Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
File:                     3137392e3130372e38302e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier:          TtS8LP+n0JCFS8EBvhHK2Rs4EzBBOVGV675JM0hNHXk=
Subject key identifier:   01:8C:1F:C4:84:BC:39:9C:EB:B3:59:D7:F3:51:18:3C:98:5D:1B:2A
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       5BFF2075759719761CEF23819CB7341D6E8A9407
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        179.107.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ff:20:75:75:97:19:76:1c:ef:23:81:9c:b7:34:1d:6e:8a:94:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=018C1FC484BC399CEBB359D7F351183C985D1B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:2a:89:da:03:a3:d6:43:0d:59:2d:0e:ae:
                    e8:83:30:71:43:67:f4:15:dc:9d:43:ad:18:6c:c0:
                    67:d6:30:a6:53:da:4c:34:0e:88:26:9e:34:af:36:
                    08:ac:a0:63:31:1b:7a:20:81:38:4e:7f:a0:d4:49:
                    95:ed:23:86:69:00:88:d9:74:5f:2a:ce:13:d9:e5:
                    3f:8f:eb:80:91:e3:9b:d8:91:f1:e4:d9:d4:82:1b:
                    f1:ad:18:62:d8:8e:5d:95:b4:dd:68:cd:a5:51:14:
                    48:e9:f9:f0:15:1a:5b:3d:d2:e8:b8:58:8d:cd:c1:
                    6d:25:f4:40:85:86:75:d7:7e:8a:4d:31:9c:4c:12:
                    6c:06:6a:63:ab:02:16:05:69:6c:7f:96:e7:cf:8e:
                    6f:55:ab:26:82:b2:3b:19:fb:a0:7c:cb:57:bd:45:
                    b4:7f:8c:22:26:48:34:9e:83:e5:58:01:36:6f:2e:
                    26:a4:c8:25:04:b3:1c:a9:f2:47:9b:a1:10:13:7b:
                    f3:40:5b:bc:b3:2e:8e:9f:2f:06:29:de:50:c9:fb:
                    6e:8e:97:4f:5a:fb:3f:89:13:d1:bb:c1:90:bd:3f:
                    18:59:fd:b0:35:26:b8:24:6e:3c:c5:0d:90:45:41:
                    5c:4b:93:e9:0c:b3:8b:41:cc:5d:e8:bc:dd:ac:fc:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8C:1F:C4:84:BC:39:9C:EB:B3:59:D7:F3:51:18:3C:98:5D:1B:2A
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/3137392e3130372e38302e302f32322d3234203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.107.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:f9:18:f4:54:2f:b4:c1:45:38:ee:a9:5c:76:09:b0:4b:3e:
         0c:26:1a:ed:f6:a1:25:4c:04:16:d3:a9:ce:63:7d:73:0f:18:
         68:f4:f1:6b:03:6c:8b:50:20:89:2a:25:5d:aa:81:ce:29:9f:
         fd:b4:35:18:4c:4e:fa:b6:0e:dc:3a:47:f6:36:13:bd:1b:8c:
         e8:a8:b5:c2:f8:ed:6b:a4:7c:65:ad:af:6d:17:2b:22:c8:b2:
         b3:4c:5a:09:c8:ee:97:0c:d9:ad:92:04:98:17:6e:60:b7:45:
         7b:b6:02:3b:f3:96:bc:07:fb:00:51:5f:f2:98:0f:8f:0c:d1:
         e5:81:bf:36:98:32:99:58:2f:d9:71:c6:8b:2b:06:18:3f:67:
         e0:41:94:d8:82:50:c9:69:08:3e:ec:34:be:a4:d1:23:66:4b:
         63:0d:51:03:df:37:7d:4c:bb:78:9a:ce:97:7a:06:85:ca:fd:
         a7:b3:89:88:17:77:bc:73:f5:a8:7b:8d:21:1f:81:de:4d:d7:
         ce:ec:f0:87:a5:8d:24:b4:61:bb:aa:41:9b:e6:5d:f9:9a:60:
         95:8d:13:33:63:de:d2:d3:f6:b1:ed:56:6c:47:93:72:e9:cf:
         be:77:e7:fb:3e:c0:05:fb:f4:ee:3c:6b:4b:17:dc:f9:56:65:
         ad:82:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org