Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32332d3233203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          jLk0w5HvnWBEV1HzUY+RlTBE4bPmPc6SKVyL/UbiwJI=
Subject key identifier:   37:FE:08:4E:48:8D:8E:C4:C1:39:C5:89:09:1B:D9:02:35:7D:A4:52
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       4A69D16976A4BD74ED784A1656C6D1C3D408C666
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32332d3233203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:12 +0000
ROA not before:           Thu 19 Jan 2023 23:01:12 +0000
ROA not after:            Thu 18 Jan 2024 23:06:12 +0000
asID:                     52545
IP address blocks:        170.82.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:69:d1:69:76:a4:bd:74:ed:78:4a:16:56:c6:d1:c3:d4:08:c6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:12 2023 GMT
            Not After : Jan 18 23:06:12 2024 GMT
        Subject: CN=37FE084E488D8EC4C139C589091BD902357DA452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:ae:82:41:d4:4b:f9:42:65:ff:d1:3e:9b:
                    13:85:b9:80:66:dd:0d:dc:cb:db:1b:69:3b:28:d0:
                    41:a1:93:79:58:00:26:c7:e2:bc:83:41:21:ce:78:
                    c8:1e:17:8d:ee:6c:8f:8c:8e:58:09:ee:af:49:ab:
                    95:28:99:cb:51:c4:75:79:08:6d:65:ed:b5:34:44:
                    95:7d:41:51:06:c7:a6:88:20:60:fd:0c:4c:2e:ae:
                    38:7d:8d:8e:53:1c:5b:91:b3:42:2d:6e:c1:9c:cf:
                    bf:97:cb:57:f4:cd:0e:bb:a2:a2:50:a6:fa:f6:54:
                    c3:33:c8:dd:8b:e0:ec:18:e8:0d:a9:ea:fd:d3:1a:
                    e1:ef:7f:b4:9c:83:a6:51:36:cf:40:ec:4a:d0:bd:
                    ff:5a:ad:cb:24:a7:18:2b:1d:8e:4b:e5:a7:7c:fd:
                    17:d6:d7:c6:06:54:44:8b:f5:7e:4c:42:14:75:cb:
                    8e:df:af:46:ee:24:4b:3b:ac:21:da:e2:83:5f:67:
                    58:66:b6:fd:3e:1b:b7:9a:b0:ec:3f:88:83:ad:e3:
                    4e:14:a5:fa:9f:a4:b3:d5:ce:06:93:9b:7a:cf:c1:
                    52:9a:70:2d:40:1b:f4:bc:62:d8:0d:bd:db:26:2c:
                    57:e4:63:97:a8:bb:79:53:66:28:3f:e1:3d:fc:c1:
                    ca:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FE:08:4E:48:8D:8E:C4:C1:39:C5:89:09:1B:D9:02:35:7D:A4:52
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:c7:2b:78:42:1e:b1:8b:51:28:59:ac:0c:99:3a:2a:df:a3:
         fc:6d:62:e9:9c:41:97:50:0c:10:03:80:86:d0:ca:12:56:20:
         d5:8f:c6:03:4e:66:35:e3:fa:27:fd:b1:1f:d8:54:af:d3:f1:
         81:47:ea:20:89:e3:f7:73:f9:fb:74:e0:85:ca:9f:d1:80:9b:
         e7:a0:17:1b:e0:f9:2e:3b:30:75:d9:4a:64:4d:26:8e:45:9e:
         86:52:27:c2:e5:0b:08:e7:35:2b:68:34:bf:b5:39:af:5b:39:
         53:cf:12:3e:26:eb:30:42:74:27:da:55:15:f6:29:d0:48:76:
         7b:cf:48:31:65:68:4e:28:c9:61:89:64:aa:aa:da:b3:58:79:
         8e:97:f0:2d:51:fc:ab:3c:9f:a4:e8:a1:07:b9:7f:08:ed:25:
         bd:dc:b2:a3:9c:fb:bd:b5:40:68:87:3b:bc:b8:ff:82:8f:6e:
         ba:6e:88:94:5e:cb:23:35:13:41:5b:9a:75:9f:59:34:03:54:
         85:7e:87:43:04:fd:7b:2c:2e:81:11:85:2e:4c:71:99:a8:bf:
         9b:57:d2:f9:94:08:cc:05:25:a5:24:4e:2c:1a:9c:b4:65:c5:
         c8:fb:f6:27:41:63:36:e8:90:ad:cf:96:08:13:64:cb:68:b9:
         33:bc:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org