Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
File:                     3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          PWeV15AiTLUqjA4MoMKxhL0nnf+X4lnCOPHNBw1rUQs=
Subject key identifier:   F3:44:FA:72:84:5D:B5:5B:B1:4B:25:9D:09:DE:9C:F9:8D:E5:26:0E
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       07541C6D2339AABB811A1F45C8EB8EDB4296A118
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 30 Oct 2023 21:41:20 +0000
ROA not before:           Mon 30 Oct 2023 21:36:20 +0000
ROA not after:            Mon 28 Oct 2024 21:41:20 +0000
asID:                     52545
IP address blocks:        179.107.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:54:1c:6d:23:39:aa:bb:81:1a:1f:45:c8:eb:8e:db:42:96:a1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Oct 30 21:36:20 2023 GMT
            Not After : Oct 28 21:41:20 2024 GMT
        Subject: CN=F344FA72845DB55BB14B259D09DE9CF98DE5260E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:c2:8f:d7:d9:6a:8e:69:f9:89:0f:bf:08:
                    42:ad:4d:dc:0c:57:1c:d3:28:b2:26:8c:8d:8b:aa:
                    ee:2f:3d:2f:10:90:aa:08:e1:05:74:3c:3c:f3:bc:
                    fc:3a:1b:19:e6:72:5e:58:48:e6:2d:e7:05:17:e2:
                    2c:a3:ea:c8:46:b5:3f:dc:4a:13:59:a6:ee:92:2b:
                    df:11:ed:d6:68:f4:ac:81:ae:be:fe:2a:09:a4:27:
                    31:36:f4:41:6c:0d:0e:f8:5f:e3:63:56:7c:be:0b:
                    46:12:5d:ae:83:d0:b6:a9:96:6a:83:ba:27:31:e1:
                    3e:10:ba:4f:d2:4f:04:52:eb:bb:cc:3b:4a:45:62:
                    1c:7c:48:b1:97:62:e2:1a:5a:0c:6f:5f:b4:49:f6:
                    14:7a:18:cc:b9:04:12:e7:8f:c3:0d:80:19:8d:aa:
                    8e:15:a0:e7:1f:90:95:99:05:d3:62:15:8d:b2:0d:
                    97:2a:2d:fa:bd:29:60:45:60:9c:15:11:e9:18:06:
                    52:de:2e:f9:ee:81:1e:53:c5:51:09:d1:7d:d2:85:
                    95:45:5c:c3:4b:3b:b7:fa:ae:5b:5e:4a:31:52:ba:
                    a3:eb:82:e4:77:61:5c:54:aa:76:e4:2d:6f:dd:90:
                    26:63:a7:6f:d5:2d:74:a1:e8:b4:53:35:3f:9f:25:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:44:FA:72:84:5D:B5:5B:B1:4B:25:9D:09:DE:9C:F9:8D:E5:26:0E
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:05:c1:9a:23:96:b0:12:4b:86:d3:25:47:64:fe:09:9f:
         bb:9e:b1:93:ad:0c:99:27:0b:6a:ec:a6:6c:94:41:f5:a6:ce:
         2a:86:0c:2b:9a:dd:64:6a:31:ed:6d:81:78:49:f3:48:cb:83:
         2d:96:63:8d:fb:f2:86:5f:6a:c0:90:9e:3b:2c:19:b9:6b:32:
         61:ae:b8:72:dd:f5:88:16:52:73:19:2e:29:85:44:c7:45:a2:
         0e:27:9e:dc:4e:cb:a1:94:a0:1f:1f:7e:91:6d:cf:25:73:f2:
         ce:4e:46:7f:4b:5b:17:58:ca:3a:ba:de:04:ab:2c:60:2a:d1:
         cf:02:6f:a0:4d:dc:c9:8a:ad:8d:1e:10:1a:aa:23:d5:03:54:
         b5:43:41:f2:fa:ce:61:09:3e:6f:b1:75:2c:18:57:c8:d3:25:
         b7:d6:81:31:66:bd:ca:28:be:ad:93:33:0a:f7:16:6d:80:fa:
         b4:71:01:5e:4e:16:c7:e2:af:d2:14:cc:27:6c:c6:97:07:77:
         06:47:52:8b:3c:90:c1:79:c6:6d:f0:b9:62:0a:33:7c:92:6d:
         79:cf:6f:e2:1c:85:38:d7:68:d4:fe:a3:d0:10:10:a0:a0:03:
         bd:77:87:29:24:94:23:b2:2a:00:2e:90:d4:a2:8e:1a:6b:ea:
         94:01:a0:bd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB1QcbSM5qruBGh9FyOuO20KWoRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5RjIwNTM4MjhFOUQ2QjhDQjA5NUVGM0YxRDcyNTQx
MjUyRDM2NDAeFw0yMzEwMzAyMTM2MjBaFw0yNDEwMjgyMTQxMjBaMDMxMTAvBgNV
BAMTKEYzNDRGQTcyODQ1REI1NUJCMTRCMjU5RDA5REU5Q0Y5OERFNTI2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+I8KP19lqjmn5iQ+/CEKtTdwM
VxzTKLImjI2Lqu4vPS8QkKoI4QV0PDzzvPw6Gxnmcl5YSOYt5wUX4iyj6shGtT/c
ShNZpu6SK98R7dZo9KyBrr7+KgmkJzE29EFsDQ74X+NjVny+C0YSXa6D0LaplmqD
uicx4T4Quk/STwRS67vMO0pFYhx8SLGXYuIaWgxvX7RJ9hR6GMy5BBLnj8MNgBmN
qo4VoOcfkJWZBdNiFY2yDZcqLfq9KWBFYJwVEekYBlLeLvnugR5TxVEJ0X3ShZVF
XMNLO7f6rlteSjFSuqPrguR3YVxUqnbkLW/dkCZjp2/VLXSh6LRTNT+fJf49AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU80T6coRdtVuxSyWdCd6c+Y3lJg4wHwYDVR0j
BBgwFoAUFJ8gU4KOnWuMsJXvPx1yVBJS02QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMS8xNDlGMjA1MzgyOEU5RDZCOENCMDk1RUYzRjFENzI1NDEyNTJEMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0OUYyMDUzODI4RTlENkI4
Q0IwOTVFRjNGMUQ3MjU0MTI1MkQzNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzEv
MzEzNzM5MmUzMTMwMzcyZTM4MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCs2tQMA0GCSqGSIb3DQEBCwUAA4IBAQAsdwXBmiOW
sBJLhtMlR2T+CZ+7nrGTrQyZJwtq7KZslEH1ps4qhgwrmt1kajHtbYF4SfNIy4Mt
lmON+/KGX2rAkJ47LBm5azJhrrhy3fWIFlJzGS4phUTHRaIOJ57cTsuhlKAfH36R
bc8lc/LOTkZ/S1sXWMo6ut4EqyxgKtHPAm+gTdzJiq2NHhAaqiPVA1S1Q0Hy+s5h
CT5vsXUsGFfI0yW31oExZr3KKL6tkzMK9xZtgPq0cQFeThbH4q/SFMwnbMaXB3cG
R1KLPJDBecZt8LliCjN8km15z2/iHIU412jU/qPQEBCgoAO9d4cpJJQjsioALpDU
oo4aa+qUAaC9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org