Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          Liw11CeALBoFDTP02A5ffeKPul3EobnLUHJAi1ZNYR8=
Subject key identifier:   AC:34:1E:C6:E8:71:78:2E:58:B0:5D:B8:64:A8:52:DF:58:F5:E5:FF
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       2B74FFFAEA72439B8C40F73D90EDBA5CC384A63B
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:45:26 +0000
ROA not before:           Thu 30 Nov 2023 12:40:26 +0000
ROA not after:            Thu 28 Nov 2024 12:45:26 +0000
asID:                     28182
IP address blocks:        170.231.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:74:ff:fa:ea:72:43:9b:8c:40:f7:3d:90:ed:ba:5c:c3:84:a6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:40:26 2023 GMT
            Not After : Nov 28 12:45:26 2024 GMT
        Subject: CN=AC341EC6E871782E58B05DB864A852DF58F5E5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:c2:13:0a:ea:ec:e2:57:33:74:96:68:b0:
                    e0:2e:b8:99:39:bc:5b:4e:db:47:c7:d9:13:f9:12:
                    df:4b:4c:ed:8c:0c:58:24:13:dc:35:42:13:c7:ea:
                    69:50:56:c7:17:5a:cf:98:dc:89:e7:7a:1c:76:39:
                    ee:50:3c:e6:00:10:aa:c6:84:7f:bb:63:0c:7e:f7:
                    57:ad:e3:24:5b:10:80:67:c2:51:50:14:bd:25:b4:
                    5e:70:c7:08:c1:ab:b7:95:e1:56:9b:bb:20:12:c8:
                    d3:7d:d5:80:76:18:97:88:b8:0b:8d:be:c5:5b:7c:
                    eb:19:36:a0:b4:fc:82:1f:bc:50:21:f7:db:d9:c8:
                    ca:87:52:70:4e:74:c6:42:dc:9d:48:64:e8:91:a1:
                    fc:60:95:ba:4b:e2:6f:7f:07:8a:dd:21:9e:cc:80:
                    21:8f:7d:3e:98:a1:db:3e:07:4e:e1:25:77:d5:1c:
                    69:88:e3:ae:ed:fe:b2:7a:47:f8:03:a0:9d:7e:dc:
                    2e:b2:f9:08:18:82:e1:aa:59:e1:f7:a8:79:92:5b:
                    a3:7c:5a:dd:22:22:c5:89:fc:cc:1b:a7:36:50:05:
                    22:ed:d7:28:78:bf:1e:e6:92:d0:88:e3:42:7e:85:
                    41:13:bd:4a:c3:b3:3d:43:71:ab:e3:ce:5f:9f:bd:
                    23:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:34:1E:C6:E8:71:78:2E:58:B0:5D:B8:64:A8:52:DF:58:F5:E5:FF
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:87:3b:eb:c2:19:c5:e9:65:98:04:21:a9:ab:fc:fe:6f:
         3c:2e:40:84:1d:00:01:7d:f2:f6:63:e4:14:36:e2:b2:7b:a5:
         fb:0b:00:ac:db:96:ad:73:db:b5:c7:7f:ce:9d:2b:0b:ac:fe:
         75:cd:15:53:05:28:f3:65:ec:1e:a0:f0:de:32:76:23:9e:de:
         aa:2e:0d:fe:1d:37:b3:aa:80:54:1c:20:2e:1d:75:b2:70:d4:
         d9:30:a4:3a:6a:7f:87:ed:8f:fc:2d:49:4d:c3:7e:e4:ed:38:
         4d:ca:a7:55:26:43:29:be:ec:56:90:df:20:d7:01:12:d6:07:
         1e:ca:34:dd:33:8c:9f:06:ab:7f:6d:f1:65:d4:f7:5f:30:65:
         7c:93:ab:5b:16:c0:02:b9:87:c7:ba:40:69:69:a0:bc:e3:d9:
         f4:6b:59:a6:b6:37:4c:e1:d4:1b:a9:96:9e:a9:81:4a:4c:1b:
         f8:ea:f8:6e:09:f9:e7:1d:dc:5a:95:92:a3:f1:09:57:ca:c7:
         b1:03:6d:11:5f:de:9f:70:c8:48:b9:81:b5:6f:aa:f7:b0:15:
         4a:57:ee:9c:b5:d8:04:92:f3:0b:35:da:50:0f:9d:c1:05:05:
         7f:98:35:59:5e:aa:98:2f:fe:9d:31:89:2d:a0:f1:9d:27:5e:
         4e:62:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org