Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          lxEyfJrDse5lK9LC+OyZDtDf7s3f9Wle4Li1t8iV7J4=
Subject key identifier:   05:83:D3:B3:BB:2C:EE:EB:56:76:82:B2:41:0F:8A:26:0A:62:89:FF
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       3B34D31CA9CD23009366D184E1D8553003039AEA
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 30 Oct 2023 21:40:40 +0000
ROA not before:           Mon 30 Oct 2023 21:35:40 +0000
ROA not after:            Mon 28 Oct 2024 21:40:40 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:34:d3:1c:a9:cd:23:00:93:66:d1:84:e1:d8:55:30:03:03:9a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Oct 30 21:35:40 2023 GMT
            Not After : Oct 28 21:40:40 2024 GMT
        Subject: CN=0583D3B3BB2CEEEB567682B2410F8A260A6289FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ef:39:d8:e0:57:b0:8c:5c:16:b4:6c:f3:e8:
                    09:89:11:0c:b5:a7:03:26:cd:aa:4a:10:8c:d8:2a:
                    be:76:bd:bd:84:f3:ce:23:8c:81:1e:e8:70:a0:4c:
                    79:1d:40:32:9f:fa:c7:0f:07:47:aa:c7:cc:e5:ee:
                    85:dd:cf:f0:8c:fe:27:31:ee:eb:a6:dd:ca:0d:36:
                    4a:e7:b3:7c:92:a2:79:72:8a:45:6e:59:e7:43:18:
                    b1:58:ff:9c:63:71:47:30:03:06:2c:b8:22:30:a2:
                    42:44:7a:94:e9:1a:20:af:b3:ce:15:92:40:3b:42:
                    87:d6:af:31:2d:36:82:fb:bd:76:35:11:34:1b:6f:
                    1d:2b:8b:65:17:e9:f9:5a:cb:c1:c4:a9:60:b6:77:
                    a2:1f:b4:7f:8f:e3:c7:39:ba:c7:c4:26:3e:ab:a3:
                    ee:1f:ad:78:1e:4a:c0:61:7a:ae:19:5f:0a:b2:8c:
                    6f:b7:68:bc:31:f8:4d:f2:3d:ef:e8:32:8d:a0:9a:
                    6a:61:db:b1:20:95:58:a5:8e:f9:a0:17:75:e3:14:
                    18:d7:87:5b:4c:36:e8:0c:16:17:68:e1:8b:19:3d:
                    92:09:01:a2:cc:39:8d:c8:9b:c1:6b:77:64:1d:d9:
                    3a:d7:55:3a:4a:31:da:63:58:5d:b0:5a:1f:82:cf:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:83:D3:B3:BB:2C:EE:EB:56:76:82:B2:41:0F:8A:26:0A:62:89:FF
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:cd:5b:67:83:62:0a:cc:cd:ff:c9:bb:3b:a2:49:9b:59:
         21:55:dc:4b:6a:f8:f9:83:a1:a0:0b:4e:b9:f2:b3:5d:dd:74:
         92:f8:29:73:59:30:53:98:69:7f:9f:57:43:4b:61:55:23:db:
         5a:5f:ce:9c:15:a3:47:bb:5e:2b:2b:cd:88:f6:76:8f:7f:d6:
         9d:ae:b9:20:7d:c4:b5:93:b2:b9:a4:0b:6b:6c:fc:18:96:c8:
         9a:a2:98:e9:a4:5e:6f:e7:d2:ac:f8:61:7f:82:af:64:dd:61:
         6d:33:6d:f4:32:01:aa:d4:c7:9d:ed:18:99:da:a5:73:df:16:
         67:ea:38:b3:c2:77:d0:3c:2b:3c:64:01:3f:91:c6:2e:a2:88:
         e3:97:66:15:78:50:14:93:d4:5f:93:02:7f:87:b1:50:b8:91:
         60:34:fa:2a:07:e2:c4:90:7e:01:36:19:0f:ee:7a:34:9a:aa:
         48:31:fd:eb:ec:47:b1:07:57:16:c5:b5:ad:16:78:90:ca:b3:
         b3:64:2c:90:42:6b:c8:ad:25:ff:19:76:64:d4:32:ac:61:bb:
         b4:72:cd:25:b1:1c:e2:0b:c5:80:c9:1f:8c:32:bc:10:c2:f9:
         fd:66:df:4b:44:23:f9:e6:e0:a8:d9:0c:1d:3d:34:ec:cd:93:
         87:33:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org