Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3133332e302f32342d3234203d3e203238363334.roa
File:                     3137372e3130352e3133332e302f32342d3234203d3e203238363334.roa (raw, json)
Hash identifier:          t0gp1w+Ac7hcC/EDXyqjFNwnhZpOFe6qV9+b3jiLD3E=
Subject key identifier:   CE:DF:3A:F7:67:7B:07:73:AA:E6:15:C4:EC:FC:21:04:38:48:B6:67
Certificate issuer:       /CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
Certificate serial:       3B1FA0DE87A9EFEB1DA40821F7CC0EFEADED540D
Authority key identifier: 2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3133332e302f32342d3234203d3e203238363334.roa
Signing time:             Mon 08 May 2023 15:16:39 +0000
ROA not before:           Mon 08 May 2023 15:11:39 +0000
ROA not after:            Mon 06 May 2024 15:16:39 +0000
asID:                     28634
IP address blocks:        177.105.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1f:a0:de:87:a9:ef:eb:1d:a4:08:21:f7:cc:0e:fe:ad:ed:54:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A38124DA4255FE32B70B911C7C0AD42921CFCAB
        Validity
            Not Before: May  8 15:11:39 2023 GMT
            Not After : May  6 15:16:39 2024 GMT
        Subject: CN=CEDF3AF7677B0773AAE615C4ECFC21043848B667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6a:01:09:9d:31:b3:e6:9b:e1:9d:72:af:a6:
                    f6:1d:f3:a9:48:fe:45:29:64:f8:e7:bc:3a:7c:d0:
                    3e:c9:44:9a:bd:26:dc:70:11:13:30:a1:25:d4:41:
                    3b:2d:28:65:86:cb:f5:1f:01:1b:03:20:87:5b:df:
                    08:55:f2:60:1d:22:21:1f:f4:00:e0:be:ad:19:86:
                    a5:d0:8c:c4:0c:3d:4b:12:9e:7b:68:bc:50:6b:f2:
                    6e:7d:80:dc:41:ca:3d:f2:b3:8f:b1:23:3e:8f:ba:
                    76:fe:03:de:82:94:e5:fb:53:54:96:23:40:a1:b5:
                    1f:94:7c:56:bc:68:ec:6b:9e:1f:bf:16:61:70:e3:
                    02:b1:9b:02:51:fc:33:29:eb:b1:b8:b6:31:8e:e1:
                    fd:8f:18:c6:8f:8e:bd:a3:81:7b:c1:62:1d:0c:e0:
                    07:22:48:b4:25:30:37:5b:de:8a:75:10:61:5b:63:
                    c0:f3:6c:ea:fb:9b:b0:6d:7a:32:2b:0b:e8:5a:5f:
                    1f:fa:3f:76:f6:d2:01:d5:da:0c:6d:2b:39:45:8d:
                    6a:c5:9f:ed:04:a6:ab:d3:60:47:04:f3:0c:fd:53:
                    12:1f:02:8d:8d:7a:e1:d5:b6:12:9b:0b:7f:dc:e2:
                    83:7d:86:b1:64:12:e1:74:44:a8:eb:2e:26:b3:66:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DF:3A:F7:67:7B:07:73:AA:E6:15:C4:EC:FC:21:04:38:48:B6:67
            X509v3 Authority Key Identifier:
                keyid:2A:38:12:4D:A4:25:5F:E3:2B:70:B9:11:C7:C0:AD:42:92:1C:FC:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A38124DA4255FE32B70B911C7C0AD42921CFCAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/0/3137372e3130352e3133332e302f32342d3234203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:56:38:cb:eb:06:b7:e9:63:ed:c7:56:26:f4:90:c9:d4:
         6e:99:02:00:c3:49:89:fa:35:d2:04:47:ec:5f:86:f1:1c:1f:
         3b:27:b9:d6:a3:07:83:8a:b2:29:3f:15:89:6e:55:03:b0:11:
         3f:1d:b6:b8:0a:87:fa:93:29:c2:58:54:4a:aa:96:ee:b8:e5:
         e4:e4:32:60:57:81:e4:8c:f6:df:fc:45:e5:51:67:59:08:8f:
         79:4c:8d:99:9d:52:72:bd:53:64:0e:1f:90:d9:e9:4c:eb:8b:
         9f:b3:e8:99:69:18:ee:d6:8d:43:f8:70:51:23:d8:a3:16:9e:
         e5:4f:f4:df:23:73:23:70:46:ba:a5:24:d4:20:56:dc:35:9f:
         21:a6:3a:2c:c9:bb:87:11:8a:39:48:85:bb:96:1f:8f:d2:dd:
         4c:7f:f0:34:05:24:ef:5e:6a:ab:d4:9a:a7:b9:d5:c5:3e:32:
         b1:3c:a5:b4:bf:43:79:a0:a9:1c:ac:1c:2e:b2:fb:ab:3d:b1:
         2b:5b:be:4c:17:95:ca:bf:fb:58:ba:d9:98:01:42:52:03:aa:
         8b:04:1b:63:4a:26:d4:aa:9f:cd:76:1e:a3:42:f5:b6:7a:92:
         72:d7:6a:f5:2f:7a:b1:2c:80:2a:1b:00:c6:ef:ef:f5:02:dc:
         87:c4:4c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:39 2023 by rpki-client on console.sobornost.net