Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          YGdfgITJQ2cD/p7ErNbK4Hx0udSNlkFhr7b4PSQK6XU=
Subject key identifier:   65:53:19:A7:EB:8F:7E:C2:19:68:B0:B7:8A:AD:AD:39:EB:74:76:2A
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       0699463FAFB2EC5064383F68BD313029928C13E6
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:43 +0000
ROA not before:           Thu 30 Nov 2023 12:34:43 +0000
ROA not after:            Thu 28 Nov 2024 12:39:43 +0000
asID:                     28182
IP address blocks:        170.231.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:99:46:3f:af:b2:ec:50:64:38:3f:68:bd:31:30:29:92:8c:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:43 2023 GMT
            Not After : Nov 28 12:39:43 2024 GMT
        Subject: CN=655319A7EB8F7EC21968B0B78AADAD39EB74762A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:2b:fb:f1:a7:49:be:5d:46:75:5f:48:a5:
                    f7:3b:12:33:86:15:4b:81:56:6e:a3:70:36:a4:dc:
                    2b:14:47:0b:f4:28:9b:aa:30:0a:d6:cc:5c:ea:ad:
                    6b:12:ff:86:c6:7c:bd:77:ce:e3:5e:23:d9:5a:3c:
                    98:d2:65:ba:d4:9c:4b:dc:cd:8a:ad:82:02:f0:a7:
                    c4:b6:ee:75:85:bc:37:90:b0:3f:da:31:41:6e:cc:
                    20:b0:7d:ac:7a:93:e8:d2:c3:d9:73:a1:ee:e6:27:
                    c4:c7:04:2f:bb:45:02:fb:22:25:5e:a1:b1:61:0c:
                    54:08:eb:d1:e8:a5:6a:52:0d:44:92:58:23:2f:62:
                    fa:01:7e:8c:dd:93:f7:50:22:6b:be:55:42:e0:b3:
                    7f:83:8f:ad:c8:04:96:6e:a0:04:b6:48:3f:48:62:
                    34:20:d4:66:2c:67:75:2b:28:35:5f:51:92:b5:27:
                    81:b0:63:d7:eb:2c:be:43:b5:5a:b5:84:20:cb:b8:
                    fd:35:28:43:b7:52:a5:eb:2a:be:e5:a4:2c:6a:9c:
                    2e:5a:26:a5:22:69:98:5f:57:7c:a8:f0:82:d0:af:
                    66:bc:f9:91:bd:b4:27:21:66:91:56:8b:4e:bd:96:
                    e1:3b:26:bd:6f:02:18:df:5a:3b:ee:a9:b7:fb:40:
                    b5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:19:A7:EB:8F:7E:C2:19:68:B0:B7:8A:AD:AD:39:EB:74:76:2A
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:dd:0c:cc:7b:1e:1e:c6:41:9c:9c:ee:9b:76:44:31:21:
         75:08:ab:b9:f3:e0:c0:3c:5b:8f:c8:58:16:35:73:61:1d:de:
         20:2a:a7:33:57:d1:80:e4:a8:ff:11:ec:35:95:f2:c8:f9:71:
         76:81:9d:32:97:07:ab:42:bd:a0:ce:18:01:96:a8:78:a8:51:
         54:e4:06:86:dd:56:d5:30:7e:0d:6a:5e:3e:6a:1f:1b:9a:66:
         c7:43:90:06:84:be:c1:d2:2b:57:03:a1:45:2e:72:4b:7b:24:
         f2:86:10:2d:20:a7:2d:7e:34:68:47:03:8b:4c:c9:4a:da:d2:
         01:f7:41:81:99:e6:0e:de:27:40:28:e0:fe:18:9c:74:33:e9:
         41:78:66:8c:fd:24:8f:4b:e8:73:4c:31:00:2a:77:07:19:ad:
         20:16:5e:e3:e7:33:f4:ee:64:24:81:6f:0b:20:1b:6c:fa:59:
         83:db:db:f1:47:55:18:d9:20:6a:3a:7d:72:65:36:fa:04:dc:
         e5:79:42:ce:44:c9:3b:8b:28:1e:3c:f1:5b:15:f4:7b:c4:17:
         c1:d2:1b:c9:03:d1:00:ec:15:4d:3d:64:cd:74:d1:96:82:50:
         23:18:d8:19:37:49:ea:ae:31:a4:ac:56:9c:0f:45:31:14:55:
         31:ad:3a:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBplGP6+y7FBkOD9ovTEwKZKME+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4MzFBRjRFNTU3NzlGRkRFQjg2OUZGODk4MEVCRjJG
REM0MjE5MjAeFw0yMzExMzAxMjM0NDNaFw0yNDExMjgxMjM5NDNaMDMxMTAvBgNV
BAMTKDY1NTMxOUE3RUI4RjdFQzIxOTY4QjBCNzhBQURBRDM5RUI3NDc2MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ZSv78adJvl1GdV9Ipfc7EjOG
FUuBVm6jcDak3CsURwv0KJuqMArWzFzqrWsS/4bGfL13zuNeI9laPJjSZbrUnEvc
zYqtggLwp8S27nWFvDeQsD/aMUFuzCCwfax6k+jSw9lzoe7mJ8THBC+7RQL7IiVe
obFhDFQI69HopWpSDUSSWCMvYvoBfozdk/dQImu+VULgs3+Dj63IBJZuoAS2SD9I
YjQg1GYsZ3UrKDVfUZK1J4GwY9frLL5DtVq1hCDLuP01KEO3UqXrKr7lpCxqnC5a
JqUiaZhfV3yo8ILQr2a8+ZG9tCchZpFWi069luE7Jr1vAhjfWjvuqbf7QLXPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZVMZp+uPfsIZaLC3iq2tOet0diowHwYDVR0j
BBgwFoAUO4Ma9OVXef/euGn/iYDr8v3EIZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC8zQjgzMUFGNEU1NTc3OUZGREVCODY5RkY4OTgwRUJGMkZEQzQyMTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCODMxQUY0RTU1Nzc5RkZE
RUI4NjlGRjg5ODBFQkYyRkRDNDIxOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq54EwDQYJKoZIhvcNAQELBQADggEBAE7X3QzM
ex4exkGcnO6bdkQxIXUIq7nz4MA8W4/IWBY1c2Ed3iAqpzNX0YDkqP8R7DWV8sj5
cXaBnTKXB6tCvaDOGAGWqHioUVTkBobdVtUwfg1qXj5qHxuaZsdDkAaEvsHSK1cD
oUUuckt7JPKGEC0gpy1+NGhHA4tMyUra0gH3QYGZ5g7eJ0Ao4P4YnHQz6UF4Zoz9
JI9L6HNMMQAqdwcZrSAWXuPnM/TuZCSBbwsgG2z6WYPb2/FHVRjZIGo6fXJlNvoE
3OV5Qs5EyTuLKB488VsV9HvEF8HSG8kD0QDsFU09ZM100ZaCUCMY2Bk3SequMaSs
VpwPRTEUVTGtOlE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net