Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          FGaRVFBgq0fC2ffrPnbJzGa9Sl++F8VM6TRzNODyqdI=
Subject key identifier:   13:12:85:42:38:77:1E:B3:F7:44:2D:0D:65:93:B9:86:E0:64:2F:12
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       39AB5891CC143D0174B44CFD72000A5B15D57519
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ab:58:91:cc:14:3d:01:74:b4:4c:fd:72:00:0a:5b:15:d5:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=1312854238771EB3F7442D0D6593B986E0642F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:7f:4b:36:48:e9:d7:41:8f:60:16:ad:4f:
                    79:10:00:83:d2:c1:90:0d:e0:6c:95:2f:c5:17:b2:
                    11:40:d0:85:99:6c:28:db:aa:7c:44:a5:d8:87:51:
                    8a:1d:f3:20:f2:92:d4:79:0a:5d:05:85:ae:a7:15:
                    ea:64:c1:22:3f:4c:7f:20:96:3a:52:57:83:dc:85:
                    28:4e:7a:cc:79:d1:73:44:64:4c:1f:0c:f0:b7:eb:
                    62:34:f3:d2:ff:3d:97:62:f8:14:e7:be:2d:06:70:
                    dc:7f:f7:97:79:13:52:2c:03:87:69:d6:b1:14:6c:
                    59:03:b0:c6:80:a4:25:84:a3:a3:44:a5:ce:28:8e:
                    1e:df:eb:3c:73:be:93:77:1b:e3:39:08:6a:28:36:
                    7e:e1:dd:41:11:ea:7c:4d:c0:fa:a4:5f:c4:c9:1d:
                    f4:b8:b2:d2:9f:03:17:f8:ae:55:89:34:2b:f3:38:
                    f8:aa:e6:6d:f7:fa:3b:6f:88:31:c2:d6:5b:4f:0e:
                    50:54:23:08:46:47:23:cb:38:c0:01:6a:86:fb:d8:
                    2c:b7:56:7b:f2:bd:52:53:7c:44:1d:80:18:30:3e:
                    a6:1f:a4:f4:e2:83:6d:2b:f6:1e:0b:bb:57:44:c8:
                    ff:6e:48:44:fc:3d:05:ff:5b:31:54:d2:0e:cd:a9:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:12:85:42:38:77:1E:B3:F7:44:2D:0D:65:93:B9:86:E0:64:2F:12
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:11:13:c8:b8:68:1a:58:02:fc:43:03:f3:37:0d:dc:79:cb:
         a3:e0:7c:dd:f5:86:95:09:90:13:09:ba:b3:d4:25:1f:15:40:
         db:a9:33:84:9c:ca:64:24:93:c3:70:ca:e2:44:9e:e9:c0:e8:
         f4:81:37:aa:67:5b:49:44:f1:88:6b:4c:35:af:27:d9:f1:0c:
         6a:7f:91:66:14:0d:c8:f6:d8:7a:a1:d2:ee:5e:f6:17:3f:86:
         a4:87:0c:d5:16:98:77:15:db:1a:da:94:cd:5a:e2:71:67:c2:
         31:a2:67:cc:ed:2e:e8:f2:c9:12:5b:02:d8:1f:60:29:9c:12:
         18:a7:e2:26:4d:14:76:43:55:54:aa:c3:57:8a:41:00:90:13:
         6f:54:f2:3d:bf:b2:af:7c:ac:53:c0:be:0d:93:a1:71:b2:f7:
         b6:74:89:1d:e4:80:5b:0a:63:ac:22:04:6c:df:17:12:46:af:
         ed:72:73:7f:da:f0:5f:a4:07:8a:a1:46:37:e5:70:2d:40:aa:
         b0:c8:12:25:20:62:b9:df:9f:fd:29:56:ab:61:41:33:a7:91:
         10:80:2f:f6:2d:bd:69:3c:61:3d:73:99:09:aa:ba:c8:35:a9:
         96:5f:b9:36:d6:67:06:51:e6:79:c2:57:30:03:99:28:ba:56:
         c6:60:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org