Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          5t6LQgWKMe64Tg9+V6nif/+WRLoyI/x5Aeu2D5yLD5w=
Subject key identifier:   DC:83:43:FA:03:46:F6:8D:6A:BB:12:27:AA:3F:A9:AD:E3:F6:B9:4C
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       0939F455C4C924C51CF37F670762EFAEA14FC6A3
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:45 +0000
ROA not before:           Thu 30 Nov 2023 12:34:45 +0000
ROA not after:            Thu 28 Nov 2024 12:39:45 +0000
asID:                     28182
IP address blocks:        170.231.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:39:f4:55:c4:c9:24:c5:1c:f3:7f:67:07:62:ef:ae:a1:4f:c6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:45 2023 GMT
            Not After : Nov 28 12:39:45 2024 GMT
        Subject: CN=DC8343FA0346F68D6ABB1227AA3FA9ADE3F6B94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:47:54:01:19:19:08:d7:a1:d6:92:20:a8:be:
                    8b:81:aa:ad:e6:d8:48:09:fd:86:7a:18:a2:92:dd:
                    52:61:65:27:49:91:49:b5:58:f7:d2:53:d0:cb:d1:
                    ea:e4:28:8e:78:0b:83:28:b7:39:93:51:0b:d0:e9:
                    f7:39:c3:48:6e:a6:39:e7:91:67:06:76:7e:4f:94:
                    3e:c9:5d:ab:3d:ab:75:ec:6b:38:73:9f:fb:6c:8a:
                    9b:61:3b:0e:55:0d:62:80:f3:32:cd:63:5e:51:d0:
                    4f:54:19:4d:91:1f:ea:df:22:d5:49:df:f7:2d:2a:
                    36:5a:1e:2a:a7:59:0e:52:75:d6:2f:c7:ec:ec:35:
                    cc:13:0a:d2:c6:9d:ea:0f:54:1e:4d:4d:fb:6f:a2:
                    6e:68:34:3c:99:13:4d:7f:8a:01:b4:31:9b:fe:4a:
                    06:b3:b0:d6:26:09:62:dc:6a:c0:a8:d5:62:6a:cc:
                    c8:5a:b8:31:cb:5a:48:41:72:cf:15:d9:ac:05:7c:
                    a7:b9:03:42:09:bf:5d:c4:7e:f1:47:89:7d:08:4d:
                    be:82:37:76:3d:e5:29:ad:ba:2c:72:d5:75:44:b8:
                    19:d6:02:01:42:06:bf:f3:aa:85:c5:26:00:4c:9c:
                    6c:0d:ee:53:e6:12:19:35:6b:be:9f:01:df:d3:44:
                    56:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:43:FA:03:46:F6:8D:6A:BB:12:27:AA:3F:A9:AD:E3:F6:B9:4C
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:bd:45:34:77:90:eb:14:bd:bf:d0:35:2f:8e:43:c7:a2:
         06:e2:8e:ee:85:ad:7b:13:cb:c2:32:5d:43:2b:c5:34:62:f3:
         b5:2a:b3:8c:c2:08:3b:c7:7d:a0:e4:ee:14:4b:81:8e:6c:55:
         9f:c8:c1:56:fb:7f:90:91:ac:6d:a0:7f:d2:a9:5d:68:17:f8:
         31:ec:c2:16:b4:8a:b0:fd:36:9e:1e:32:74:99:a4:bf:8c:ce:
         9d:5a:cb:5e:55:46:ef:ae:60:90:be:b0:63:18:ea:09:93:ac:
         b6:e2:c5:b8:e6:e5:2f:59:30:2b:0f:d1:b1:86:8b:0b:d0:ca:
         37:82:4f:e5:9c:80:d0:bc:aa:ea:43:23:46:cb:15:04:2a:a1:
         31:13:5d:3e:7b:8b:cf:c6:17:f2:1e:34:5c:09:02:ea:d1:1d:
         f7:7e:85:bc:6e:23:a6:6e:01:98:63:bf:ba:6e:14:ae:93:d7:
         98:cf:59:f8:8d:73:66:f8:83:d8:9d:5f:7f:02:54:ad:2e:a7:
         08:71:a0:9a:7a:15:d2:93:68:95:19:c3:33:54:49:20:ec:aa:
         80:6e:fd:8f:21:64:4c:c2:e4:65:d4:ca:26:45:45:b3:2c:a8:
         de:f1:38:b6:0e:9c:10:a0:9c:4d:76:46:7f:82:0b:2e:32:37:
         bf:27:ea:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net