Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137312e302f32342d3234203d3e203532353435.roa
File:                     3137302e38322e3137312e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          CvCr561dlPzuulxYI5Bxg1+NVQyN/okeUyvsERRA2DU=
Subject key identifier:   5E:4E:4A:FC:5D:B6:01:D3:35:AE:D8:16:BC:80:CE:A1:BF:04:8C:2D
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       396DA7064A1195558CA89CE7C4597F72785D12A0
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137312e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:14 +0000
ROA not before:           Thu 19 Jan 2023 23:01:14 +0000
ROA not after:            Thu 18 Jan 2024 23:06:14 +0000
asID:                     52545
IP address blocks:        170.82.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:a7:06:4a:11:95:55:8c:a8:9c:e7:c4:59:7f:72:78:5d:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:14 2023 GMT
            Not After : Jan 18 23:06:14 2024 GMT
        Subject: CN=5E4E4AFC5DB601D335AED816BC80CEA1BF048C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:be:1c:27:40:f6:74:7e:3d:cb:b3:7f:df:
                    9b:8f:07:4e:ec:ed:53:40:ae:bb:09:6e:4e:38:48:
                    65:a5:4e:d1:44:63:88:18:5e:ce:5e:7d:95:fd:04:
                    49:4a:d5:a7:94:ab:41:d9:a4:5d:7b:2a:06:f0:b5:
                    2f:18:ce:84:99:b8:b4:ab:7f:56:40:f1:f5:79:44:
                    5e:12:d5:f3:a4:e4:da:b4:da:f1:fa:d9:e7:eb:ee:
                    39:81:8e:be:e5:16:05:ae:fc:a3:fd:9a:e2:59:f4:
                    cd:d2:2e:7f:52:4f:8c:ea:8c:b7:27:af:77:a0:76:
                    59:46:9a:ea:21:e4:a6:45:a0:3c:b8:ef:60:fa:12:
                    95:72:04:0d:a6:0b:4e:a3:eb:52:a1:e4:20:f7:fc:
                    fe:bb:60:fa:ce:7d:21:4c:19:59:8e:99:54:20:88:
                    95:0c:73:e9:40:34:3f:6e:1c:28:50:e4:1b:d9:93:
                    18:07:57:7f:62:a6:83:b8:d4:3b:aa:ef:80:49:56:
                    b5:d7:b1:0d:95:04:74:a0:d6:77:58:70:41:66:7e:
                    2a:35:cc:6b:08:68:32:7c:c5:68:2f:14:c3:e1:98:
                    3f:91:57:63:01:95:c3:ae:a5:16:af:2f:bc:f9:47:
                    b6:30:82:9c:c7:24:ac:f6:9b:3f:9b:b0:08:50:52:
                    b8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:4A:FC:5D:B6:01:D3:35:AE:D8:16:BC:80:CE:A1:BF:04:8C:2D
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137302e38322e3137312e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:05:54:13:d6:3b:64:f7:d2:3a:2b:ba:7d:56:f7:04:ba:
         f6:00:77:a5:e8:a3:3b:6b:6a:a0:ab:cc:98:30:06:44:87:97:
         5d:8f:02:84:2a:7f:5f:c1:ee:88:36:e8:a4:87:84:a9:f6:0f:
         1b:38:d8:b2:73:bf:cb:4d:54:0d:3e:89:16:6a:51:d6:ef:f7:
         58:28:5c:ca:37:7a:8d:e2:57:28:20:98:bf:9b:3e:9c:a4:d6:
         f6:c9:85:f3:80:70:8e:04:7f:b5:a6:cd:e2:bd:d4:1a:98:56:
         71:a8:08:08:81:02:32:44:bb:0a:bf:e3:a0:fc:06:a4:8f:e2:
         cd:d0:cb:ca:70:0e:ae:0d:c6:fb:3a:29:6a:cc:50:90:5e:18:
         dc:bb:ba:4e:95:a5:64:d4:96:3d:95:c3:9a:40:ab:b7:32:b3:
         bc:d9:33:30:e2:47:68:4e:60:97:df:18:88:1e:42:eb:5b:46:
         cd:5d:e6:8f:40:ed:cd:a9:a6:90:a8:3b:6c:a7:63:81:a1:22:
         50:38:94:3b:c5:38:f0:fe:10:ba:0d:16:7f:70:1e:25:de:04:
         4c:2a:6e:d1:7e:57:7c:94:a2:c6:a4:8a:11:5f:8e:00:95:0f:
         9e:73:31:4d:c4:e6:d1:aa:99:23:f7:ec:fa:fe:10:96:35:0c:
         96:d0:59:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org