Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f33322d3438203d3e203532353435.roa (raw, json)
Hash identifier:          kpMbtEcofuAUPJV5n8H9UsGEsVszC94k5znI1XxX3UM=
Subject key identifier:   DC:18:DA:F5:74:A2:F6:7C:CD:B7:87:F3:97:DB:88:A6:68:08:31:75
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       15107D55740CCFA55E5DD1719E291D6DB6673856
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
Signing time:             Mon 30 Oct 2023 21:42:08 +0000
ROA not before:           Mon 30 Oct 2023 21:37:08 +0000
ROA not after:            Mon 28 Oct 2024 21:42:08 +0000
asID:                     52545
IP address blocks:        2804:e1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:10:7d:55:74:0c:cf:a5:5e:5d:d1:71:9e:29:1d:6d:b6:67:38:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Oct 30 21:37:08 2023 GMT
            Not After : Oct 28 21:42:08 2024 GMT
        Subject: CN=DC18DAF574A2F67CCDB787F397DB88A668083175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ad:5c:14:05:b3:ec:2c:9a:7f:d4:98:3d:6d:
                    08:f3:7c:94:8a:39:7e:11:5f:3e:5a:da:90:5e:55:
                    ad:5e:a4:5a:b7:5c:f2:33:22:64:45:49:e7:72:f9:
                    2e:95:30:19:20:ab:a9:cb:bb:ce:78:d3:7b:e7:02:
                    38:26:6a:f1:29:d5:8f:a1:3b:b4:95:fc:e8:91:d8:
                    60:5a:78:21:36:d5:44:4f:01:9d:76:e8:e2:fd:56:
                    cd:e5:39:25:5f:a1:98:14:70:ec:60:39:1a:22:2f:
                    24:4d:45:12:0c:7f:98:4d:75:fc:32:14:5c:47:0b:
                    ba:6f:57:08:f0:64:eb:48:b1:be:11:44:9e:b1:62:
                    55:6f:5d:82:14:2c:36:2a:ec:5e:07:99:da:14:08:
                    23:29:ab:a3:d2:fa:8e:fa:c1:08:76:60:a6:5c:6e:
                    e1:58:76:cf:16:bb:03:ee:05:67:83:0a:59:74:45:
                    d0:85:01:ff:4c:39:59:d9:00:9d:a2:93:42:d6:12:
                    ef:66:0c:ab:ab:20:ca:3f:5c:76:ca:39:f8:b1:e8:
                    69:f9:b0:0c:c8:35:c0:8a:53:02:85:9d:d4:dd:f2:
                    e4:28:f2:05:c6:ea:26:1e:61:6d:a3:b2:da:9d:4f:
                    84:68:13:9d:2f:17:b0:0f:14:c9:83:f9:bc:e0:3b:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:18:DA:F5:74:A2:F6:7C:CD:B7:87:F3:97:DB:88:A6:68:08:31:75
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33322d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:ff:58:a1:67:55:e5:cc:6b:69:b9:ac:7c:0d:08:56:c5:fe:
         d0:bd:6f:c3:27:0b:d3:17:41:b5:86:2e:a7:86:91:19:73:69:
         ba:28:f0:6b:59:fa:c5:33:c4:b1:de:78:c6:37:f5:17:d7:07:
         23:a8:bd:80:ab:f8:67:36:a7:97:7a:8f:0c:c8:6b:49:bc:49:
         b2:77:de:67:1e:7e:d8:f6:db:a9:2e:a1:2c:ca:f7:fb:8d:02:
         2a:30:58:45:94:4b:3b:03:f3:38:a2:3b:64:55:1b:fe:27:e7:
         15:2d:b8:80:0e:5c:c1:bd:cb:71:94:ec:f0:60:04:ba:41:01:
         36:0d:34:f2:21:57:67:1f:8c:d1:ac:c0:e6:c3:76:44:13:5b:
         39:fb:8b:82:a2:61:2a:41:68:2c:34:b8:88:69:a4:fd:e5:46:
         23:ac:1e:aa:99:db:d6:17:52:38:6a:bc:70:2c:c6:54:96:ba:
         ac:02:3d:bd:70:e4:72:16:7e:6a:17:d0:c0:07:9e:15:c2:e1:
         6f:96:0e:0e:78:aa:36:80:4d:de:68:da:8f:44:09:5f:e0:c0:
         3f:98:26:5c:ca:3f:b1:c4:90:d5:3e:de:e8:ec:04:2d:83:93:
         fe:91:4f:26:ee:53:7a:93:4e:d3:80:bb:bd:b8:2c:de:19:78:
         9d:8c:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org