Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0/3139322e3134342e37322e302f32332d3234203d3e20323637333232.roa
File:                     3139322e3134342e37322e302f32332d3234203d3e20323637333232.roa (raw, json)
Hash identifier:          aYzjdf/fzVY/tlghXlRxcACsfByDZ9pScaaomeS8WaA=
Subject key identifier:   FD:23:C0:DF:10:8F:B1:49:62:9A:FC:3D:AF:F9:F9:F8:2D:59:68:F7
Certificate issuer:       /CN=71DB06E0D6703DCE6E5A2DB82C873D38B26477CD
Certificate serial:       42751ECE432C8A16769B7A6B085229212EDC2890
Authority key identifier: 71:DB:06:E0:D6:70:3D:CE:6E:5A:2D:B8:2C:87:3D:38:B2:64:77:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB06E0D6703DCE6E5A2DB82C873D38B26477CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0/3139322e3134342e37322e302f32332d3234203d3e20323637333232.roa
Signing time:             Wed 22 Sep 2021 14:54:16 +0000
ROA not before:           Wed 22 Sep 2021 14:49:16 +0000
ROA not after:            Thu 22 Sep 2022 14:54:16 +0000
asID:                     267322
IP address blocks:        192.144.72.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:75:1e:ce:43:2c:8a:16:76:9b:7a:6b:08:52:29:21:2e:dc:28:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DB06E0D6703DCE6E5A2DB82C873D38B26477CD
        Validity
            Not Before: Sep 22 14:49:16 2021 GMT
            Not After : Sep 22 14:54:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:24:a6:bb:ae:39:a2:a9:f3:16:64:d7:c1:
                    4d:45:ff:5e:87:31:d0:f3:7c:4f:45:4e:25:66:99:
                    31:6c:2b:09:e0:9b:08:8a:a1:38:17:58:ab:b3:74:
                    0d:9a:1f:26:b3:0c:3b:d8:71:17:55:4c:be:97:99:
                    7f:f3:8f:87:ef:1c:32:a5:15:fd:b2:b3:6c:01:a2:
                    cc:c8:39:1b:45:ee:18:50:b4:86:2e:7c:26:cd:23:
                    4e:0b:98:91:de:35:d1:2c:03:43:36:97:a2:fa:cf:
                    96:5f:c2:9a:b1:2b:62:e5:cf:68:b9:6b:4e:55:5f:
                    d5:94:2e:c3:ed:64:5b:64:1c:99:c8:67:6b:b8:82:
                    e9:da:64:18:5b:87:8e:60:65:bf:5f:f0:f8:15:fb:
                    a4:ea:02:4e:e1:1b:3e:54:ae:d3:46:9a:18:a6:3f:
                    e0:0d:1e:66:d9:53:c5:42:54:f7:b3:a7:c6:ed:b4:
                    09:35:eb:de:c7:8c:7f:7b:f9:a3:8d:bf:b0:de:19:
                    b0:ef:2c:4b:a8:fa:b2:51:11:62:68:4a:30:a8:ea:
                    2d:30:78:96:22:68:24:7e:a6:8d:ef:14:c7:b2:b9:
                    a0:6f:46:36:b8:17:08:af:47:4a:c2:9a:27:58:27:
                    b7:17:1b:d3:fe:5b:a6:30:ae:a0:e5:ec:bb:0e:04:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:23:C0:DF:10:8F:B1:49:62:9A:FC:3D:AF:F9:F9:F8:2D:59:68:F7
            X509v3 Authority Key Identifier:
                keyid:71:DB:06:E0:D6:70:3D:CE:6E:5A:2D:B8:2C:87:3D:38:B2:64:77:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0/71DB06E0D6703DCE6E5A2DB82C873D38B26477CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB06E0D6703DCE6E5A2DB82C873D38B26477CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0/3139322e3134342e37322e302f32332d3234203d3e20323637333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:d5:5d:db:62:1b:2f:13:b8:61:27:f8:0c:c2:43:fa:90:09:
         03:3c:8a:a2:b1:7e:22:ba:95:50:fa:d7:62:d2:77:1b:46:6a:
         ec:9b:e6:d8:da:98:1f:b3:06:17:b8:e8:20:8e:71:66:eb:32:
