Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa
File:                     3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          jLlEBaCd6upldbv9W4aWiWH+PRBiNgxBe7iTR8PKFxk=
Subject key identifier:   02:D4:DD:89:43:1B:02:78:88:40:1F:57:47:E9:CC:27:AF:0E:75:CE
Certificate issuer:       /CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
Certificate serial:       1543ABE21F5DFD865BF5D9D62FCBC13EE5CF57FA
Authority key identifier: BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa
Signing time:             Mon 04 Sep 2023 19:55:11 +0000
ROA not before:           Mon 04 Sep 2023 19:50:11 +0000
ROA not after:            Mon 02 Sep 2024 19:55:11 +0000
asID:                     52873
IP address blocks:        177.128.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:43:ab:e2:1f:5d:fd:86:5b:f5:d9:d6:2f:cb:c1:3e:e5:cf:57:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF5A31CC8ABD6043D35034F4D2719415487EBA2
        Validity
            Not Before: Sep  4 19:50:11 2023 GMT
            Not After : Sep  2 19:55:11 2024 GMT
        Subject: CN=02D4DD89431B027888401F5747E9CC27AF0E75CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:0b:45:c4:f3:48:84:28:1c:b9:78:ac:21:
                    53:c7:b9:3b:ec:8b:88:6a:84:39:d2:fa:0a:62:98:
                    c8:d6:be:ca:2e:84:92:dc:90:db:81:f2:24:50:c2:
                    2d:7a:62:2e:cf:13:67:8d:37:4a:d9:54:07:ce:42:
                    a3:ab:6e:49:b5:1a:4f:51:30:1f:33:c8:0c:db:43:
                    df:70:f4:92:d1:d3:62:90:04:8e:ff:84:fe:bb:31:
                    2d:df:d2:8c:a7:ec:d5:13:ed:ce:f8:56:d1:85:f9:
                    91:fd:f2:93:87:36:e3:f9:86:67:d3:ca:02:9b:2a:
                    24:b7:90:35:69:9a:2b:6f:46:2a:f2:a5:e9:8e:fd:
                    f0:06:0b:83:d9:43:48:a4:c9:57:27:12:96:9a:af:
                    21:f9:1c:48:05:f7:bf:d5:fe:fd:73:fc:10:48:c6:
                    45:a3:97:50:b3:2c:fb:9c:fc:1d:21:0e:ae:a1:55:
                    92:a6:99:da:3a:a4:e0:5b:65:63:07:f9:6f:ac:15:
                    20:0d:3b:bf:c5:02:94:7f:a4:70:d1:96:94:87:16:
                    14:f2:1c:20:22:d5:49:a4:4c:a4:3f:f6:0d:83:78:
                    db:cb:eb:eb:dd:87:fb:ee:b1:10:27:b5:5f:72:9e:
                    47:77:24:c7:d1:1a:c0:c9:b3:69:88:9b:2e:12:f9:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D4:DD:89:43:1B:02:78:88:40:1F:57:47:E9:CC:27:AF:0E:75:CE
            X509v3 Authority Key Identifier:
