Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137302e302f32342d3234203d3e203532353435.roa
File:                     3137302e38322e3137302e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          +l28pclRIT0fn4yG/itd/HaZeHiP5ptsU19DsSx4+KU=
Subject key identifier:   FC:7E:CE:B2:05:33:14:A3:CE:BB:94:FE:F3:13:F1:2C:62:2E:CB:05
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       3970562798DC082CF959C459C2EB85EB504E58DE
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137302e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:15 +0000
ROA not before:           Thu 19 Jan 2023 23:01:15 +0000
ROA not after:            Thu 18 Jan 2024 23:06:15 +0000
asID:                     52545
IP address blocks:        170.82.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:70:56:27:98:dc:08:2c:f9:59:c4:59:c2:eb:85:eb:50:4e:58:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:15 2023 GMT
            Not After : Jan 18 23:06:15 2024 GMT
        Subject: CN=FC7ECEB2053314A3CEBB94FEF313F12C622ECB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:df:15:ef:72:22:b2:0b:d6:71:77:06:1b:
                    42:5c:12:90:dc:0c:b2:1c:6d:5c:af:ed:f9:e8:4a:
                    3d:6d:42:7a:5c:8c:a6:ae:6f:88:35:48:2e:2f:28:
                    72:b2:28:db:98:22:4c:2f:b0:ff:b7:9b:9c:8f:fb:
                    61:0a:75:5a:43:1b:6b:7a:a9:b4:a5:27:8f:50:46:
                    cc:06:a6:23:47:06:7f:c8:ed:46:77:07:a1:33:cc:
                    a0:b7:19:ad:66:9a:90:84:e7:5c:fd:b4:06:c9:db:
                    c9:94:98:f0:f9:7c:f8:e0:e5:27:c6:42:f7:c4:82:
                    09:a5:d9:00:05:67:91:3d:27:b4:0c:0d:76:c3:65:
                    e5:51:fd:28:d7:92:79:51:ce:b0:d4:3a:ff:af:4d:
                    e5:5c:39:49:d1:b1:84:18:14:81:a8:85:94:28:e3:
                    57:4d:f4:17:a8:1f:d6:ed:59:c2:d5:ae:e1:e3:da:
                    03:35:d6:a0:5c:ce:9f:2e:91:36:3e:3f:27:e5:6d:
                    1f:7b:14:6a:93:2a:8c:ad:9a:69:2b:de:3c:07:05:
                    14:fc:56:2b:f0:b9:1c:25:97:2b:17:b1:85:e8:12:
                    45:8a:4c:d0:93:4a:66:b8:2d:b9:ac:8a:c2:32:ac:
                    07:4b:c1:7a:2a:9d:00:10:4c:f2:af:d6:7b:8e:28:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:CE:B2:05:33:14:A3:CE:BB:94:FE:F3:13:F1:2C:62:2E:CB:05
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137302e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:dc:95:04:19:6b:07:fa:d1:de:59:75:90:6a:b9:8e:95:
         6d:5a:cd:e9:9b:99:d0:69:71:2f:60:f6:c2:fa:b7:49:5a:84:
         b8:2d:d2:82:70:0b:4c:83:8f:4a:75:5a:ef:1f:c6:07:c1:fe:
         a8:72:8a:d1:85:cf:a0:31:27:2b:3a:d5:5e:49:aa:06:3d:b3:
         62:ec:64:3d:f4:88:52:63:76:b6:51:5e:e5:02:97:ef:03:9f:
         11:68:d2:4b:90:90:a2:6c:7e:a7:90:ee:b1:16:94:f0:c2:fc:
         c6:44:bb:75:8d:6e:2d:ef:ae:4f:e9:88:73:6e:0e:0b:79:07:
         d3:67:72:8c:35:c3:0e:34:e4:49:b7:3a:e8:eb:ca:8a:7a:ec:
         59:70:16:94:19:0d:3a:b9:0f:58:5b:97:fa:27:7d:63:a8:eb:
         2c:64:d6:41:51:36:6e:4c:8f:cb:a7:48:69:ab:b1:d6:de:2c:
         db:9f:78:a2:07:0a:8f:c1:4d:57:41:d1:2c:c8:fd:8f:12:78:
         5e:1d:0f:b1:50:24:f7:86:9c:25:0f:d6:6f:7f:70:19:88:e0:
         5a:38:8d:45:ce:19:87:74:cd:ef:36:ee:e9:cb:f7:ed:c8:ce:
         8a:3d:31:0e:58:5a:69:ff:a3:22:de:39:e0:0f:3e:27:d9:49:
         ab:c4:ce:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOXBWJ5jcCCz5WcRZwuuF61BOWN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5RjIwNTM4MjhFOUQ2QjhDQjA5NUVGM0YxRDcyNTQx
MjUyRDM2NDAeFw0yMzAxMTkyMzAxMTVaFw0yNDAxMTgyMzA2MTVaMDMxMTAvBgNV
BAMTKEZDN0VDRUIyMDUzMzE0QTNDRUJCOTRGRUYzMTNGMTJDNjIyRUNCMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjs98V73IisgvWcXcGG0JcEpDc
DLIcbVyv7fnoSj1tQnpcjKaub4g1SC4vKHKyKNuYIkwvsP+3m5yP+2EKdVpDG2t6
qbSlJ49QRswGpiNHBn/I7UZ3B6EzzKC3Ga1mmpCE51z9tAbJ28mUmPD5fPjg5SfG
QvfEggml2QAFZ5E9J7QMDXbDZeVR/SjXknlRzrDUOv+vTeVcOUnRsYQYFIGohZQo
41dN9BeoH9btWcLVruHj2gM11qBczp8ukTY+PyflbR97FGqTKoytmmkr3jwHBRT8
VivwuRwllysXsYXoEkWKTNCTSma4LbmsisIyrAdLwXoqnQAQTPKv1nuOKFnDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/H7OsgUzFKPOu5T+8xPxLGIuywUwHwYDVR0j
BBgwFoAUFJ8gU4KOnWuMsJXvPx1yVBJS02QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMS8xNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEyNTJEMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0OUYyMDUzODI4RTlENkI4
Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzEv
MzEzNzMwMmUzODMyMmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqlKqMA0GCSqGSIb3DQEBCwUAA4IBAQB0yNyVBBlr
B/rR3ll1kGq5jpVtWs3pm5nQaXEvYPbC+rdJWoS4LdKCcAtMg49KdVrvH8YHwf6o
corRhc+gMScrOtVeSaoGPbNi7GQ99IhSY3a2UV7lApfvA58RaNJLkJCibH6nkO6x
FpTwwvzGRLt1jW4t765P6Yhzbg4LeQfTZ3KMNcMONORJtzro68qKeuxZcBaUGQ06
uQ9YW5f6J31jqOssZNZBUTZuTI/Lp0hpq7HW3izbn3iiBwqPwU1XQdEsyP2PEnhe
HQ+xUCT3hpwlD9Zvf3AZiOBaOI1FzhmHdM3vNu7py/ftyM6KPTEOWFpp/6Mi3jng
Dz4n2UmrxM5s
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org