         71:75:93:3a:8e:75:66:ad:b6:82:f0:e3:ef:00:66:b5:3c:f8:
         52:c0:29:2c:10:40:48:ff:ff:f8:8f:02:46:83:80:69:ad:93:
         31:1c:81:f4:87:f2:39:47:31:e1:f4:e7:34:fb:8a:5a:98:52:
         e3:56:51:2e:15:51:f8:18:f0:9f:d5:37:45:0c:e8:8f:fb:4d:
         f0:b2:62:c2:9c:16:8b:c8:c9:ac:10:7f:d4:7b:57:da:e0:cf:
         b3:50:c8:d0:7a:d9:b4:32:82:f3:7f:8c:ac:06:ce:aa:48:97:
         24:e6:18:c9:98:11:be:e7:ad:61:29:60:6d:a4:d1:89:85:3d:
         2b:1e:4d:15:cd:de:83:2b:04:6d:bf:d6:4c:43:b1:19:b2:1d:
         23:3f:a2:80:b8:c8:9f:31:96:f8:0c:e5:44:e8:0b:80:8a:40:
         b5:14:a6:3e:92:48:58:35:9a:57:08:7c:0a:f1:a5:27:32:5e:
         42:f2:a0:5c:f7:e1:d1:a3:31:9f:b0:c6:2d:df:a0:a5:33:b0:
         38:94:18:ac
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUQnUezkMsihZ2m3prCFIpIS7cKJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFEQjA2RTBENjcwM0RDRTZFNUEyREI4MkM4NzNEMzhC
MjY0NzdDRDAeFw0yMTA5MjIxNDQ5MTZaFw0yMjA5MjIxNDU0MTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE3NzI0QTZCQkFFMzlBMkE5
RjMxNjY0RDdDMTRENDVGRjVFODczMUQwRjM3QzRGNDU0RTI1NjY5OTMxNkMyQjA5
RTA5QjA4OEFBMTM4MTc1OEFCQjM3NDBEOUExRjI2QjMwQzNCRDg3MTE3NTU0Q0JF
OTc5OTdGRjM4Rjg3RUYxQzMyQTUxNUZEQjJCMzZDMDFBMkNDQzgzOTFCNDVFRTE4
NTBCNDg2MkU3QzI2Q0QyMzRFMEI5ODkxREUzNUQxMkMwMzQzMzY5N0EyRkFDRjk2
NUZDMjlBQjEyQjYyRTVDRjY4Qjk2QjRFNTU1RkQ1OTQyRUMzRUQ2NDVCNjQxQzk5
Qzg2NzZCQjg4MkU5REE2NDE4NUI4NzhFNjA2NUJGNUZGMEY4MTVGQkE0RUEwMjRF
RTExQjNFNTRBRUQzNDY5QTE4QTYzRkUwMEQxRTY2RDk1M0M1NDI1NEY3QjNBN0M2
RURCNDA5MzVFQkRFQzc4QzdGN0JGOUEzOERCRkIwREUxOUIwRUYyQzRCQThGQUIy
NTExMTYyNjg0QTMwQThFQTJEMzA3ODk2MjI2ODI0N0VBNjhERUYxNEM3QjJCOUEw
NkY0NjM2QjgxNzA4QUY0NzRBQzI5QTI3NTgyN0I3MTcxQkQzRkU1QkE2MzBBRUEw
RTVFQ0JCMEUwNDlFNUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0XckpruuOaKp8xZk18FNRf9ehzHQ83xPRU4lZpkxbCsJ4JsIiqE4
F1irs3QNmh8msww72HEXVUy+l5l/84+H7xwypRX9srNsAaLMyDkbRe4YULSGLnwm
zSNOC5iR3jXRLANDNpei+s+WX8KasSti5c9ouWtOVV/VlC7D7WRbZByZyGdruILp
2mQYW4eOYGW/X/D4Ffuk6gJO4Rs+VK7TRpoYpj/gDR5m2VPFQlT3s6fG7bQJNeve
x4x/e/mjjb+w3hmw7yxLqPqyURFiaEowqOotMHiWImgkfqaN7xTHsrmgb0Y2uBcI
r0dKwponWCe3FxvT/lumMK6g5ey7DgSeXwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FP0jwN8Qj7FJYpr8Pa/5+fgtWWj3MB8GA1UdIwQYMBaAFHHbBuDWcD3OblotuCyH
PTiyZHfNMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z2UFBnMktEWTNEZTRt
REE3RWl5YzZmRjZ3S2gzYVJTeVE1ZmFKUVo4bWZELzAvNzFEQjA2RTBENjcwM0RD
RTZFNUEyREI4MkM4NzNEMzhCMjY0NzdDRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83MURCMDZFMEQ2NzAzRENFNkU1QTJEQjgyQzg3M0QzOEIyNjQ3
N0NELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GdlBQZzJLRFkzRGU0bURBN0Vp
eWM2ZkY2d0toM2FSU3lRNWZhSlFaOG1mRC8wLzMxMzkzMjJlMzEzNDM0MmUzNzMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM3MzMzMjMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
wJBIMA0GCSqGSIb3DQEBCwUAA4IBAQBD1V3bYhsvE7hhJ/gMwkP6kAkDPIqisX4i
upVQ+tdi0ncbRmrsm+bY2pgfswYXuOggjnFm6zJxdZM6jnVmrbaC8OPvAGa1PPhS
wCksEEBI///4jwJGg4BprZMxHIH0h/I5RzHh9Oc0+4pamFLjVlEuFVH4GPCf1TdF
DOiP+03wsmLCnBaLyMmsEH/Ue1fa4M+zUMjQetm0MoLzf4ysBs6qSJck5hjJmBG+
561hKWBtpNGJhT0rHk0Vzd6DKwRtv9ZMQ7EZsh0jP6KAuMifMZb4DOVE6AuAikC1
FKY+kkhYNZpXCHwK8aUnMl5C8qBc9+HRozGfsMYt36ClM7A4lBis
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:34 2023 by rpki-client on console.sobornost.net