Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133332e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133332e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          yRZ9PpQFoJrW4mRSPpP7D/GiV7J3jeDe0WdgLNHfLvA=
Subject key identifier:   B7:F8:8B:2C:04:84:97:34:E1:0E:90:41:2E:13:48:93:6A:E6:43:3A
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       36C1A689A12891158D858D10526BAA5FAD52B675
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133332e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:45:04 +0000
ROA not before:           Thu 30 Nov 2023 12:40:04 +0000
ROA not after:            Thu 28 Nov 2024 12:45:04 +0000
asID:                     28182
IP address blocks:        170.231.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c1:a6:89:a1:28:91:15:8d:85:8d:10:52:6b:aa:5f:ad:52:b6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:40:04 2023 GMT
            Not After : Nov 28 12:45:04 2024 GMT
        Subject: CN=B7F88B2C04849734E10E90412E1348936AE6433A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:2e:8a:c9:8b:47:b9:9a:53:4a:9d:52:df:
                    70:ff:7a:85:8e:fe:5d:0d:b1:8d:47:6f:31:6d:5f:
                    85:12:4c:4e:91:77:a4:bb:4b:a0:a5:e7:49:1c:85:
                    e5:f3:f8:63:b2:1f:cb:a1:da:6f:3c:2d:8a:de:a9:
                    d4:f3:64:6b:24:9b:c9:71:f5:1d:a7:8f:50:da:13:
                    47:44:2a:c3:43:6c:65:4b:9d:b5:c2:f0:81:50:3e:
                    1b:d4:f7:08:08:16:6b:ab:21:14:c8:97:0b:6a:bf:
                    31:e8:84:d3:9b:3a:9a:7e:15:2e:94:34:90:07:28:
                    21:10:a2:7b:ff:a3:d4:c5:f2:c9:18:b3:70:f8:08:
                    b6:2e:74:72:19:d1:9b:28:d5:66:a0:53:1d:0e:7e:
                    9c:54:78:df:47:ab:93:4b:51:b8:16:73:6d:23:92:
                    df:31:54:4f:7d:57:00:35:81:8a:7a:96:da:7a:12:
                    4d:50:31:d0:3d:b5:0c:82:3a:e9:69:93:06:2f:4a:
                    31:ec:04:fc:b0:d8:c9:57:93:3c:4b:7b:6e:b9:49:
                    b5:6b:4d:69:e8:ea:67:58:70:ff:05:a1:cd:e6:82:
                    08:9d:62:30:e9:5e:88:7d:10:4d:f7:db:2e:ed:1b:
                    c7:2d:4d:cd:a3:88:0a:76:97:aa:06:fc:40:ca:0e:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F8:8B:2C:04:84:97:34:E1:0E:90:41:2E:13:48:93:6A:E6:43:3A
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133332e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:ca:b0:b6:7a:06:8b:e2:76:92:a7:ee:1e:03:f2:d9:f0:
         38:6b:38:87:63:c5:bc:ad:07:c4:bc:56:5f:f7:26:59:f5:5f:
         d7:ba:da:00:78:b9:4e:30:78:57:24:be:b8:b1:84:36:04:5f:
         4a:c6:55:a6:07:f6:83:17:d8:69:3c:0e:68:97:f8:e6:79:b2:
         bc:c6:07:eb:07:de:45:ae:53:6f:f6:0f:5f:50:b3:25:a9:33:
         90:b7:2a:ca:fa:84:fd:00:9c:e9:fc:27:01:3b:a5:9c:bf:50:
         26:90:d2:4d:ac:d7:b6:b2:70:7f:ce:a3:15:ca:0c:2f:bb:98:
         78:08:de:71:7c:87:5c:4d:df:d5:0c:75:d0:b7:83:c9:8f:87:
         83:a4:9e:cc:a0:28:b9:3c:35:6d:4d:81:d8:aa:0b:c2:ce:65:
         15:46:1b:ba:d0:6b:34:57:f9:83:37:85:4d:86:8a:ee:ed:3d:
         bf:d3:44:a8:f9:5b:6c:57:a4:53:25:aa:42:df:58:3b:af:d5:
         e6:9b:50:ed:4a:1b:6e:60:d8:4d:a1:b5:c1:5a:2a:1f:76:c5:
         8c:67:b9:e6:43:f5:15:24:45:30:46:93:3b:f9:30:cb:e3:c5:
         27:c2:3a:7d:35:94:c8:75:e0:94:89:06:19:62:4d:c4:f4:61:
         97:59:8c:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNsGmiaEokRWNhY0QUmuqX61StnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4MzFBRjRFNTU3NzlGRkRFQjg2OUZGODk4MEVCRjJG
REM0MjE5MjAeFw0yMzExMzAxMjQwMDRaFw0yNDExMjgxMjQ1MDRaMDMxMTAvBgNV
BAMTKEI3Rjg4QjJDMDQ4NDk3MzRFMTBFOTA0MTJFMTM0ODkzNkFFNjQzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ky6KyYtHuZpTSp1S33D/eoWO
/l0NsY1HbzFtX4USTE6Rd6S7S6Cl50kcheXz+GOyH8uh2m88LYreqdTzZGskm8lx
9R2nj1DaE0dEKsNDbGVLnbXC8IFQPhvU9wgIFmurIRTIlwtqvzHohNObOpp+FS6U
NJAHKCEQonv/o9TF8skYs3D4CLYudHIZ0Zso1WagUx0OfpxUeN9Hq5NLUbgWc20j
kt8xVE99VwA1gYp6ltp6Ek1QMdA9tQyCOulpkwYvSjHsBPyw2MlXkzxLe265SbVr
TWno6mdYcP8Foc3mggidYjDpXoh9EE332y7tG8ctTc2jiAp2l6oG/EDKDlj3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUt/iLLASElzThDpBBLhNIk2rmQzowHwYDVR0j
BBgwFoAUO4Ma9OVXef/euGn/iYDr8v3EIZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC8zQjgzMUFGNEU1NTc3OUZGREVCODY5RkY4OTgwRUJGMkZEQzQyMTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCODMxQUY0RTU1Nzc5RkZE
RUI4NjlGRjg5ODBFQkYyRkRDNDIxOTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq54UwDQYJKoZIhvcNAQELBQADggEBAIa4yrC2
egaL4naSp+4eA/LZ8DhrOIdjxbytB8S8Vl/3Jln1X9e62gB4uU4weFckvrixhDYE
X0rGVaYH9oMX2Gk8DmiX+OZ5srzGB+sH3kWuU2/2D19QsyWpM5C3Ksr6hP0AnOn8
JwE7pZy/UCaQ0k2s17aycH/OoxXKDC+7mHgI3nF8h1xN39UMddC3g8mPh4Oknsyg
KLk8NW1NgdiqC8LOZRVGG7rQazRX+YM3hU2Giu7tPb/TRKj5W2xXpFMlqkLfWDuv
1eabUO1KG25g2E2htcFaKh92xYxnueZD9RUkRTBGkzv5MMvjxSfCOn01lMh14JSJ
BhliTcT0YZdZjG4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org