Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          rpE7iRHXevOhMZOAjVrLJMoStij7AcLUjz22TAk6haQ=
Subject key identifier:   37:2D:FC:5B:B3:64:73:AD:57:E8:0D:7D:BF:3B:A2:11:47:8F:5B:37
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       2164F17B309A70A4232402E17B4AD3B47D4F9FA8
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:64:f1:7b:30:9a:70:a4:23:24:02:e1:7b:4a:d3:b4:7d:4f:9f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=372DFC5BB36473AD57E80D7DBF3BA211478F5B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6e:ec:24:c0:9c:d6:c8:95:06:ba:de:ec:3e:
                    1b:94:de:ac:5a:c2:71:54:2c:ae:6e:13:3c:7c:c1:
                    b7:ca:8e:61:9a:07:20:cc:03:76:e2:3e:53:24:25:
                    4b:20:0a:8f:98:c4:55:80:23:ba:61:50:2e:b8:9f:
                    99:1f:b0:75:f5:61:8f:3b:58:0e:dd:3c:0e:f9:3f:
                    a2:cd:d3:bd:e3:72:ba:d5:13:67:e6:e4:9c:2a:47:
                    fe:bc:5c:c5:bd:31:e5:a4:d5:43:83:8f:61:dc:63:
                    f2:e3:bd:e3:60:1d:b3:af:eb:30:41:ee:e9:9e:fe:
                    2d:93:38:76:3c:3f:71:fe:81:93:a0:38:01:d3:47:
                    33:16:9e:c7:08:4c:c4:8f:8a:55:96:12:d4:87:20:
                    22:a7:b0:63:8c:fe:14:62:b4:4e:fe:62:1b:f6:00:
                    e2:2a:a4:37:43:45:e8:2e:71:9b:91:fd:f6:f8:ca:
                    36:de:53:99:d7:94:72:fb:3f:8e:32:b6:57:9e:e4:
                    4c:64:ec:03:8c:23:74:86:3d:33:29:85:a3:2f:9f:
                    9d:a3:28:9a:f3:fc:20:96:7f:98:1a:08:20:5f:dd:
                    9d:e4:ff:f9:cd:6f:4a:95:21:34:fd:a3:d3:4b:ed:
                    a8:78:7b:65:fc:cd:9b:28:cf:8f:9d:53:a8:9d:cc:
                    f4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:FC:5B:B3:64:73:AD:57:E8:0D:7D:BF:3B:A2:11:47:8F:5B:37
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:46:4f:3d:b9:82:61:a8:ba:7e:4e:40:55:9e:bf:94:d3:9e:
         39:24:08:75:77:d6:6c:7b:49:d5:76:c9:1c:22:c1:3e:94:9d:
         28:07:23:b3:5f:f5:64:fc:9f:48:5d:d2:66:1e:6e:57:93:ae:
         72:c5:5e:a3:22:9f:03:7f:d9:58:8e:f1:c2:0b:d1:23:32:d2:
         e3:b5:44:1c:63:79:ea:50:1d:df:3d:96:fc:d9:03:db:eb:71:
         f2:99:9a:7c:d0:2a:d0:fd:c2:24:dc:83:bd:6c:0e:b8:b9:3b:
         1f:8c:86:21:7c:a2:17:80:58:0d:f2:38:51:85:08:e3:98:08:
         75:36:fa:92:eb:c1:b3:42:5e:22:38:c6:be:74:24:4e:9a:b6:
         55:f8:66:7c:42:33:bc:ee:eb:ff:ba:e4:ef:5d:96:cb:3a:dc:
         4f:4b:9b:73:de:c3:f7:ea:55:96:ab:ac:a5:f3:3d:55:bd:2a:
         be:fa:54:46:89:5b:55:32:16:07:c3:ee:8f:0a:42:26:c0:10:
         cc:38:ee:cb:b3:a8:e0:19:55:38:dd:5f:ff:81:85:70:d4:07:
         d8:90:1e:9b:39:8e:d6:e5:dc:20:a9:87:42:5a:56:5c:d5:26:
         5b:53:9f:72:15:84:7d:bc:fc:49:b3:26:bd:ac:9f:24:ea:c0:
         0c:17:e5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org