Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          8Q6DRTZ4Zk+EPGiOOlwIfEsdIzxgYo355PdlMLEHE0s=
Subject key identifier:   AC:57:20:4F:3F:EF:14:A0:C9:07:06:6E:0C:E7:B4:0E:D5:BC:C7:93
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       645581CA59C915D4ACC407F9C14B3C0198691FF1
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:45 +0000
ROA not before:           Thu 30 Nov 2023 12:34:45 +0000
ROA not after:            Thu 28 Nov 2024 12:39:45 +0000
asID:                     28182
IP address blocks:        170.231.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:81:ca:59:c9:15:d4:ac:c4:07:f9:c1:4b:3c:01:98:69:1f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:45 2023 GMT
            Not After : Nov 28 12:39:45 2024 GMT
        Subject: CN=AC57204F3FEF14A0C907066E0CE7B40ED5BCC793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:84:88:a3:63:f3:91:cf:df:ea:24:d4:5c:5c:
                    6e:82:5a:78:13:4b:0a:72:90:23:06:cb:94:13:8f:
                    96:56:98:b7:36:aa:4e:65:13:7f:d1:a9:2b:7b:61:
                    8b:12:77:fe:6b:75:17:fa:58:99:6a:51:1b:8b:3a:
                    dd:92:7d:58:45:5a:f4:eb:7f:a9:9b:06:4e:9e:24:
                    50:d6:fd:c3:65:d2:4b:84:0c:d8:52:50:6d:0a:86:
                    d2:11:b8:f8:0b:ab:06:54:96:6e:1b:a2:26:1a:9c:
                    f3:06:ca:c4:7e:99:be:7f:53:24:bd:3f:65:ca:d4:
                    9e:79:41:f8:73:29:54:29:aa:8e:00:9a:74:73:63:
                    8f:35:ec:79:39:ec:02:c9:0d:94:2d:e8:1f:54:fc:
                    61:fd:b8:73:f0:2d:81:46:c9:26:19:7b:b5:89:5c:
                    2b:83:08:71:14:e7:75:c6:0f:f1:66:a4:84:df:d3:
                    74:d0:a1:8f:51:4d:b3:42:4f:df:f7:bd:5e:a4:82:
                    66:d8:39:0b:e8:6f:84:70:f2:16:13:66:e8:27:07:
                    ba:7c:cc:88:2e:25:33:ff:96:38:ab:de:41:81:3a:
                    39:cd:e6:f3:06:3a:bf:bb:ef:90:8e:18:97:5b:e0:
                    4c:ba:be:e1:33:24:d4:60:ed:41:07:9f:a9:ab:fd:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:20:4F:3F:EF:14:A0:C9:07:06:6E:0C:E7:B4:0E:D5:BC:C7:93
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:88:fe:53:1d:06:4e:0c:b5:c2:f6:78:bf:50:1f:ee:93:
         35:55:69:18:5d:cb:bf:11:de:bd:47:b8:fe:9a:93:f9:63:f4:
         e9:71:fd:41:76:8e:d0:70:4a:19:cd:ce:c4:1f:6f:cb:25:e8:
         b0:37:b2:5a:10:e9:fb:83:5a:bf:ff:1f:48:8e:8b:90:af:2c:
         fa:28:f9:46:22:1c:2d:34:73:f4:12:dc:19:b3:fc:99:b9:0f:
         91:94:e9:14:53:57:0b:a8:c0:57:4b:dc:85:ad:58:f3:15:96:
         4c:90:98:66:e2:6e:32:d2:d9:30:26:75:07:a1:e0:1f:d1:cc:
         65:e1:e3:02:e2:74:8f:b9:f3:72:8a:e8:ba:cd:12:24:f8:9b:
         0a:32:08:2f:3b:ff:b2:d0:9f:26:dd:9d:57:92:ad:43:69:9b:
         80:ac:75:ad:8e:68:0c:3e:2f:c3:e1:12:6b:c1:aa:b1:95:de:
         8f:d1:ca:5d:e4:5c:76:36:15:37:92:0d:44:86:c5:ce:95:86:
         08:15:ed:80:d3:e0:a1:f1:27:64:53:0c:65:a9:f5:44:4f:d9:
         17:6f:c0:bb:50:e0:8f:f7:88:f6:6f:93:7a:9b:13:bc:0e:9d:
         c1:3a:33:09:b3:80:41:5e:ed:cb:a4:77:07:08:ef:c9:7d:ec:
         c8:6c:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net