Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa
File:                     3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa (raw, json)
Hash identifier:          tnT8Ein6XUUbYHgnf6REvYo9Ih88/Lp9Pt/UxCfI7ZM=
Subject key identifier:   83:17:DE:1D:AD:AA:53:51:EA:D8:85:CF:7C:BD:90:66:37:A3:F3:B1
Certificate issuer:       /CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
Certificate serial:       70D0E640C963D731D8188A06D812A2FAA0708827
Authority key identifier: D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa
Signing time:             Mon 13 Nov 2023 23:38:05 +0000
ROA not before:           Mon 13 Nov 2023 23:33:05 +0000
ROA not after:            Mon 11 Nov 2024 23:38:05 +0000
asID:                     53029
IP address blocks:        177.129.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d0:e6:40:c9:63:d7:31:d8:18:8a:06:d8:12:a2:fa:a0:70:88:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
        Validity
            Not Before: Nov 13 23:33:05 2023 GMT
            Not After : Nov 11 23:38:05 2024 GMT
        Subject: CN=8317DE1DADAA5351EAD885CF7CBD906637A3F3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:bb:b7:4e:66:77:5c:5f:28:d6:91:59:08:
                    26:71:c0:63:98:b4:d7:c3:f1:8b:86:95:08:d2:0f:
                    6e:69:b6:d3:33:27:6e:02:d2:34:19:d8:6a:87:22:
                    03:18:37:61:df:24:81:37:d4:8b:58:dc:93:b9:9b:
                    e2:36:3d:67:0a:9f:a3:df:c5:dd:d8:a9:53:1b:c5:
                    d0:ac:91:c0:a1:d7:74:b1:b0:91:19:a4:6e:52:14:
                    c2:76:03:1f:db:bc:3d:80:99:22:17:9d:7e:34:ea:
                    42:bc:ef:e2:a6:4c:78:dd:36:4d:6a:b7:58:d1:05:
                    b6:9d:ff:41:ae:3a:cc:65:86:84:f6:17:bb:54:2f:
                    21:df:9e:a8:d8:7b:88:b0:f8:85:33:b1:3e:b2:25:
                    d7:5f:ce:48:c1:11:b2:03:af:1d:1e:91:4f:13:8e:
                    cf:d7:90:a7:cb:90:d2:94:cb:38:c5:63:a7:03:d7:
                    2a:98:cd:e8:a3:bd:f0:48:6b:2d:3a:bf:32:30:e0:
                    db:2d:e2:52:2e:90:59:ce:8d:2b:8c:49:bc:1f:2e:
                    d3:8c:29:9a:35:9e:4c:63:aa:4b:40:12:58:63:00:
                    9f:86:ba:06:3f:b4:62:c8:f0:0f:08:5d:7b:d2:c3:
                    cc:43:64:ac:b2:71:f8:83:61:62:aa:1b:ce:23:38:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:17:DE:1D:AD:AA:53:51:EA:D8:85:CF:7C:BD:90:66:37:A3:F3:B1
            X509v3 Authority Key Identifier:
                keyid:D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/3137372e3132392e3131362e302f32322d3332203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:e8:82:4a:c5:dc:28:2d:02:d2:54:cb:ee:68:54:18:c6:cf:
