Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          7R5d3Q8szrhH9f1+LHrtX2PNEVeZR5a/dv6U/ycv39Y=
Subject key identifier:   10:54:BE:E0:72:83:83:83:97:F2:74:73:6C:A2:84:28:42:D3:2A:9C
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       08048D8F63F7B9CC22AB0AF8B4E6AEE2FCED380D
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:42 +0000
ROA not before:           Thu 30 Nov 2023 12:34:42 +0000
ROA not after:            Thu 28 Nov 2024 12:39:42 +0000
asID:                     28182
IP address blocks:        170.231.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:8d:8f:63:f7:b9:cc:22:ab:0a:f8:b4:e6:ae:e2:fc:ed:38:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:42 2023 GMT
            Not After : Nov 28 12:39:42 2024 GMT
        Subject: CN=1054BEE07283838397F274736CA2842842D32A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:09:ce:b4:24:59:06:4c:92:ca:46:0f:79:
                    e5:55:ac:bd:69:9b:94:f7:b5:2e:e4:26:9e:8e:8d:
                    19:d4:2e:7d:63:31:30:4b:6f:49:30:3e:0b:79:03:
                    4e:80:76:fd:81:65:6b:6f:5d:4f:64:38:aa:f1:3f:
                    53:60:52:05:f1:ba:b8:66:35:3b:35:84:e4:20:7a:
                    73:a1:db:27:a7:62:d1:36:a5:f6:a6:1f:bb:26:c5:
                    60:ed:79:13:fb:00:24:81:aa:ea:53:52:0e:9c:ce:
                    92:cf:45:55:c2:7a:d3:33:2c:3a:e9:98:53:7a:44:
                    b5:36:49:63:55:74:da:94:f3:3b:b0:1d:87:ae:11:
                    d0:92:ea:dc:9a:31:53:4e:51:1a:cd:72:6f:90:92:
                    9d:be:83:67:4f:5b:c1:69:07:5f:60:16:77:12:1c:
                    74:94:5f:60:97:36:a8:be:d3:0f:fd:c5:c9:66:78:
                    d2:4f:4e:fc:68:9f:2f:9f:d5:ac:75:db:6f:83:7b:
                    dd:2a:af:cc:4e:1e:30:45:28:1b:fe:27:f2:85:95:
                    af:82:f9:58:95:a8:1c:f3:4e:f5:19:4e:31:1d:5f:
                    6f:3e:46:d6:cc:26:68:09:12:7b:13:4b:ef:4f:39:
                    cd:53:88:a0:1d:4a:e9:b0:3b:d3:0d:a6:47:ff:d8:
                    c0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:54:BE:E0:72:83:83:83:97:F2:74:73:6C:A2:84:28:42:D3:2A:9C
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:47:55:51:0b:86:65:cb:24:8b:b9:91:06:58:d9:76:21:
         68:00:fb:e9:b4:93:22:08:2d:2b:43:b2:27:2d:0c:1b:f6:f4:
         e0:c2:67:f8:04:b2:b1:b8:41:b2:42:d5:9d:87:c5:a4:9b:a5:
         b1:2a:1a:cf:17:05:8d:ed:3a:c6:2e:79:34:69:c3:ef:9c:5a:
         dc:01:02:d9:1c:f6:ad:57:64:98:99:d5:c3:66:ab:8b:5e:10:
         17:79:17:bb:2c:a1:f0:b1:a1:56:18:81:7e:95:c9:9c:26:ae:
         a1:1a:f6:48:5f:72:25:ca:f4:36:75:8f:b2:f7:f2:bd:fd:6e:
         3f:a3:d0:fa:5b:97:2d:3e:fa:18:0d:75:bb:38:4b:3e:cf:17:
         c6:4c:64:0c:cd:4c:31:33:6a:90:61:5b:45:f6:ae:02:22:41:
         7b:ce:1a:3b:b6:13:78:a4:37:b6:44:ff:24:e8:0a:2b:4d:17:
         35:18:57:5f:e7:92:c6:5c:0d:f2:72:5e:aa:1e:4f:15:37:2a:
         09:e0:e9:fd:e5:cb:ac:24:94:f3:d6:af:67:f3:a0:3e:cd:dc:
         2c:35:f2:ea:4b:f9:22:d9:3b:bf:3b:b9:5c:c6:62:12:10:8b:
         1a:98:6f:1b:a1:2f:77:92:7a:47:78:06:3d:23:9f:c2:2b:3a:
         70:60:03:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net