Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
File:                     3133312e37322e34382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          XkpOChy/EJ4Q5Oyaj8wIAvwjOogCC6Ht78iJF0VvmUw=
Subject key identifier:   BB:96:6F:DA:9A:A3:99:79:68:44:82:6D:97:AF:8C:D7:99:AD:2E:51
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       572FCB05E999BCA4A10A01075675467D702D5158
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3133312e37322e34382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        131.72.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2f:cb:05:e9:99:bc:a4:a1:0a:01:07:56:75:46:7d:70:2d:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=BB966FDA9AA399796844826D97AF8CD799AD2E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:9b:02:4b:4b:4f:38:82:12:cd:bc:71:81:
                    a5:c5:ac:a6:a8:f3:4e:54:26:15:61:52:48:a0:22:
                    e5:35:74:0f:ee:c3:5d:fd:9c:2c:bc:d9:22:22:17:
                    24:01:8d:e3:03:30:24:8a:00:fc:a9:d3:f1:3d:2e:
                    a5:7d:07:a1:03:4c:de:cf:09:19:84:ea:83:dd:8b:
                    ed:8b:5a:83:b9:ae:60:dd:eb:24:28:2e:78:bb:2a:
                    4c:0a:80:e0:4c:fd:61:57:b4:d7:3b:d6:dc:33:ae:
                    03:26:76:64:28:78:95:0f:bb:3c:e7:30:52:a0:35:
                    05:f8:c5:6f:42:d8:af:62:d3:3a:f0:56:c7:b3:6d:
                    f9:39:49:e5:88:10:8c:60:3f:bb:f5:18:4f:4c:78:
                    fb:2f:46:4b:3e:59:b6:fc:ac:78:ee:62:57:d1:7c:
                    72:94:e5:a1:5a:db:37:e7:ed:fc:1e:e6:4e:84:54:
                    b8:b4:cb:ae:2c:43:41:2d:e9:ca:53:58:d7:a3:47:
                    6c:d6:13:27:c7:f7:d8:5d:93:8f:5e:cc:d9:e1:c0:
                    60:bf:1e:b1:a8:65:96:d2:99:1a:68:a8:f2:18:1b:
                    bf:a7:13:5e:89:06:86:be:be:ea:25:1e:90:21:8d:
                    b2:bd:b0:20:f1:92:fe:6b:5a:ce:e7:39:a8:ee:d9:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:6F:DA:9A:A3:99:79:68:44:82:6D:97:AF:8C:D7:99:AD:2E:51
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3133312e37322e34382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:27:cc:3f:bb:4f:69:7d:3f:55:95:32:f0:a5:cd:f7:e5:37:
         c8:0b:58:b1:e6:0d:c4:4d:7e:9c:5d:cf:57:02:b0:78:45:a7:
         2e:e5:75:a9:cc:0a:45:c5:54:15:7e:da:f9:d2:18:1a:6f:30:
         9d:00:b9:b5:fe:b6:fa:66:32:7d:0c:63:41:27:65:0e:e0:f8:
         7b:1b:04:e4:45:8f:84:f7:0e:26:ad:e7:30:f1:50:89:7b:e9:
         98:50:95:41:0d:9b:10:b3:70:56:e5:f5:83:6b:00:d1:e7:89:
         0a:56:a9:9b:9d:f6:44:14:47:64:71:fa:40:c0:3e:63:86:82:
         e4:3c:13:dd:3c:70:4d:fc:36:ef:84:f0:29:9b:65:36:ef:a6:
         fd:24:1b:eb:93:d8:81:f2:04:49:fb:56:9b:27:54:20:05:72:
         bc:41:31:c0:6b:ba:f7:29:8b:16:d7:1a:a8:f9:f8:da:4e:85:
         10:59:c6:65:76:53:0c:0f:75:aa:9f:31:e6:8a:55:da:f1:4a:
         c2:45:09:bf:9a:9e:9a:6a:03:40:16:a9:2e:ad:0a:99:1b:4b:
         ff:db:95:c9:50:95:5a:fd:fd:e2:e0:28:20:e0:75:40:14:5b:
         d2:7d:c9:08:fa:e2:cd:c0:19:9e:84:80:a9:c6:33:ac:19:3b:
         76:3b:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org