee:31:a2:83:aa:46:71:
         e3:c3:05:c2:f2:00:9c:0f:cf:a1:cc:3c:76:55:29:e7:eb:e7:
         04:88:e8:4e:c6:63:6a:49:6a:07:4c:d3:2c:7d:df:11:1a:a5:
         f2:80:3d:3d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITYNfRCnzy7RCJOn45zO2SyQWytTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygxNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEy
NTJEMzY0MB4XDTIzMDExOTIzMDExM1oXDTI0MDExODIzMDYxM1owMzExMC8GA1UE
AxMoOUQ0NjhGNjExMUU5QUJDMTY0MzdBRjAyQTNGQjQwRjFBNTIxRTk1MDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALAQk11CpEqk4TtyM2KqSNdZQY9T
RzMR8JhOzeo9QmfPta4Weke4S3gjQ5pBim6r+zifSUfQJNyDP2R0n/SPZ8CtsJ50
lj1xXFvvcemef/DS4LV+8DEzsrz0YzAMZaQBis/OtUFdaUwkW0zuJoBtPwfY3StW
piKgO9noRseFlY3Vm0xUzrAxvcIQ3x/O1LWkpgQMuv5hsvM81bZ9lkFxMhYVZ21j
6jZAEnmSQZ8JDmmENsXxvyy5CTDjzCBSv+FADKmeSDM+OmNADbuqCN5fdfe3ZoUZ
oDi8i9IcgireoO7c39xPzgMHYtkIhX6wtz1Y98hNm3FTbXfRFbnz1Cjuos8CAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBSdRo9hEemrwWQ3rwKj+0DxpSHpUDAfBgNVHSME
GDAWgBQUnyBTgo6da4ywle8/HXJUElLTZDAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9HQUxRMkdqRFFTc1lRbTdDU1h0SGV3UUhmUUY4UXF0Qkh2czRNZ0htMXF4
eC8xLzE0OUYyMDUzODI4RTlENkI4Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvMTQ5RjIwNTM4MjhFOUQ2QjhD
QjA5NUVGM0YxRDcyNTQxMjUyRDM2NC5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
R0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFxeHgvMS8z
MTM2MzgyZTMxMzIzMTJlMzEzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUz
MjM1MzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAKh5qjANBgkqhkiG9w0BAQsFAAOCAQEAVP4RnYbL
Te7N3Xlf0cwzkJ7eDdCaUC7LRysq/HaDmMN+GsuSYrS72+y6zRS4LFJI74hJu/rF
5pTE17sJ6iSWltdEM4yJi8DwukoR83DfoowU6vThv/6NANtrvLNp/IaX7zKiqclL
470QfPs5HsEvnTQGj5PkKw18/S8wigJv/skm9BbkNVlvxqPXoUTBOGKo+nUlBD8k
XVRh9adbjibEdbIF1FDlQFtqEVfdQ85CjYONaV42MZXNyWLpMYrb8OJCfaePJ/Uf
P+0hL0HQlkmUWMruMaKDqkZx48MFwvIAnA/Pocw8dlUp5+vnBIjoTsZjaklqB0zT
LH3fERql8oA9PQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org