Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33322d3332203d3e203532353435.roa
File:                     323830343a6531633a3a2f33322d3332203d3e203532353435.roa (raw, json)
Hash identifier:          qGZFZC6Jk1uzEPDia4jm2pNM81pv+D0coKL7Z5NF/oA=
Subject key identifier:   8E:25:1E:DF:D1:CA:03:61:C4:7D:7B:AA:11:59:7C:C2:D8:CA:AB:CD
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       047EEC07F871E68DF06F8749D91DE0710CD37953
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33322d3332203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7e:ec:07:f8:71:e6:8d:f0:6f:87:49:d9:1d:e0:71:0c:d3:79:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=8E251EDFD1CA0361C47D7BAA11597CC2D8CAABCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:1d:b3:fb:26:4d:6e:e7:76:e6:5e:10:b2:
                    71:dc:1b:ee:4f:a3:28:b2:db:80:89:d2:ac:cd:83:
                    11:0c:c3:57:a2:b9:33:72:44:93:ec:92:92:1d:18:
                    78:f0:49:82:98:56:37:65:fc:d7:7a:9a:7a:66:fb:
                    d0:f3:07:0b:4f:c3:be:d5:8b:99:4d:b4:07:47:73:
                    69:96:11:72:e0:47:f8:eb:14:eb:42:f0:62:56:4a:
                    28:4c:38:77:ec:11:ec:a6:c9:ab:4f:59:42:8d:6c:
                    b4:ce:d8:9b:05:6f:fc:fb:c9:0a:f4:71:fc:c5:67:
                    47:0e:e6:12:56:cc:fb:1c:f8:05:72:f6:80:d3:3b:
                    3a:1d:b1:f0:ac:d6:5a:d1:f2:8e:1c:f3:99:f3:a8:
                    f7:1c:02:66:36:2f:2b:8d:27:05:86:85:22:48:a6:
                    0b:22:60:4a:73:30:38:d9:ca:4a:55:0c:95:6f:3e:
                    8d:26:3b:2f:8b:64:80:a8:b9:41:c4:43:eb:09:b6:
                    b5:4b:8a:9f:37:62:fa:de:8f:86:c9:e6:db:ac:55:
                    9b:dc:3e:f3:99:b5:9a:d3:98:e6:c7:5d:4b:34:84:
                    e5:54:a0:9d:bb:c4:4c:c6:82:28:5f:68:18:cc:14:
                    37:3a:65:b3:de:ff:0c:ba:68:1c:cf:39:6a:a8:94:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:25:1E:DF:D1:CA:03:61:C4:7D:7B:AA:11:59:7C:C2:D8:CA:AB:CD
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33322d3332203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:78:6a:eb:75:f3:6d:63:88:66:1e:80:40:a1:c1:58:d1:36:
         75:cf:20:d2:f1:cd:0d:61:87:be:6b:3e:bd:7b:34:09:4f:cb:
         94:96:a6:37:06:60:fa:42:01:9f:ec:43:5a:1d:27:a1:95:b0:
         94:2a:06:5a:9d:4a:64:8c:89:bc:82:68:f8:57:95:57:e9:d1:
         04:91:bc:1e:18:41:02:a8:92:a6:31:ce:30:a6:97:4e:f0:42:
         d0:c8:f6:af:46:96:81:8c:17:04:32:67:2f:83:9d:c5:ff:c9:
         e6:32:e0:70:4b:e5:4f:31:41:b6:3f:56:9a:bf:64:56:6d:c5:
         98:ff:46:af:e4:b4:e4:43:f2:be:76:e8:fd:a9:dc:38:45:46:
         7b:0d:4b:71:33:d7:12:45:13:95:e2:33:58:81:60:94:be:38:
         63:ee:d4:5c:98:d0:1b:ad:bd:1c:12:f1:23:a1:94:d5:b8:54:
         dd:fd:14:82:d8:cb:ad:92:2b:20:3e:12:f2:14:a9:34:26:fb:
         9b:aa:b7:94:9b:c6:ca:d2:39:e7:ac:80:eb:f8:8b:d5:60:23:
         74:f9:c2:89:5a:00:fe:15:26:90:af:01:9c:69:ba:a6:4e:86:
         5d:7e:f2:81:46:6a:c7:3c:18:fa:13:4b:0f:96:47:d5:68:a3:
         57:1f:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org