Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier:          EFOwWjVqCA+1h5cFu6hpQvehht55ybJYS7xLzFZXDtk=
Subject key identifier:   E3:0D:4D:81:6A:76:47:4F:95:32:C6:BF:1E:93:C5:31:1E:2D:F8:26
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       35E0A6A54313B69416CD844EADCD396621E93910
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e0:a6:a5:43:13:b6:94:16:cd:84:4e:ad:cd:39:66:21:e9:39:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=E30D4D816A76474F9532C6BF1E93C5311E2DF826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:b6:b5:e6:e0:94:1f:e0:f4:7b:16:9e:ea:
                    91:07:0d:ae:18:57:70:8d:0e:b2:2c:06:13:67:78:
                    1f:ec:81:1a:02:a0:b8:48:ce:2a:b8:65:2b:a8:9d:
                    3e:3a:2d:01:c3:f7:76:fc:6e:2f:27:9e:a3:9e:58:
                    e9:43:48:f7:af:e2:76:72:3d:0a:37:32:9f:30:06:
                    89:27:55:c6:3c:46:50:a9:e2:20:8d:65:b4:10:0f:
                    18:a1:17:74:fe:69:37:22:26:c6:ff:b1:34:85:ed:
                    1f:a0:84:e1:b0:20:dc:97:ca:6c:1d:5c:c8:83:c8:
                    dd:44:89:83:54:0d:09:54:7c:0a:3b:57:1e:6b:f0:
                    a9:59:01:a0:b6:4a:bd:61:bc:f1:3a:f9:51:24:56:
                    ef:01:0d:0d:9d:4e:6d:66:e8:50:ca:ae:4d:2b:e7:
                    27:e7:ef:aa:ff:fd:74:84:50:a4:a8:f2:bb:09:fe:
                    ae:f3:c8:e8:7e:81:e1:8c:59:df:77:60:db:f3:3a:
                    a4:40:bd:5a:45:69:e8:96:fd:08:ee:3d:da:f9:42:
                    2e:cd:a5:83:d8:fe:e4:34:8c:ba:bd:55:dd:d4:57:
                    e0:99:cb:5d:e6:93:33:d7:de:d4:66:93:dd:09:70:
                    06:52:4c:04:bb:39:c1:23:7c:dc:a9:b7:bd:3e:c5:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0D:4D:81:6A:76:47:4F:95:32:C6:BF:1E:93:C5:31:1E:2D:F8:26
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a3a2f34382d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:47:68:2e:a0:de:2e:5d:0c:ed:a0:47:71:51:46:8f:8d:01:
         2c:9a:32:d4:14:05:ba:55:5d:7c:ab:44:d5:31:cd:ed:0d:2a:
         b9:7d:96:a2:ce:bb:45:70:e5:71:87:a1:90:a8:cf:40:6b:20:
         b0:74:a9:54:5b:34:f8:d1:3f:3f:bb:09:96:67:37:c3:bf:0d:
         12:c7:5c:9c:f5:56:80:15:79:8e:3e:da:49:38:32:ba:d7:9a:
         c3:3a:32:eb:2c:c4:89:4e:f3:13:d0:ab:50:64:16:21:34:05:
         d9:d3:b8:b7:5a:c3:4b:30:f7:da:98:8a:33:7c:79:7b:14:f6:
         4e:51:87:ce:f9:da:16:1b:2f:2f:40:f4:eb:71:00:ba:0a:ca:
         1a:dd:96:ed:7d:f2:b4:ab:60:7d:87:dd:43:92:55:e2:e0:3a:
         f1:ea:2b:1a:04:2a:76:58:b4:58:77:23:e5:7b:9f:87:b6:e2:
         03:2a:3e:2b:e9:1f:d0:6d:e3:35:03:43:88:b0:27:f6:68:a5:
         61:14:07:b6:95:e5:4d:e7:bb:db:27:ee:8f:24:87:ae:ea:23:
         df:2d:ae:92:1f:bf:13:31:38:d8:f5:f4:60:3b:48:38:3a:9f:
         66:28:da:f6:9e:77:fc:c5:58:70:84:bc:41:96:4e:55:ab:c1:
         45:94:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org