Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137302e302f32332d3233203d3e203532353435.roa
File:                     3137302e38322e3137302e302f32332d3233203d3e203532353435.roa (raw, json)
Hash identifier:          6b3EcTzKk2WcB4UK/DX0bGB8J0haZpNLD+jKnKU/ORQ=
Subject key identifier:   43:BE:C0:92:50:DA:F2:C2:9A:FE:22:F9:DE:CB:B6:BF:11:3B:CC:A7
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       5F5F5906371834980A3849A9E8A9D33D5B54105F
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137302e302f32332d3233203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:14 +0000
ROA not before:           Thu 19 Jan 2023 23:01:14 +0000
ROA not after:            Thu 18 Jan 2024 23:06:14 +0000
asID:                     52545
IP address blocks:        170.82.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5f:59:06:37:18:34:98:0a:38:49:a9:e8:a9:d3:3d:5b:54:10:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:14 2023 GMT
            Not After : Jan 18 23:06:14 2024 GMT
        Subject: CN=43BEC09250DAF2C29AFE22F9DECBB6BF113BCCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:c1:73:95:84:be:4e:bd:a8:78:52:12:d6:
                    b1:c7:37:7e:13:3d:3b:21:8a:1d:aa:aa:82:b0:8f:
                    3e:1f:20:8a:86:90:df:c3:41:52:7b:f9:0c:2d:ec:
                    0c:1c:d4:25:b6:91:92:6b:9b:e5:d3:50:29:ee:29:
                    06:b8:42:ca:7c:27:d7:ab:d5:77:09:57:a3:0f:ed:
                    1e:8d:bf:a9:b0:3d:12:13:af:10:b9:e0:41:64:15:
                    89:65:9c:6f:b0:cb:68:5f:ed:e9:e0:62:a6:d0:7c:
                    db:29:77:d0:13:bb:da:60:92:54:7b:cd:df:1c:3d:
                    15:a8:74:82:b1:eb:ce:22:14:bb:4f:5d:c4:b6:7f:
                    4b:31:93:2d:be:68:cf:20:c3:3e:f5:f9:2c:05:01:
                    7a:7b:af:3a:62:40:67:97:0a:3f:6c:31:8c:fc:e8:
                    df:55:32:42:0f:88:21:74:0c:90:b2:6d:d7:34:7d:
                    11:51:88:0a:39:1d:75:46:54:3a:1b:cb:17:35:5b:
                    2c:23:24:a9:5c:78:04:f1:4f:29:bf:6f:d5:e3:13:
                    40:95:1f:ca:5c:1e:43:c4:d2:f0:d3:33:bb:fe:ab:
                    d9:ef:67:33:75:42:66:c8:2d:03:92:d6:bd:e4:c9:
                    9b:98:dd:11:47:ac:ad:ac:61:0f:a3:62:d7:bf:6d:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BE:C0:92:50:DA:F2:C2:9A:FE:22:F9:DE:CB:B6:BF:11:3B:CC:A7
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137302e302f32332d3233203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:39:97:f2:1f:a1:b3:95:6d:95:b8:42:7e:55:2c:47:dc:39:
         db:fc:c8:6b:82:c4:f6:50:74:8e:0d:42:23:32:2b:7d:7c:68:
         d2:88:0f:6a:be:db:f7:cd:9d:ba:4f:2e:b3:d9:c3:61:75:a4:
         22:fc:a7:df:a2:d6:71:16:a9:7f:1b:b4:86:80:b6:ae:0b:cc:
         07:05:98:4a:c7:41:bd:a9:a1:93:87:4d:6c:fa:81:ab:7b:bf:
         93:8c:0d:29:f1:8c:d0:fa:7f:1c:23:56:9b:ab:36:b5:4b:81:
         8a:b5:95:17:e6:12:5d:aa:ce:91:29:65:f3:c4:a3:11:6b:a3:
         77:e9:75:8e:3a:12:a0:85:f7:42:58:d6:42:4e:8c:98:40:63:
         5e:3d:2d:8c:2b:23:bb:1b:2c:c7:d9:5a:4c:fa:83:3c:73:b2:
         e9:f5:38:fa:5f:34:51:3a:09:24:e1:9e:06:b8:63:3c:8c:3a:
         42:0b:71:79:11:ca:03:be:ae:ef:50:14:ff:c1:58:b6:e2:5a:
         5d:cb:85:a4:d4:c6:fa:58:cb:8b:12:5a:85:3d:af:a1:02:4f:
         26:8d:d2:d8:ce:31:60:10:89:b4:6b:15:9b:af:d4:58:a1:1e:
         55:38:a8:e3:12:50:74:ad:b9:26:4f:37:7b:b6:d5:b9:ee:26:
         b2:19:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org