Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
File:                     3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          isvOVvYQCrrTyiZxgChQRaW88ZgEwY5kNs2lXfVdRg0=
Subject key identifier:   DC:F0:81:80:E2:3A:02:8F:A0:C6:08:58:D1:00:9E:1F:56:A0:E7:C8
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       0B84162C4856EF6784A38B0CB2FEDE60281D0E62
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        168.121.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:84:16:2c:48:56:ef:67:84:a3:8b:0c:b2:fe:de:60:28:1d:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=DCF08180E23A028FA0C60858D1009E1F56A0E7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a4:53:36:ba:6c:90:75:77:70:0d:64:0b:9e:
                    b0:a9:0f:6c:c4:99:a7:03:9b:9c:6b:e5:f5:4c:6d:
                    59:9c:af:b5:3e:43:af:a5:99:b1:75:b0:64:f6:41:
                    24:39:53:58:e0:0a:5f:f0:57:08:88:ae:ce:28:e0:
                    ef:b4:76:e6:f9:1e:57:ec:53:49:16:55:23:94:a7:
                    a3:b6:81:8e:e0:a9:4b:0d:bf:45:d7:5f:46:fe:00:
                    ec:db:56:d1:9f:29:b9:f7:13:bf:81:fb:f7:0e:06:
                    eb:5c:45:71:c3:ba:97:c6:30:9d:7d:7c:28:d8:88:
                    71:cc:d9:91:ee:bc:9b:97:b3:8e:66:d9:61:04:92:
                    5d:fe:ff:80:33:5f:78:07:9e:87:9f:39:01:84:0d:
                    46:d5:b5:ee:a5:ec:15:bd:11:f1:a3:37:6e:d8:94:
                    f1:c0:58:60:69:a6:7e:86:5d:ea:10:89:90:3c:b0:
                    4c:16:65:5d:1d:45:1b:ea:16:dd:3a:48:2d:5c:ac:
                    a1:fb:e6:15:77:c0:5d:86:9f:dc:70:6f:3e:ef:df:
                    49:16:e0:ee:e9:9c:e5:f8:26:da:5b:82:a6:ae:d6:
                    db:e4:81:19:ac:3d:90:43:1d:d5:ba:c5:78:55:90:
                    02:7b:3b:af:99:64:a4:9b:ab:88:3e:cf:ac:78:0e:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:81:80:E2:3A:02:8F:A0:C6:08:58:D1:00:9E:1F:56:A0:E7:C8
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:7a:7c:9f:05:49:4f:54:0c:fd:0f:61:8d:46:75:94:42:86:
         e0:99:6d:98:09:b6:76:48:fd:ab:98:d6:9c:e6:5a:2d:14:a1:
         bf:69:7d:6b:9f:e7:fd:49:e2:d0:06:62:b5:3d:8c:68:78:13:
         ae:0d:70:2c:f4:a3:3f:00:b5:93:b4:04:c6:28:4b:da:66:2f:
         1b:35:f8:1a:76:b9:54:2d:47:83:97:59:66:08:bd:88:f4:9b:
         03:9e:67:cf:86:3a:4b:42:26:39:85:5b:20:ca:9a:76:45:50:
         4a:de:14:9f:e5:14:b7:d1:76:c8:c4:d8:3f:21:89:7a:36:cd:
         05:7f:be:04:2d:84:89:2e:4d:dc:57:8c:20:df:a5:d5:2b:fe:
         61:1d:1b:bc:1d:35:3e:c6:b4:e6:cb:7a:09:3c:d9:0b:03:13:
         14:0f:16:b1:30:07:91:2f:ad:b9:ed:d3:33:b2:79:72:4b:b8:
         58:fc:a8:39:be:a4:15:9f:35:e4:a0:dc:bb:b3:7f:76:cb:fd:
         54:97:62:cd:a8:91:9a:6d:83:f1:ce:f5:97:c9:99:41:d5:f7:
         06:b1:64:dd:0e:64:f5:7a:a6:03:8e:47:46:de:64:50:17:4f:
         b9:9d:5c:91:4b:00:48:60:9e:f5:d6:d0:17:94:61:f5:96:7d:
         70:49:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org