Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
File:                     3137302e38322e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          QqnPTG4vqIIMh65wUdi96dfL7s/YqFTjyqqGK9o3sZM=
Subject key identifier:   F4:D5:1D:94:4A:88:82:22:E6:2C:16:36:1F:2B:EF:4A:0C:C6:25:4F
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       0EB215864173E578AD5330B92E62DF03017A9598
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        170.82.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b2:15:86:41:73:e5:78:ad:53:30:b9:2e:62:df:03:01:7a:95:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=F4D51D944A888222E62C16361F2BEF4A0CC6254F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:81:2c:5e:77:73:02:ec:7e:8d:ad:4a:92:
                    d2:fe:b8:6f:d1:cd:1f:4b:21:72:82:20:93:18:3a:
                    02:6e:58:94:7c:16:14:6a:4b:fd:0b:f8:1c:f6:7e:
                    17:02:79:b6:65:7f:4c:01:d6:ad:d4:2c:35:d5:a0:
                    e5:92:50:42:33:94:13:d7:d7:99:ab:7f:48:c3:81:
                    2d:c5:b4:47:e7:cd:e3:e3:84:c4:ca:4c:b7:fd:c9:
                    62:5c:7c:7f:f0:13:b3:93:f1:c5:20:ad:0e:2b:dd:
                    90:a2:22:ab:b7:50:fe:19:1c:e1:34:b8:1b:ef:cf:
                    47:4f:c1:57:ae:47:ad:0e:92:54:9a:a0:33:8c:06:
                    e7:6b:e2:40:8f:9e:e4:d7:96:4f:e4:3a:8e:61:1e:
                    41:5f:f6:7f:13:85:56:55:ba:11:e6:4f:ea:89:5c:
                    6f:83:84:a4:10:6b:79:7a:86:58:9d:a1:67:2d:6a:
                    91:d4:de:e2:c5:5b:86:64:57:b6:d4:41:45:e7:d0:
                    7a:49:50:d9:fb:d2:f8:48:54:89:d0:8c:b3:95:4c:
                    4b:1e:6e:a1:31:53:db:74:3d:78:d4:21:12:fd:e4:
                    c4:dc:33:8f:76:f5:47:a6:9f:c3:74:9b:36:50:bf:
                    83:f6:d0:c1:41:a9:32:ab:34:23:58:40:66:84:c8:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D5:1D:94:4A:88:82:22:E6:2C:16:36:1F:2B:EF:4A:0C:C6:25:4F
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3137302e38322e3136382e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:45:18:c1:94:69:55:9e:98:65:2c:03:61:76:dc:fc:44:c5:
         ea:78:f8:b0:f7:29:14:eb:8c:9c:26:ee:a4:2a:d9:b0:26:54:
         9b:21:9f:61:32:58:71:d0:19:ca:ee:8c:67:9b:c2:fa:3e:be:
         1a:1f:9a:2c:81:af:4f:af:46:66:ca:b0:76:73:f6:4a:1f:20:
         dd:32:7f:3e:9f:de:6d:a3:b6:87:12:ab:71:48:a5:89:75:e2:
         d5:9f:d1:c9:13:47:d6:ed:fb:09:95:b5:a0:06:71:34:2b:b8:
         a4:3a:d0:7e:77:2f:50:14:4a:a5:e9:6b:fd:ae:80:25:6f:8f:
         21:17:b4:d2:79:44:9d:7b:1f:cd:0f:08:43:d2:0b:39:d5:45:
         ab:6b:6d:a9:37:1c:ab:7f:cd:a2:d6:71:0b:b3:3f:bc:47:2d:
         dd:46:03:a4:c2:14:c1:d0:b6:7b:d2:a8:78:fc:68:96:e7:a8:
         ab:c8:2e:02:b8:3b:ed:f9:88:ce:77:01:ca:f8:9b:9f:6b:e6:
         ac:12:34:5f:61:8f:d7:06:84:56:93:75:77:04:10:40:15:41:
         1f:e1:a8:f0:b1:83:2a:ea:3c:b0:67:f3:78:0e:fc:fe:47:d4:
         67:f2:f8:6b:0d:2c:c8:1d:02:83:71:2c:be:e8:6c:a3:bb:ac:
         00:2d:18:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org