         3b:97:1d:66:5a:fe:94:4f:18:51:3f:c1:40:e9:57:7b:ca:7b:
         52:e8:31:6d:ba:db:8c:d6:34:be:1c:cd:15:9a:39:2d:8a:03:
         1c:87:37:e3:99:73:b2:22:d6:e5:e1:08:04:5c:d6:55:eb:bb:
         ec:81:24:51:31:ce:e8:f3:96:80:92:4f:69:73:97:6e:5c:86:
         8c:c8:50:84:24:20:d4:dd:1b:36:62:3e:c8:a7:1a:e1:65:57:
         4e:84:2f:66:04:61:63:8a:0e:9e:a8:a7:14:b8:9b:9b:13:da:
         cb:11:c7:27:98:5c:ab:db:17:b6:20:aa:e5:50:44:13:d2:89:
         a7:ff:6c:bc:82:f7:02:93:97:c4:85:64:9e:13:ef:fe:57:97:
         c2:f8:19:0b:76:30:80:56:8b:1b:22:03:c4:41:bf:3c:dc:78:
         53:b7:67:d9:ef:5d:1a:bb:41:9e:e6:61:39:e8:b6:16:34:33:
         0e:4e:be:23:72:88:b6:c7:63:54:4b:81:e0:a8:4e:30:b4:78:
         20:5b:34:44:03:c7:e1:71:22:01:29:67:14:b4:7f:b3:25:18:
         27:ff:49:b8:34:3f:21:c0:57:0d:24:0a:6a:07:3e:c4:8e:95:
         2f:f8:53:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcNDmQMlj1zHYGIoG2BKi+qBwiCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDg2M0ZBNzUxMjNFQzdBMUY4N0Q0MzQ2NjFGNUZBQjA3
OUFERjhCRjAeFw0yMzExMTMyMzMzMDVaFw0yNDExMTEyMzM4MDVaMDMxMTAvBgNV
BAMTKDgzMTdERTFEQURBQTUzNTFFQUQ4ODVDRjdDQkQ5MDY2MzdBM0YzQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHbu3TmZ3XF8o1pFZCCZxwGOY
tNfD8YuGlQjSD25pttMzJ24C0jQZ2GqHIgMYN2HfJIE31ItY3JO5m+I2PWcKn6Pf
xd3YqVMbxdCskcCh13SxsJEZpG5SFMJ2Ax/bvD2AmSIXnX406kK87+KmTHjdNk1q
t1jRBbad/0GuOsxlhoT2F7tULyHfnqjYe4iw+IUzsT6yJddfzkjBEbIDrx0ekU8T
js/XkKfLkNKUyzjFY6cD1yqYzeijvfBIay06vzIw4Nst4lIukFnOjSuMSbwfLtOM
KZo1nkxjqktAElhjAJ+GugY/tGLI8A8IXXvSw8xDZKyycfiDYWKqG84jOFevAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgxfeHa2qU1Hq2IXPfL2QZjej87EwHwYDVR0j
BBgwFoAU2GP6dRI+x6H4fUNGYfX6sHmt+L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNacUVNekM5cG0yRmhWNlpxMlhyTnpKMUJ1QmY1TkM4Rmo0WDZLQkdW
RkUvMC9EODYzRkE3NTEyM0VDN0ExRjg3RDQzNDY2MUY1RkFCMDc5QURGOEJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q4NjNGQTc1MTIzRUM3QTFG
ODdENDM0NjYxRjVGQUIwNzlBREY4QkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzWnFFTXpDOXBtMkZoVjZacTJYck56SjFCdUJmNU5DOEZqNFg2S0JHVkZFLzAv
MzEzNzM3MmUzMTMyMzkyZTMxMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzMzMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgXQwDQYJKoZIhvcNAQELBQADggEBAHTogkrF
3CgtAtJUy+5oVBjGzzuXHWZa/pRPGFE/wUDpV3vKe1LoMW2624zWNL4czRWaOS2K
AxyHN+OZc7Ii1uXhCARc1lXru+yBJFExzujzloCST2lzl25chozIUIQkINTdGzZi
PsinGuFlV06EL2YEYWOKDp6opxS4m5sT2ssRxyeYXKvbF7YgquVQRBPSiaf/bLyC
9wKTl8SFZJ4T7/5Xl8L4GQt2MIBWixsiA8RBvzzceFO3Z9nvXRq7QZ7mYTnothY0
Mw5OviNyiLbHY1RLgeCoTjC0eCBbNEQDx+FxIgEpZxS0f7MlGCf/Sbg0PyHAVw0k
CmoHPsSOlS/4UwU=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net