                keyid:BD:F5:A3:1C:C8:AB:D6:04:3D:35:03:4F:4D:27:19:41:54:87:EB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF5A31CC8ABD6043D35034F4D2719415487EBA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3137372e3132382e3231322e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:73:ce:dd:6e:b4:ad:1a:b0:26:fb:f8:25:1e:ce:0f:dd:9a:
         9e:b1:b2:c4:59:bb:72:09:0a:47:61:a1:95:0b:95:72:ce:13:
         9d:c7:32:9f:d2:8d:25:b7:d9:85:e4:80:5f:92:e1:9c:67:d7:
         1b:a4:72:fb:61:fb:3d:23:85:c9:1b:cb:9e:1a:48:ea:ee:41:
         a6:1a:62:00:83:d7:16:f0:7d:f5:d1:ec:ec:1d:f8:4e:a7:71:
         f4:f9:4b:d1:28:3b:7e:ec:17:f0:73:fe:01:23:7d:9f:c0:2f:
         ca:25:2b:f7:e7:f1:c0:c3:59:1e:e4:bc:f9:87:2f:c4:1f:0b:
         99:ec:3a:fd:6c:c4:ad:01:a6:b5:3e:7f:bc:d5:40:3a:83:0b:
         a5:47:2d:bd:cf:fe:f3:14:4d:0a:50:e8:f1:8e:a2:31:8b:f8:
         2b:f4:5b:26:9c:f3:de:7f:63:77:6d:2e:db:18:43:0c:e4:03:
         54:2e:34:0e:d2:96:79:ec:84:1c:6f:30:bf:80:20:7d:6f:60:
         3c:37:77:aa:b9:65:df:ef:91:6b:fd:03:17:d3:4f:43:56:ed:
         cd:b5:5b:b6:2e:d9:ae:80:8d:47:36:08:7c:ca:4b:a4:3f:e0:
         7f:f1:2d:9f:98:05:ab:e0:0a:a4:a7:04:83:5f:23:cb:29:d2:
         57:c6:78:c3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFUOr4h9d/YZb9dnWL8vBPuXPV/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGNUEzMUNDOEFCRDYwNDNEMzUwMzRGNEQyNzE5NDE1
NDg3RUJBMjAeFw0yMzA5MDQxOTUwMTFaFw0yNDA5MDIxOTU1MTFaMDMxMTAvBgNV
BAMTKDAyRDRERDg5NDMxQjAyNzg4ODQwMUY1NzQ3RTlDQzI3QUYwRTc1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChQtFxPNIhCgcuXisIVPHuTvs
i4hqhDnS+gpimMjWvsouhJLckNuB8iRQwi16Yi7PE2eNN0rZVAfOQqOrbkm1Gk9R
MB8zyAzbQ99w9JLR02KQBI7/hP67MS3f0oyn7NUT7c74VtGF+ZH98pOHNuP5hmfT
ygKbKiS3kDVpmitvRirypemO/fAGC4PZQ0ikyVcnEpaaryH5HEgF97/V/v1z/BBI
xkWjl1CzLPuc/B0hDq6hVZKmmdo6pOBbZWMH+W+sFSANO7/FApR/pHDRlpSHFhTy
HCAi1UmkTKQ/9g2DeNvL6+vdh/vusRAntV9ynkd3JMfRGsDJs2mImy4S+fVfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAtTdiUMbAniIQB9XR+nMJ68Odc4wHwYDVR0j
BBgwFoAUvfWjHMir1gQ9NQNPTScZQVSH66IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC9CREY1QTMxQ0M4QUJENjA0M0QzNTAzNEY0RDI3MTk0MTU0ODdFQkEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JERjVBMzFDQzhBQkQ2MDQz
RDM1MDM0RjREMjcxOTQxNTQ4N0VCQTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgNQwDQYJKoZIhvcNAQELBQADggEBABVzzt1u
tK0asCb7+CUezg/dmp6xssRZu3IJCkdhoZULlXLOE53HMp/SjSW32YXkgF+S4Zxn
1xukcvth+z0jhckby54aSOruQaYaYgCD1xbwffXR7Owd+E6ncfT5S9EoO37sF/Bz
/gEjfZ/AL8olK/fn8cDDWR7kvPmHL8QfC5nsOv1sxK0BprU+f7zVQDqDC6VHLb3P
/vMUTQpQ6PGOojGL+Cv0Wyac895/Y3dtLtsYQwzkA1QuNA7SlnnshBxvML+AIH1v
YDw3d6q5Zd/vkWv9AxfTT0NW7c21W7Yu2a6AjUc2CHzKS6Q/4H/xLZ+YBavgCqSn
BINfI8sp0lfGeMM=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net