Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32322d3232203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3232203d3e203532353435.roa (raw, json)
Hash identifier:          4E4w4brN+FpC7owtQ2o1M9eswYwib3arsnye7M8xnSM=
Subject key identifier:   50:B6:03:46:C3:27:C6:F1:1D:D3:BD:F0:8F:AA:67:32:37:0A:4F:E6
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       2A4B1561198D00189ABF88867B0B702245ED2BCA
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32322d3232203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:13 +0000
ROA not before:           Thu 19 Jan 2023 23:01:13 +0000
ROA not after:            Thu 18 Jan 2024 23:06:13 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4b:15:61:19:8d:00:18:9a:bf:88:86:7b:0b:70:22:45:ed:2b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:13 2023 GMT
            Not After : Jan 18 23:06:13 2024 GMT
        Subject: CN=50B60346C327C6F11DD3BDF08FAA6732370A4FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:5d:b3:cd:b2:82:34:1a:95:de:45:d8:f1:
                    79:ea:f6:a1:df:10:0f:bb:8b:6c:f9:d9:05:35:50:
                    2d:a6:58:84:ec:9f:df:c4:5b:e9:e1:3f:e2:fd:44:
                    cb:6b:ce:16:81:2a:2f:f1:07:2f:f5:f6:71:f8:b2:
                    61:71:e2:7c:54:62:6e:14:d6:12:84:7a:a8:32:73:
                    62:95:66:ab:15:c2:79:d2:7f:90:38:ac:f1:b7:ac:
                    7b:76:d8:eb:fb:42:a1:3a:d4:d0:1f:3c:0b:6c:4f:
                    78:f5:49:d3:22:66:6f:4b:4c:67:a5:48:41:26:41:
                    61:cd:57:ff:ea:e2:89:51:33:29:96:70:9a:ba:ed:
                    2b:46:f8:1c:04:b1:aa:44:5d:44:2b:0b:f3:9c:89:
                    8e:45:34:1c:9b:cd:6e:5d:d9:4f:0f:2f:a3:cd:38:
                    91:2e:63:3e:39:3b:ab:3e:e5:db:10:3b:59:45:aa:
                    ff:df:da:73:c0:15:2e:a4:f2:87:a4:95:ba:02:63:
                    0f:94:37:78:d2:91:80:74:3b:79:40:bb:ae:3c:a1:
                    35:cd:63:4a:b6:78:e0:83:9b:a0:53:f5:40:be:63:
                    46:28:bc:9c:8b:17:93:0f:e6:33:1b:4a:42:e9:92:
                    e9:10:c2:d3:2f:79:83:2c:2e:a0:83:6c:d3:8b:6e:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B6:03:46:C3:27:C6:F1:1D:D3:BD:F0:8F:AA:67:32:37:0A:4F:E6
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32322d3232203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:83:e1:3f:17:9b:56:72:2c:9d:93:0d:c8:1f:ef:a6:2c:ca:
         71:67:17:20:4d:6a:a7:f6:60:97:e8:d0:b9:34:10:88:46:19:
         ec:d9:70:42:31:4c:1e:73:44:3c:d1:91:f4:46:2d:64:8f:7f:
         67:96:bb:f2:10:7c:a1:04:af:cf:b9:8d:48:21:c0:a7:ea:07:
         bf:15:02:60:16:13:fa:e5:be:28:95:dd:dd:0b:4e:9a:70:75:
         56:e4:3c:00:45:99:78:7c:91:62:1f:d3:b7:a8:ea:0f:2d:05:
         af:fe:c5:a0:37:52:bb:bb:9f:98:67:b7:16:1f:b6:52:bc:01:
         1e:49:d3:76:03:ae:2f:1f:e4:47:3d:34:9d:f3:03:3c:5e:6a:
         cf:ca:98:6e:c2:35:d4:cb:5e:61:1f:2b:6e:66:29:70:bb:61:
         82:82:5b:30:9b:c6:e9:bd:84:d4:cc:a4:34:ac:16:c8:bd:62:
         04:7a:8d:69:b7:fa:ad:dd:22:13:56:6f:8b:c8:4f:07:19:53:
         75:b3:bf:76:05:a3:a4:b7:4c:3b:e7:23:49:e7:fc:5b:a9:cc:
         8b:be:d2:82:73:f9:d6:a8:92:a0:a0:03:71:a1:ca:c7:fb:43:
         7c:72:b5:03:5a:34:f1:1c:77:5c:ec:48:63:7e:d2:c8:19:dd:
         4e:73:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org