Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32342d3234203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          B67DuVNFi/BRV+nyHh8DxKW4Rv6Lq5grwETd6NuX/RM=
Subject key identifier:   84:F9:CB:A9:4D:10:4F:32:B1:0A:B2:AD:BF:8A:78:27:FF:53:38:D6
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       49953C9A390D59E4C7C75EAED1E7B1E95616ECBA
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:12 +0000
ROA not before:           Thu 19 Jan 2023 23:01:12 +0000
ROA not after:            Thu 18 Jan 2024 23:06:12 +0000
asID:                     52545
IP address blocks:        170.82.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:95:3c:9a:39:0d:59:e4:c7:c7:5e:ae:d1:e7:b1:e9:56:16:ec:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:12 2023 GMT
            Not After : Jan 18 23:06:12 2024 GMT
        Subject: CN=84F9CBA94D104F32B10AB2ADBF8A7827FF5338D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:97:88:4d:32:38:cc:09:7e:44:40:45:46:
                    26:d2:60:77:ee:88:54:26:6b:68:5c:9c:f5:ff:9d:
                    67:36:b2:90:77:7d:a7:a9:6e:7f:44:dd:03:23:31:
                    af:2b:27:b1:d5:1e:44:55:fd:76:57:f2:e7:83:f8:
                    b6:ca:7f:a4:71:cf:52:89:56:5b:13:35:d7:bc:70:
                    d7:7d:86:b0:b9:4f:e3:56:0f:a1:82:3b:ee:b0:16:
                    a7:74:47:3c:15:4c:d4:0e:51:96:56:db:76:6b:0c:
                    31:49:48:ff:98:af:de:4f:41:3d:6b:fb:f1:7c:31:
                    ab:2b:58:c8:79:27:af:88:de:d8:fc:75:9f:53:6a:
                    c4:49:73:cc:b5:e7:52:4f:ba:99:1d:0d:0f:25:c6:
                    83:73:22:c9:7d:db:51:c2:2c:b5:26:94:c4:38:d3:
                    38:29:fd:c2:f8:c8:dd:35:e0:72:bf:39:de:8b:e1:
                    20:6a:c4:29:49:cb:1e:8a:54:f1:08:49:9b:f0:31:
                    35:ac:30:03:ed:91:33:69:af:c0:42:e2:cc:7c:25:
                    a8:a0:64:d3:51:aa:65:2a:18:8f:d8:3a:81:e7:e5:
                    1f:16:01:97:9b:d3:31:00:38:d4:b2:fd:96:75:63:
                    af:58:39:3f:0e:9a:21:e1:6e:7d:25:87:46:70:08:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F9:CB:A9:4D:10:4F:32:B1:0A:B2:AD:BF:8A:78:27:FF:53:38:D6
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136382e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:77:ec:58:8d:95:bd:52:e4:3e:f9:a2:51:4e:56:ac:52:c4:
         db:9f:df:3f:7d:0b:c4:7f:bf:ea:1f:54:d2:a3:75:22:8c:64:
         54:7a:10:e1:fa:e7:0f:43:3a:f8:d0:d8:a4:6e:2e:65:f1:4f:
         5e:5d:e1:b7:ef:6b:fc:e4:a3:01:06:39:e0:40:43:0c:03:a3:
         23:05:41:90:6b:7a:3a:b4:1a:af:ef:66:e1:62:43:96:fc:84:
         da:49:9c:25:bf:be:17:1b:13:b5:52:23:41:40:bf:52:6e:80:
         32:9e:a9:a4:07:a7:e5:2e:cb:24:35:6e:bd:4e:36:0a:ba:82:
         14:1b:a1:2d:5e:6e:81:16:27:13:ae:09:0f:cf:5d:03:3b:0c:
         ff:f6:8e:86:c6:13:7f:cc:52:f2:42:94:55:61:2f:e8:11:f6:
         1e:ba:11:3b:4d:9b:90:b1:93:a3:4e:45:39:bb:8e:57:f0:b4:
         d6:e0:8c:e0:d0:19:30:29:16:2c:8c:ff:95:cf:72:37:57:32:
         df:4a:fc:92:f8:ac:35:c7:a3:f1:bc:91:a7:ea:67:81:4d:bb:
         63:c5:c5:74:6e:8f:cf:af:d2:2b:af:ad:e7:d6:3f:7f:7d:81:
         96:90:5c:85:62:f1:f3:b2:52:71:e1:1b:0f:06:8a:59:31:9b:
         a9:20:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org