Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa
File:                     323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier:          bNnpYrLJI6N0+aPc4xJznaVkNuqzPbp+m/UQNu0KmtE=
Subject key identifier:   9E:23:7B:9A:50:76:91:0D:71:41:00:CF:2C:EB:C3:A7:EE:18:17:89
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       71FB1DBB1D5159D009A5E96D30791BD95083181B
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fb:1d:bb:1d:51:59:d0:09:a5:e9:6d:30:79:1b:d9:50:83:18:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=9E237B9A5076910D714100CF2CEBC3A7EE181789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:a2:6d:e1:7a:a5:66:8c:25:bd:19:2c:24:
                    63:3b:5a:a6:1b:72:e3:0f:63:36:bf:47:f2:39:53:
                    59:84:12:ba:99:44:04:ce:4c:5a:70:e2:37:32:33:
                    8d:e4:fb:19:a8:41:8a:63:ae:df:a0:7f:e7:e9:74:
                    1e:89:1d:ec:13:4f:6f:dd:0d:6d:cd:91:cd:cb:21:
                    bb:e9:3d:24:33:2e:ea:62:23:66:84:b4:54:0c:5c:
                    b2:3e:e0:9d:47:04:3a:f8:8c:66:b1:65:ce:a8:60:
                    fd:1f:a8:43:42:63:3f:2a:3c:a3:6a:37:dc:f5:39:
                    af:62:1f:9c:ec:c6:fc:e5:6f:f0:7c:2d:39:21:dc:
                    ab:65:6a:8c:fc:a7:86:73:11:48:90:51:36:8d:19:
                    c0:94:f6:7e:c0:2f:57:f1:d2:b0:17:99:f7:06:b3:
                    8d:12:e6:da:e0:cf:84:4c:55:e6:8f:45:da:c3:5f:
                    62:7f:89:44:66:d1:47:e3:a6:64:8e:c8:d7:82:e6:
                    58:e6:43:71:f2:ef:e6:88:e5:55:91:2c:89:71:69:
                    17:4a:53:6c:99:88:91:13:aa:2c:93:30:08:bc:ef:
                    0e:3b:a5:39:56:55:8a:36:bf:89:97:93:ae:b4:23:
                    b1:21:41:fb:02:c4:c2:cf:7c:eb:3a:2e:12:f2:0f:
                    fc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:23:7B:9A:50:76:91:0D:71:41:00:CF:2C:EB:C3:A7:EE:18:17:89
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:91:d6:51:63:d3:a5:7e:d7:7c:79:e4:1e:b8:45:66:5d:fd:
         66:73:c9:63:4b:db:0f:51:b4:21:44:28:91:20:5f:be:ac:a8:
         59:36:5c:19:ee:ac:98:cc:6d:e9:0d:d8:10:67:c3:4a:a5:e4:
         13:0f:1f:05:3e:77:bb:e7:2f:1a:f4:9d:db:b3:a1:b4:68:56:
         fe:30:eb:b5:a6:8e:aa:89:ee:df:5c:9b:fb:93:c9:53:c3:99:
         ec:f4:19:f4:fb:bf:27:44:f5:0c:8d:75:0c:92:61:ac:1f:c0:
         cf:59:13:ba:38:12:80:2f:1c:d4:4d:97:46:76:0f:4f:a8:94:
         34:0a:b5:c1:6e:f6:b6:0f:2e:f9:da:41:92:71:27:0c:3d:07:
         a1:d8:b0:8d:0f:8b:fe:19:19:9b:20:54:51:d2:1e:08:54:fd:
         f6:9d:da:bd:fc:f2:fd:0e:bd:77:93:d6:4a:46:2d:90:05:fd:
         f8:71:58:f4:77:aa:39:be:2b:fe:72:bb:22:5b:42:f9:33:61:
         68:df:c0:95:68:66:78:2d:fc:0b:0f:fb:1c:a5:d9:6f:db:c5:
         48:88:0b:25:10:9f:34:6d:ae:3d:37:6e:ae:42:0a:b3:62:28:
         1e:ed:3b:8c:6d:ed:2d:ba:76:b1:0d:f7:4d:48:78:93:67:5d:
         c4:90:6b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org