Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          kZ00H4LDaK2yojDC6XkjITgGldZul+wHpo94aXP/P+M=
Subject key identifier:   F1:08:67:FE:30:4C:C6:DD:44:E1:96:F8:33:47:18:D2:7C:06:9B:A9
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       320D2CF8B98168F434B81BF4C0B1018701775E4F
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:44 +0000
ROA not before:           Thu 30 Nov 2023 12:34:44 +0000
ROA not after:            Thu 28 Nov 2024 12:39:44 +0000
asID:                     28182
IP address blocks:        170.231.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0d:2c:f8:b9:81:68:f4:34:b8:1b:f4:c0:b1:01:87:01:77:5e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:44 2023 GMT
            Not After : Nov 28 12:39:44 2024 GMT
        Subject: CN=F10867FE304CC6DD44E196F8334718D27C069BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:75:91:bc:37:f5:0e:b4:1e:77:fa:56:c7:
                    c0:5d:15:75:c5:c2:7d:e6:a5:c2:e4:65:3c:38:f7:
                    ef:c2:f5:f5:18:02:29:19:33:bb:7d:99:57:90:29:
                    1c:7c:a3:04:e6:c2:ab:49:ae:33:dd:f8:80:3d:1a:
                    c8:ac:1f:f6:cb:bc:ad:37:13:04:e6:d7:1f:4e:17:
                    3c:6a:4d:1b:6c:f5:58:f9:4a:de:a0:12:96:63:00:
                    25:41:e5:a2:98:0e:b8:bf:62:e4:73:16:5b:4e:98:
                    e9:24:3f:85:72:d8:cf:81:8f:c7:79:d8:cc:cd:89:
                    33:30:ea:8a:73:a7:32:b4:3b:f2:ea:e3:5a:40:12:
                    a5:1c:2e:00:3f:2a:62:53:3d:7c:91:21:47:14:bd:
                    8b:b8:3b:04:55:b1:88:c1:71:cc:23:cf:a6:6e:97:
                    21:ad:e6:1c:6e:8c:d8:01:1d:8b:e5:5f:3d:e0:55:
                    a8:36:e5:31:f8:f7:1c:36:89:e0:f7:8a:f2:f9:07:
                    6f:a8:c8:5e:80:25:1f:01:9b:c7:43:84:f1:e3:a2:
                    34:1a:1b:e9:61:e2:aa:97:ab:2a:e1:3a:01:7e:d5:
                    b6:9d:35:90:a2:3d:a3:4c:64:c2:31:da:8c:e2:95:
                    91:a6:ff:1e:d3:a7:12:9b:e9:85:e1:97:d7:94:23:
                    3c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:08:67:FE:30:4C:C6:DD:44:E1:96:F8:33:47:18:D2:7C:06:9B:A9
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:41:0c:f3:22:a9:8f:c8:53:fc:81:19:6c:5a:08:1f:b4:b0:
         44:73:dd:d9:79:02:15:aa:65:6d:dd:9c:4d:0e:61:42:b8:a0:
         a5:cc:af:3d:e9:65:72:13:fb:38:5e:dc:42:7e:bc:6c:1a:6b:
         2b:58:eb:dd:3b:b4:b6:a5:f0:e1:d9:03:ed:1b:d7:f9:4a:6e:
         c6:71:2d:5e:51:3c:da:60:de:ce:bf:14:ec:4b:da:6c:f3:19:
         4d:48:9c:d9:1e:a0:ce:14:bc:7f:ef:9f:62:24:ba:b4:bf:b5:
         74:ad:2d:86:8d:c3:e6:dd:97:f1:cc:de:c3:e2:cb:ef:29:7c:
         17:46:06:0e:af:3e:34:76:4d:5c:be:4f:59:81:7f:f7:95:28:
         ef:59:9b:87:d0:e8:ea:0e:24:30:ae:56:c7:cb:69:e3:b1:d2:
         aa:a2:fc:1d:1e:1b:02:16:1c:c4:a9:0a:cd:49:36:0e:4c:4f:
         b0:e4:6e:70:27:ad:50:46:e3:48:1c:b9:c2:fc:72:23:d7:76:
         bb:9e:21:39:26:96:56:65:01:ab:55:18:68:d6:01:02:65:f9:
         8d:0f:f7:30:74:0c:25:b5:af:d2:61:64:fc:b5:35:96:a4:54:
         78:a8:9d:ed:2c:bd:74:ed:00:06:dd:bd:56:27:72:db:e5:75:
         75:a0:ac:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net