Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
File:                     323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (raw, json)
Hash identifier:          0C999HnekkFQYoGqV4BfUfxLMSRYPsb/D0xxPKxCsi8=
Subject key identifier:   6D:33:DB:42:FD:8A:88:00:58:D0:AF:5C:1B:8F:C2:2E:F7:2F:0D:F5
Certificate issuer:       /CN=149F2053828E9D6B8CB095EF3F1D72541252D364
Certificate serial:       22EC6E8D4A903B0B1DAB1786DADBBBE16A7812C5
Authority key identifier: 14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
Signing time:             Thu 21 Dec 2023 23:26:57 +0000
ROA not before:           Thu 21 Dec 2023 23:21:57 +0000
ROA not after:            Thu 19 Dec 2024 23:26:57 +0000
asID:                     52545
IP address blocks:        2804:e1c:fb00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:6e:8d:4a:90:3b:0b:1d:ab:17:86:da:db:bb:e1:6a:78:12:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149F2053828E9D6B8CB095EF3F1D72541252D364
        Validity
            Not Before: Dec 21 23:21:57 2023 GMT
            Not After : Dec 19 23:26:57 2024 GMT
        Subject: CN=6D33DB42FD8A880058D0AF5C1B8FC22EF72F0DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:70:9a:51:c5:2b:78:cb:3d:21:30:f9:35:
                    1a:79:dd:cc:36:0c:c0:59:19:f3:c0:9a:71:de:80:
                    1d:31:a8:84:80:19:94:c8:1b:8b:df:ed:0d:ee:29:
                    11:24:34:6c:4e:87:e4:1d:15:f5:1a:cf:fb:f3:88:
                    93:43:f4:51:c5:24:5d:17:fc:c0:68:cf:65:7f:d5:
                    f1:05:69:03:f2:d7:e2:34:2c:29:a2:f4:06:3f:fb:
                    cd:14:c9:e4:12:b6:23:40:a4:53:28:b1:fa:47:8e:
                    92:fb:31:d5:77:e6:29:28:de:77:ca:c0:9e:ee:e3:
                    51:41:91:12:85:c1:bc:90:67:90:51:23:e0:0b:e2:
                    a9:ca:5c:37:47:c8:6b:8a:e5:7c:26:9c:d5:e3:d3:
                    1f:c0:39:7b:9e:12:15:46:32:e8:b2:1a:21:d2:d8:
                    14:46:8e:b8:66:a3:36:0a:b8:d5:8c:8d:b9:f8:ab:
                    88:75:d4:a4:35:a4:8f:99:57:37:14:6e:fb:9a:d0:
                    a8:84:79:7b:0d:f1:73:61:51:c1:49:7b:43:4e:e2:
                    82:19:c9:8b:1f:bf:db:38:51:e4:2d:ce:db:12:06:
                    3a:42:18:29:e6:f0:02:6b:95:5c:e2:64:a2:b8:0e:
                    b5:4b:fe:e8:6e:ec:49:75:f2:26:f9:66:bd:c4:83:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:33:DB:42:FD:8A:88:00:58:D0:AF:5C:1B:8F:C2:2E:F7:2F:0D:F5
            X509v3 Authority Key Identifier:
                keyid:14:9F:20:53:82:8E:9D:6B:8C:B0:95:EF:3F:1D:72:54:12:52:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/149F2053828E9D6B8CB095EF3F1D72541252D364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/149F2053828E9D6B8CB095EF3F1D72541252D364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/1/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:0e:f5:dc:71:96:48:c4:c3:38:2a:a9:b6:26:d2:1f:62:
         aa:21:86:2a:ad:85:65:40:64:ea:b4:95:9a:48:a8:51:5d:69:
         81:7e:e2:cc:26:10:87:2e:4b:bc:14:2d:19:ea:12:8d:38:f5:
         ac:0b:6c:ff:4e:e3:e8:c5:7b:b1:59:61:e4:9e:dd:0e:45:42:
         0e:50:77:a8:a7:84:b7:a1:ba:5e:c9:4b:b0:e5:8e:b6:14:21:
         41:d3:ff:8b:11:d5:58:74:07:02:4b:e9:de:4a:43:6c:6b:c6:
         10:22:d5:4d:3a:e2:9c:92:e8:e0:f1:94:46:a3:74:11:ad:f8:
         92:03:f1:27:8a:b0:59:4f:6a:75:98:34:89:09:0a:e9:cb:59:
         06:48:91:90:9c:41:e0:aa:fe:55:80:f8:58:ed:70:af:e0:b7:
         5a:fe:85:bd:e3:90:d0:3d:e8:9d:70:66:21:4f:a0:b1:a4:f9:
         58:59:c9:64:fc:e2:0d:72:8e:c6:d5:dc:fd:89:7e:36:a2:50:
         31:1d:e7:1a:ea:89:73:b5:22:dd:32:c9:17:b1:b6:b3:ac:46:
         47:2c:e8:00:91:9d:33:29:68:a0:93:c7:a3:4f:cb:da:4a:72:
         49:a6:c7:0a:cf:0b:8f:b1:91:59:f8:9c:13:2f:59:7d:ce:44:
         93:ce:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org