Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136392e302f32342d3234203d3e203532353435.roa
File:                     3137302e38322e3136392e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          +XcoAprC+gKizT1+fZg2DwJX2ZS6Lnl0UwxpfTvf9Q0=
Subject key identifier:   B7:CD:09:70:08:AB:53:87:B6:72:D5:B7:C1:55:33:78:DA:D5:B4:C2
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       27EF2A0BD1F3E3DC4F36D2B4668654E4C50ABDDB
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136392e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:13 +0000
ROA not before:           Thu 19 Jan 2023 23:01:13 +0000
ROA not after:            Thu 18 Jan 2024 23:06:13 +0000
asID:                     52545
IP address blocks:        170.82.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:2a:0b:d1:f3:e3:dc:4f:36:d2:b4:66:86:54:e4:c5:0a:bd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:13 2023 GMT
            Not After : Jan 18 23:06:13 2024 GMT
        Subject: CN=B7CD097008AB5387B672D5B7C1553378DAD5B4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:21:df:a7:c7:f8:62:55:ed:9f:97:70:32:
                    7a:c9:8f:bd:8c:8f:b8:b3:8d:ec:83:59:f4:d1:1f:
                    2f:4e:28:ba:ac:c6:51:ae:66:54:8f:ff:6e:17:d2:
                    ea:57:9c:d5:01:63:7c:7e:9c:54:57:db:55:1d:3f:
                    95:c2:8c:e3:05:d2:8d:6d:21:7a:58:f8:7e:6a:51:
                    89:7c:74:5e:14:32:b5:b4:a0:97:8e:b8:32:32:0b:
                    c7:3a:aa:7d:7d:55:f9:5a:a4:47:54:b4:d3:01:00:
                    14:27:c5:93:73:c9:4c:40:5c:86:97:5b:a1:a6:ed:
                    fc:07:c2:3e:2a:1f:85:56:24:72:02:f8:29:d9:35:
                    6d:13:b5:b6:1e:91:09:33:46:72:05:a5:e8:5d:42:
                    9d:20:c3:9e:80:dd:97:27:49:aa:08:ff:4d:9c:61:
                    e3:aa:31:70:4e:30:ca:5f:87:38:f5:c7:e4:da:0a:
                    a2:4f:84:a0:3f:71:ec:d2:98:00:de:44:bc:78:44:
                    0d:1b:ed:f4:17:12:67:bb:ad:d6:9f:bf:3d:ba:00:
                    4d:0f:7c:0b:0c:75:5b:18:0f:5a:a7:32:81:a9:19:
                    04:9a:2b:9e:cc:cb:0a:6a:5b:5c:5a:f4:72:70:6d:
                    6c:89:56:88:bb:d8:72:06:37:b1:1f:d0:fd:1b:3c:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:09:70:08:AB:53:87:B6:72:D5:B7:C1:55:33:78:DA:D5:B4:C2
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3136392e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:66:48:3b:f3:3b:88:f5:c5:7d:c2:ba:bf:8d:31:c0:b3:b5:
         1b:30:65:c9:9d:f3:a8:ba:f4:78:50:df:a2:b3:93:9f:2d:90:
         4b:7d:4b:74:be:b7:8f:e0:7c:8b:a6:5b:5d:69:8a:fc:1f:1d:
         d2:c8:94:cd:53:f8:50:54:6a:f2:c7:a5:82:e3:85:c6:03:1c:
         c9:45:b0:3e:87:4c:5f:7d:e6:c3:87:92:99:9e:94:88:2f:c2:
         b5:c1:e8:a4:c0:53:cc:4e:a1:6b:23:06:cb:38:09:73:9f:8a:
         a2:7b:3e:c1:2d:7f:60:ab:25:8d:db:f6:af:c5:93:b8:97:4e:
         b5:63:bb:ce:88:bb:5a:30:90:7d:96:54:d8:5a:9d:99:7a:1b:
         ac:9b:3a:3c:0a:e6:98:50:b8:19:d0:a8:76:26:67:77:3a:ee:
         ff:0d:65:be:cc:c6:4e:77:45:a1:f7:d1:94:1d:ed:33:18:0e:
         f8:4f:b2:51:43:28:ba:19:90:71:e0:66:4d:0d:cd:5d:7a:ac:
         f0:e6:42:0a:bd:72:b8:6c:4d:d4:b8:d2:2b:cf:d9:84:25:89:
         7a:96:64:cb:21:66:c7:24:c2:c2:74:36:79:89:47:06:0c:3d:
         78:ba:a2:2c:ee:77:83:75:32:9d:ab:44:18:fd:6f:0a:79:d5:
         16:34:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org