Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137392e3130372e38332e302f32342d3234203d3e203532353435.roa
File:                     3137392e3130372e38332e302f32342d3234203d3e203532353435.roa (raw, json)
Hash identifier:          3vSZ3zTYEzKw8EeYiXxETHVlmxQSrhnLAl2DFlgbx2g=
Subject key identifier:   CF:95:64:87:F0:07:FE:EB:C5:9B:19:F1:6D:F7:70:93:52:DD:77:61
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       366F95D1CB7F3F0749EA74A68C7E6DDC9617D97B
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137392e3130372e38332e302f32342d3234203d3e203532353435.roa
Signing time:             Thu 19 Jan 2023 23:06:15 +0000
ROA not before:           Thu 19 Jan 2023 23:01:15 +0000
ROA not after:            Thu 18 Jan 2024 23:06:15 +0000
asID:                     52545
IP address blocks:        179.107.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6f:95:d1:cb:7f:3f:07:49:ea:74:a6:8c:7e:6d:dc:96:17:d9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Jan 19 23:01:15 2023 GMT
            Not After : Jan 18 23:06:15 2024 GMT
        Subject: CN=CF956487F007FEEBC59B19F16DF7709352DD7761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:bc:b5:ee:c6:ab:61:ce:2f:e7:07:09:b0:
                    02:a7:79:9b:5e:c1:9c:dd:ff:45:73:83:5f:66:dc:
                    b9:6b:b0:ef:5b:30:e4:78:41:53:e9:18:c9:d6:d3:
                    a7:8f:a0:8f:6a:bf:b5:fc:9d:80:3a:c1:ea:c9:ba:
                    fb:d2:0a:8f:34:80:a1:cf:7d:0e:4a:f1:f6:7b:e6:
                    43:f6:6e:9a:09:da:89:d4:57:7c:4a:e4:13:4c:79:
                    80:33:97:6d:f6:52:21:30:36:c9:08:25:5b:9e:21:
                    45:39:14:93:01:b9:fc:5a:fa:25:6c:04:36:b8:3d:
                    03:27:e8:ca:c7:fe:05:37:ac:0e:e7:37:36:2e:eb:
                    53:f5:d4:4c:d6:54:2c:6b:55:e0:99:20:94:ae:28:
                    85:13:5e:d8:be:dc:6f:41:e1:fa:6c:fc:8d:b2:85:
                    c3:68:2b:e6:11:2c:b8:c7:ea:c5:5b:86:20:15:43:
                    09:cf:aa:d5:f5:67:df:ce:ea:b7:ab:6c:bb:1c:aa:
                    9d:92:83:f7:b2:0a:1d:67:ad:3a:fa:08:f6:9c:61:
                    c9:63:35:69:59:45:18:d4:37:9f:9f:76:44:0d:57:
                    d5:51:b8:33:c1:ed:60:f7:1c:19:78:9e:23:a4:58:
                    9f:81:8b:56:fc:47:cd:55:78:29:6e:a2:ad:76:4a:
                    30:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:95:64:87:F0:07:FE:EB:C5:9B:19:F1:6D:F7:70:93:52:DD:77:61
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/3137392e3130372e38332e302f32342d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:39:04:4b:f4:ad:a8:8c:91:1c:66:07:11:64:a7:d4:f2:64:
         95:df:46:a9:7b:1d:ff:21:80:b8:7d:7f:50:ed:b4:6e:4a:0b:
         4c:95:bd:1e:e7:a3:21:83:47:0f:d5:50:57:2e:78:94:e1:06:
         57:1d:77:56:7d:9c:fa:52:2e:bf:76:26:19:bc:61:07:2f:92:
         ea:23:f3:74:37:47:e1:89:d5:b8:ca:5e:92:e2:9a:b6:5a:6f:
         3a:b7:95:a3:f1:78:e0:ea:3e:b5:3e:0d:bb:0e:d7:cd:a5:a1:
         b0:d1:2b:87:e6:66:9b:ad:40:73:fa:11:80:33:44:b7:70:93:
         b4:af:22:17:00:39:47:1e:e7:6e:5f:54:e4:1b:82:ae:4a:04:
         d1:98:43:d5:c2:96:01:13:f3:15:cf:a9:5f:ac:ae:a6:ca:71:
         ec:18:ac:d8:50:8d:63:14:13:dc:3b:de:d8:15:d8:9f:72:af:
         d9:b6:48:28:6b:9c:96:e9:2c:dd:44:8e:f9:b8:da:62:e5:b8:
         a5:e4:3c:05:3d:eb:c7:d6:71:e1:85:9f:11:38:1b:01:dc:05:
         a6:fe:21:b2:7a:d9:5b:44:d4:26:b3:89:0e:52:62:52:e7:06:
         b5:8d:e1:a1:6a:28:42:e6:57:75:05:7c:4a:e4:2a:a5:df:50:
         ca:76:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org