Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          jwnf2xCAiexiKqFbWgcWM6d0phvW27yBwgHSw2CfYJw=
Subject key identifier:   BE:9B:45:34:12:43:CD:EF:65:F7:28:2E:BA:D2:A8:55:CD:4A:F0:EE
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       59E2923F625BC2288805E151844E5C1341C7FE36
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:46 +0000
ROA not before:           Thu 30 Nov 2023 12:34:46 +0000
ROA not after:            Thu 28 Nov 2024 12:39:46 +0000
asID:                     28182
IP address blocks:        170.231.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e2:92:3f:62:5b:c2:28:88:05:e1:51:84:4e:5c:13:41:c7:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:46 2023 GMT
            Not After : Nov 28 12:39:46 2024 GMT
        Subject: CN=BE9B45341243CDEF65F7282EBAD2A855CD4AF0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:af:b5:dc:a6:a6:fa:6a:ad:a7:15:80:59:
                    88:a7:18:8c:c3:8e:a3:80:5b:09:70:74:2d:80:61:
                    97:48:bb:85:5c:03:e0:63:a4:b8:6c:79:08:0f:38:
                    81:fd:45:06:ba:18:a7:0d:b9:ff:21:da:ce:5f:5a:
                    89:64:56:92:02:52:d5:95:9b:70:0b:80:dc:5d:5c:
                    79:fa:74:44:43:51:0d:64:77:9e:bc:66:1c:2b:32:
                    d5:a3:76:ad:90:c1:a2:80:86:bb:71:db:e1:b2:00:
                    e3:4a:74:d8:35:ee:9a:c1:dd:7f:b4:01:e1:24:e2:
                    45:3b:d0:73:72:6d:ba:fe:c0:15:cd:28:88:60:29:
                    8d:1e:0b:43:fc:02:29:5e:7a:10:29:2e:c5:d8:a6:
                    bc:4c:26:ba:d0:c6:c4:56:59:ad:a8:19:09:54:15:
                    29:33:17:df:14:2d:07:93:e3:da:19:66:f4:68:b5:
                    da:6a:9c:21:4e:2f:e8:05:df:25:38:ef:22:c3:86:
                    14:69:4a:fc:de:0d:cb:ec:e1:07:82:53:84:4f:81:
                    83:77:74:ba:c2:f0:1b:43:07:18:60:0c:5e:cb:e9:
                    d7:28:87:95:98:67:b2:5f:30:1a:ab:9c:a4:bc:ce:
                    22:8a:d4:93:ac:2f:c5:5d:e9:98:6a:5d:fc:98:c2:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:45:34:12:43:CD:EF:65:F7:28:2E:BA:D2:A8:55:CD:4A:F0:EE
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:4f:6f:49:11:c1:54:d2:1e:20:d1:72:5a:80:d1:d4:4f:
         fb:54:35:da:ba:0d:9a:d1:e7:a6:4e:cf:92:1b:cf:11:e8:f5:
         28:7f:87:b5:42:04:f0:34:05:ce:8a:d8:ff:72:af:0d:11:bc:
         ef:00:e2:35:e5:35:8d:45:e8:0e:4b:2f:6e:a3:7c:b2:73:a6:
         36:88:df:8b:9d:69:5b:77:bd:da:49:bd:da:56:b3:37:ac:52:
         68:0b:2c:ad:6a:65:ce:b6:08:72:8b:28:c5:2c:4f:9a:2d:6a:
         23:84:8b:33:e3:1f:47:e8:78:01:14:27:f1:4f:47:43:15:b5:
         a7:8c:69:30:c9:c0:12:51:da:bd:af:24:dd:85:23:6c:1e:d6:
         04:94:8c:df:c7:15:22:71:00:a8:33:76:f4:41:00:7b:3d:32:
         a9:4f:2c:4a:fa:6f:4e:44:7f:ab:2f:09:a6:2f:7a:fd:9a:62:
         5e:b6:35:eb:3a:0e:56:40:f0:7a:5a:19:ce:4b:16:b2:f8:53:
         26:0a:21:b3:2c:24:ad:16:5c:f9:bf:38:0e:53:ec:22:7c:46:
         13:32:92:c4:a2:6e:0e:ce:cb:b9:74:3e:30:88:e2:09:61:86:
         13:83:30:57:12:ec:26:9b:23:4a:4b:58:c0:63:0e:40:f9:f5:
         64:8e:ef:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWeKSP2JbwiiIBeFRhE5cE0HH/jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4MzFBRjRFNTU3NzlGRkRFQjg2OUZGODk4MEVCRjJG
REM0MjE5MjAeFw0yMzExMzAxMjM0NDZaFw0yNDExMjgxMjM5NDZaMDMxMTAvBgNV
BAMTKEJFOUI0NTM0MTI0M0NERUY2NUY3MjgyRUJBRDJBODU1Q0Q0QUYwRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVq+13Kam+mqtpxWAWYinGIzD
jqOAWwlwdC2AYZdIu4VcA+BjpLhseQgPOIH9RQa6GKcNuf8h2s5fWolkVpICUtWV
m3ALgNxdXHn6dERDUQ1kd568ZhwrMtWjdq2QwaKAhrtx2+GyAONKdNg17prB3X+0
AeEk4kU70HNybbr+wBXNKIhgKY0eC0P8AileehApLsXYprxMJrrQxsRWWa2oGQlU
FSkzF98ULQeT49oZZvRotdpqnCFOL+gF3yU47yLDhhRpSvzeDcvs4QeCU4RPgYN3
dLrC8BtDBxhgDF7L6dcoh5WYZ7JfMBqrnKS8ziKK1JOsL8Vd6ZhqXfyYwiHZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvptFNBJDze9l9yguutKoVc1K8O4wHwYDVR0j
BBgwFoAUO4Ma9OVXef/euGn/iYDr8v3EIZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC8zQjgzMUFGNEU1NTc3OUZGREVCODY5RkY4OTgwRUJGMkZEQzQyMTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCODMxQUY0RTU1Nzc5RkZE
RUI4NjlGRjg5ODBFQkYyRkRDNDIxOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq54IwDQYJKoZIhvcNAQELBQADggEBAIfqT29J
EcFU0h4g0XJagNHUT/tUNdq6DZrR56ZOz5IbzxHo9Sh/h7VCBPA0Bc6K2P9yrw0R
vO8A4jXlNY1F6A5LL26jfLJzpjaI34udaVt3vdpJvdpWszesUmgLLK1qZc62CHKL
KMUsT5otaiOEizPjH0foeAEUJ/FPR0MVtaeMaTDJwBJR2r2vJN2FI2we1gSUjN/H
FSJxAKgzdvRBAHs9MqlPLEr6b05Ef6svCaYvev2aYl62Nes6DlZA8HpaGc5LFrL4
UyYKIbMsJK0WXPm/OA5T7CJ8RhMyksSibg7Oy7l0PjCI4glhhhODMFcS7CabI0pL
WMBjDkD59WSO7yw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net