Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3230203d3e203238313832.roa
File:                     3138392e38392e302e302f32302d3230203d3e203238313832.roa (raw, json)
Hash identifier:          cQITS6iV5bLgnvTPAhxQcVcnFgYzghXWKACXZAn9o/8=
Subject key identifier:   A7:7E:6B:35:4A:53:17:24:8C:54:C4:56:F7:76:B8:30:C9:26:52:FA
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       43EE67189D2D8FE2D3BAEDB6306DC1B7685489C4
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3230203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:44 +0000
ROA not before:           Thu 30 Nov 2023 12:34:44 +0000
ROA not after:            Thu 28 Nov 2024 12:39:44 +0000
asID:                     28182
IP address blocks:        189.89.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ee:67:18:9d:2d:8f:e2:d3:ba:ed:b6:30:6d:c1:b7:68:54:89:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:44 2023 GMT
            Not After : Nov 28 12:39:44 2024 GMT
        Subject: CN=A77E6B354A5317248C54C456F776B830C92652FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:3b:83:52:d3:21:dd:4a:39:85:a9:31:81:
                    2b:b7:1e:46:43:69:63:70:02:5f:f2:9f:3e:40:e3:
                    3e:b2:01:66:b2:f3:93:d9:0e:b6:e6:47:aa:21:12:
                    fe:f7:71:61:c7:57:9d:f6:21:04:e7:68:b0:1a:24:
                    58:29:a2:6a:22:7c:e7:07:d6:9d:a8:fd:99:62:15:
                    40:c4:02:c7:77:41:c0:cd:41:57:ca:61:8a:56:12:
                    7c:54:d8:23:e1:6c:dd:52:61:af:b2:68:de:57:d8:
                    32:93:93:3c:3a:d4:78:2e:0e:d5:a1:93:73:65:e6:
                    40:d1:a2:b2:88:51:77:18:17:88:9c:0c:73:26:48:
                    0b:54:97:66:74:8f:6d:0c:62:5b:34:39:98:8d:55:
                    eb:ec:c2:0e:eb:98:2f:59:6a:c6:63:e7:d4:55:d1:
                    53:25:ef:34:1d:3f:c3:10:eb:6c:f5:d8:a5:ea:43:
                    51:39:64:cb:6e:f4:9b:6b:59:16:2c:4b:be:94:50:
                    c9:4a:eb:95:6e:ca:90:c6:67:a3:79:b4:9d:f9:f0:
                    ab:73:99:14:59:dd:17:6a:b2:74:c7:03:ee:da:fb:
                    49:fc:c9:0c:df:b8:85:92:3b:7a:2c:df:5c:85:8f:
                    12:0f:df:d7:25:d3:06:01:e2:a3:34:eb:a5:34:c6:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7E:6B:35:4A:53:17:24:8C:54:C4:56:F7:76:B8:30:C9:26:52:FA
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3230203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:e9:39:e7:0f:e9:05:24:4a:03:0d:7d:06:61:38:0a:5b:
         db:9a:58:ba:61:e1:66:35:16:3d:16:30:66:b8:59:38:44:e2:
         31:56:4b:d2:cf:bb:9c:75:57:f3:99:26:1f:13:d3:e4:95:3e:
         be:60:6c:97:eb:f9:0b:8a:cb:a2:fc:26:d2:7f:61:b1:c3:a3:
         24:ed:60:34:c5:f5:ef:35:a5:58:d2:2b:58:d8:b2:77:e5:b7:
         ba:87:be:21:61:f1:c9:73:bb:eb:e0:dc:0e:d9:e5:49:93:2b:
         31:c1:da:7f:f2:f4:4a:8b:04:a0:f4:9a:f3:7d:5f:85:78:28:
         13:c7:91:08:d2:a4:d3:f9:59:89:3d:13:1c:81:dc:c6:f4:b6:
         6b:40:b4:af:79:a6:f9:39:ab:a5:f9:c0:8c:15:3b:8a:d8:f7:
         ab:a6:80:30:3b:18:ba:f6:2a:17:f1:96:ec:eb:1a:70:05:91:
         cd:23:8d:94:7d:a6:32:4b:c3:da:e5:29:8a:a6:2e:58:ee:c4:
         ad:d1:ee:df:25:13:15:6a:ae:97:82:ba:b6:04:63:35:f3:82:
         e3:89:ef:47:7c:09:df:16:18:02:f0:86:dc:72:e5:db:ac:c3:
         2c:97:1c:e8:3c:02:c6:e8:ec:41:8e:5b:57:a8:b6:85:d1:8b:
         2b:43:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net