Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137312e302f32342d3234203d3e203532353435.roa
File:                     3136382e3132312e3137312e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          enNzUP+jcNBHwHA6fX51EFTpEA65I5+LtjfvxF44+Lo=
Subject key identifier:   AB:65:27:18:49:33:29:9B:5A:1D:4F:59:7F:CF:9C:A8:4C:64:BA:7A
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       6F7FC63C41018847BDB65B741C1F5B70A250EDE5
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137312e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:14 +0000
ROA not before:           Thu 19 Jan 2023 23:01:14 +0000
ROA not after:            Thu 18 Jan 2024 23:06:14 +0000
asID:                     52545
IP address blocks:        168.121.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7f:c6:3c:41:01:88:47:bd:b6:5b:74:1c:1f:5b:70:a2:50:ed:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:14 2023 GMT
            Not After : Jan 18 23:06:14 2024 GMT
        Subject: CN=AB6527184933299B5A1D4F597FCF9CA84C64BA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:87:05:86:d0:8d:9f:88:f5:24:5a:af:f8:88:
                    cf:15:e9:23:1a:70:1b:19:2f:c7:20:a4:d8:d3:48:
                    67:9d:54:c9:72:c5:2d:c8:b2:7e:3c:71:66:e9:3d:
                    e9:9a:ef:e9:07:67:0a:a0:bc:37:e7:69:3c:08:df:
                    38:24:19:01:1d:15:38:aa:64:62:fa:8c:06:6e:1a:
                    4d:15:33:e8:73:61:56:83:43:e4:6a:d2:58:79:d4:
                    7e:c9:7a:cd:e4:e9:b8:ca:20:75:94:4e:19:7c:09:
                    d4:8a:50:4d:40:cc:ec:dd:ca:54:6e:ae:45:f0:55:
                    6b:c3:95:41:81:83:c4:15:a4:06:07:a0:b6:35:fc:
                    bf:f5:f3:b1:ee:c5:15:3a:88:e6:61:c7:ec:cb:9d:
                    dd:f7:0a:fc:8b:6b:57:5f:05:01:b0:d7:c3:b9:77:
                    f3:04:09:86:10:75:5b:62:b8:43:8d:57:ee:7c:eb:
                    f4:5d:3a:1a:22:9c:3d:99:76:a2:c1:df:4a:7f:52:
                    81:64:1f:fa:c1:8d:d9:30:4d:0d:24:7c:df:06:0b:
                    05:23:42:ed:0f:4d:38:13:8e:e6:af:32:aa:65:cd:
                    98:b1:01:4c:1c:8e:ef:f0:8c:f5:d8:b4:57:f6:41:
                    b1:39:7f:a2:f5:33:b1:23:e2:1c:31:a6:04:95:18:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:27:18:49:33:29:9B:5A:1D:4F:59:7F:CF:9C:A8:4C:64:BA:7A
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3136382e3132312e3137312e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:37:b6:57:1e:41:e1:cb:e5:99:ee:50:3f:40:78:51:b6:95:
         99:de:4e:79:69:60:30:2f:aa:cd:0a:51:52:80:46:51:8a:bd:
         88:99:8d:b3:0c:46:88:94:c7:4a:a6:54:29:42:cb:c0:e7:ea:
         00:05:be:41:56:70:b0:9c:bb:6a:5c:0d:e6:92:9c:57:a5:f2:
         f1:e2:be:8a:7a:a2:7f:1c:1f:56:ba:a0:31:5e:9b:ea:15:b5:
         7a:2d:35:7e:3d:f5:ae:65:ab:e4:f6:b0:10:e5:24:98:7e:69:
         e9:dc:12:79:5e:d6:f1:45:9d:7c:a6:11:d3:e8:5a:b9:42:31:
         2c:9f:f7:d2:6b:f2:c4:be:a4:b2:6d:89:07:4e:d6:2f:6b:7d:
         68:79:1a:d5:09:24:b6:c1:5a:15:27:ed:66:51:87:14:7e:4d:
         d5:2e:13:0b:c0:70:52:45:dc:06:4c:3a:e6:3f:bf:23:69:82:
         74:69:5c:ca:fb:ec:45:6b:42:79:83:78:65:64:b2:99:26:81:
         ab:92:8e:a6:14:9d:0b:04:c6:39:b1:9f:23:5b:36:8e:c3:b8:
         0f:8c:83:20:db:24:9b:9a:22:b8:77:01:b7:9f:df:ff:c0:52:
         c4:0c:94:b2:28:71:d1:fb:82:2b:82:ed:82:52:71:09:69:92:
         ba:2f:2a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org