Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          g5P6nQIqs2WPyP0Bc8bCbqW7ZDPEvirhwHQf1YE8sEM=
Subject key identifier:   47:F7:EF:92:E6:C5:FD:82:18:64:FC:CD:67:32:21:11:A8:42:B8:9D
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       11180F3C34BF3001ED9F0FAFEA5CE770E48D57AF
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:58 +0000
ROA not before:           Thu 21 Dec 2023 23:21:58 +0000
ROA not after:            Thu 19 Dec 2024 23:26:58 +0000
asID:                     52545
IP address blocks:        2804:e1c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:18:0f:3c:34:bf:30:01:ed:9f:0f:af:ea:5c:e7:70:e4:8d:57:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:58 2023 GMT
            Not After : Dec 19 23:26:58 2024 GMT
        Subject: CN=47F7EF92E6C5FD821864FCCD67322111A842B89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8b:d3:bf:95:50:c8:5a:76:da:fd:48:05:2b:
                    53:8d:57:9a:4c:8d:8a:c6:60:20:74:0f:1a:fe:87:
                    ef:77:b6:77:58:c9:48:df:db:96:9f:bf:bb:3e:46:
                    a6:bf:55:0e:43:37:c0:12:fa:53:08:df:75:31:7f:
                    3e:1a:bc:e4:09:74:d5:13:9e:a9:60:62:c4:ed:5a:
                    12:06:3d:64:99:2f:72:2f:d1:7a:83:f8:29:1f:59:
                    05:1d:31:b7:e0:68:a9:b1:7f:51:5b:4f:45:80:28:
                    fa:3c:28:1b:96:37:9c:2c:c1:e1:be:71:fb:4f:dd:
                    53:cc:e6:00:64:5c:dd:51:c8:b4:31:6d:ab:7b:d0:
                    17:e6:5e:34:36:e5:7c:54:e0:a9:c9:8e:1c:43:d6:
                    22:3d:44:bf:47:49:40:85:d1:47:57:51:97:a0:28:
                    70:c7:c8:76:8e:30:26:04:7d:1b:43:bf:5b:7a:49:
                    17:65:4e:b7:4f:82:52:f2:6b:0c:a5:b0:ff:51:3e:
                    67:9d:7a:ee:96:1d:e9:04:33:7f:06:42:2a:8d:ac:
                    82:12:ab:2f:50:5c:40:f8:fa:d0:02:e1:a9:24:a7:
                    76:31:91:bc:ad:ba:f3:59:7f:04:9e:b8:59:79:17:
                    db:5a:2a:4e:be:f3:33:3e:c8:6f:22:97:b7:38:b3:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F7:EF:92:E6:C5:FD:82:18:64:FC:CD:67:32:21:11:A8:42:B8:9D
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c4:24:64:4a:d3:c3:37:2a:66:11:12:97:3d:6b:ee:ba:ea:9e:
         86:90:1a:bc:7f:45:d1:ba:d6:77:d2:d2:07:e3:26:6f:c0:15:
         85:47:ec:38:f4:2f:49:4e:29:5f:11:0f:c4:50:96:5e:08:ad:
         45:a4:6b:23:9f:5b:c4:f6:68:7a:fc:1a:6d:62:d1:55:9f:4e:
         c6:04:d7:03:3f:98:36:a0:f0:ec:e9:44:69:aa:c9:ad:95:96:
         18:f4:7d:5d:0f:cc:21:bb:03:21:f6:96:f5:2c:b3:8d:8d:07:
         d7:bb:8b:0a:4b:e1:27:95:8d:30:cb:88:e5:c2:a2:ac:10:de:
         c8:d2:c0:37:e5:b5:0e:bf:74:a1:32:f4:cb:13:2b:3c:ec:9c:
         7c:e8:52:54:ee:6e:3b:da:71:ff:74:2d:3c:96:93:cc:d7:90:
         d0:2a:9f:20:7a:88:f4:ab:7d:61:ad:0e:75:01:cb:b5:d3:55:
         47:d4:f2:13:53:41:5c:78:d1:d0:d3:6a:51:9e:07:00:9c:20:
         80:7f:59:ff:e1:d5:5f:4b:5c:0d:6e:ed:ca:bf:56:cb:da:a7:
         5f:6a:50:20:ae:7e:e8:01:28:55:f7:ef:73:b9:67:79:07:ff:
         a3:f7:43:88:26:db:61:2d:e7:41:e1:07:0b:57:e2:cc:11:18:
         20:ac:c1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org