Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          OhRP0n3IH5veJMvxaBF95+3lgHrASsze/85olunPhRM=
Subject key identifier:   7E:26:D2:70:77:AD:77:83:9A:88:0F:03:A0:91:C0:B1:FD:3A:E5:50
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       3E7707E1DE64F4014D85DF627DBDC5BD7CFFDA6C
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:77:07:e1:de:64:f4:01:4d:85:df:62:7d:bd:c5:bd:7c:ff:da:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=7E26D27077AD77839A880F03A091C0B1FD3AE550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:b8:7a:fc:80:f8:01:0b:e4:0b:29:6a:df:
                    9b:41:1b:e7:d4:68:81:fd:bf:cb:73:9f:26:2a:b3:
                    60:c3:c6:ef:f0:52:5e:9c:c9:f2:d3:88:17:f2:55:
                    f9:97:2d:b8:47:e3:f8:62:7f:46:06:20:2e:81:d4:
                    55:26:7c:ed:00:37:bc:26:0d:3e:1b:d1:3f:73:79:
                    5e:c8:33:8c:bb:5b:e6:8e:2b:2a:4c:09:ea:d9:ae:
                    f0:de:8e:25:b7:8d:6f:81:14:50:51:95:a5:11:23:
                    13:7d:c1:86:99:29:52:ff:b0:cd:f7:81:e7:c7:09:
                    44:e4:8a:a8:f8:f1:3a:15:5a:f4:d3:5e:19:bb:49:
                    3f:a1:43:05:4f:42:0e:e0:48:80:eb:80:ec:38:d1:
                    da:19:f7:83:a6:ea:30:83:6b:d7:9a:3d:64:d0:fc:
                    27:86:66:9f:7c:cd:a4:e5:a6:34:c1:b5:05:b2:0d:
                    54:92:6a:82:5c:5f:9b:f3:99:3d:c2:0d:0f:c6:2c:
                    bc:4d:71:c4:de:46:51:aa:a9:dd:5e:a6:dd:f6:6e:
                    e8:f0:70:63:73:d0:fe:11:27:87:61:63:fe:94:e8:
                    70:ab:51:f0:99:63:5e:d4:61:b4:ba:c5:54:34:6d:
                    98:61:b5:81:e6:dd:97:7f:f1:66:a1:6d:8a:74:ed:
                    05:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:26:D2:70:77:AD:77:83:9A:88:0F:03:A0:91:C0:B1:FD:3A:E5:50
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/33

    Signature Algorithm: sha256WithRSAEncryption
         4a:97:85:c3:2e:58:d4:5e:ea:69:cd:40:2d:6e:73:59:cb:5a:
         73:e9:af:af:04:ce:cc:2a:16:20:b6:31:c3:31:6d:99:1a:e3:
         dc:87:85:52:32:c9:36:bd:70:33:86:54:d3:c0:8e:d7:62:9f:
         92:ba:b8:a7:88:b9:b7:73:a3:bb:f9:5b:80:85:8a:ea:f7:22:
         ac:d0:fd:2a:df:b9:86:2f:f3:31:82:64:ec:ad:c5:fb:73:7a:
         6b:e4:96:80:90:ef:49:07:62:cc:79:6d:fa:ed:a6:bc:0c:83:
         ca:3b:eb:49:06:a9:53:19:89:cd:43:5c:e6:d6:fa:08:08:a5:
         49:58:98:73:79:8e:da:0c:c3:d0:de:b4:3d:c6:fb:e9:4a:46:
         58:9d:5d:bd:24:16:0a:f7:9c:76:73:a7:35:b5:c7:ff:f8:ec:
         96:cb:42:47:27:32:e1:d8:d7:25:77:ee:38:6c:b2:89:5f:14:
         56:3d:d2:93:55:89:c3:6e:cd:98:d5:88:b0:2f:96:14:05:8f:
         a1:2b:c8:a6:19:f1:2a:a8:ac:92:0d:6b:fd:c7:6c:47:a3:7b:
         de:7b:82:2b:0a:92:d3:aa:11:93:43:eb:83:63:46:88:7d:80:
         90:39:3a:29:40:59:8b:96:1d:a9:0f:07:aa:73:24:ea:b9:e2:
         48:75:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org