Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e302e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          YwFSi53RhZT5lHS0FanoTbKlldH396mdBuf+1ljZL6Y=
Subject key identifier:   C8:FB:35:F0:05:CF:75:0F:AE:E7:FC:D1:3E:AC:20:6A:B3:4D:35:DB
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       7787E65463A43EC4B0A4AAEBB3CEF0742154602D
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:44 +0000
ROA not before:           Thu 30 Nov 2023 12:34:44 +0000
ROA not after:            Thu 28 Nov 2024 12:39:44 +0000
asID:                     28182
IP address blocks:        189.89.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:87:e6:54:63:a4:3e:c4:b0:a4:aa:eb:b3:ce:f0:74:21:54:60:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:44 2023 GMT
            Not After : Nov 28 12:39:44 2024 GMT
        Subject: CN=C8FB35F005CF750FAEE7FCD13EAC206AB34D35DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:a1:01:a3:58:fd:70:95:0d:b3:bb:7e:06:
                    69:7f:d8:55:06:8f:7a:c6:81:dc:38:ab:8e:a2:2c:
                    be:38:78:d5:47:90:9e:ad:13:35:57:ac:d7:93:07:
                    72:9e:62:98:f2:ce:68:7b:b5:ce:cf:36:b4:17:50:
                    ef:07:07:de:18:35:e4:1f:46:01:bd:38:fe:18:6a:
                    39:f9:2c:8f:51:3b:b6:3c:9e:63:10:27:08:93:e9:
                    dd:44:06:1a:27:0a:e8:bd:68:5c:6f:dd:a8:1b:84:
                    44:ef:e5:49:6c:b0:81:98:61:5e:8b:e3:22:bf:1a:
                    d9:9d:89:64:f4:8d:e8:87:22:73:a9:a5:29:26:5f:
                    09:ed:b6:b6:be:0f:a6:67:17:ac:e4:65:92:82:67:
                    2a:7d:65:d4:09:04:2f:8c:04:ec:fa:86:e5:d5:79:
                    82:01:2f:be:aa:c3:3b:36:37:dc:de:99:16:10:07:
                    f1:e7:41:8f:34:8a:53:ab:14:15:43:8c:30:86:55:
                    fe:c8:3e:d3:b5:81:fe:f5:e6:b1:bd:44:e4:53:55:
                    6f:e5:ac:3e:f9:a1:e3:9c:ba:ce:d1:89:90:ed:c5:
                    27:4e:49:f2:03:cb:e8:29:69:cd:4d:6f:2e:02:ac:
                    39:e5:64:41:fa:ca:c4:11:77:f0:33:c9:d0:2f:a9:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FB:35:F0:05:CF:75:0F:AE:E7:FC:D1:3E:AC:20:6A:B3:4D:35:DB
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:7d:81:1b:89:af:85:b6:1b:61:a5:55:95:2b:9a:78:9c:be:
         9c:7e:06:5b:5e:1a:58:be:f7:a2:97:fc:81:64:af:fd:74:ba:
         e2:a9:79:17:d3:dc:8f:9a:1b:91:90:d0:92:26:45:e7:78:65:
         af:b7:31:e1:c7:e8:9b:c2:57:c0:84:8f:30:fc:66:ac:49:2f:
         6c:e7:ae:00:b4:4d:fe:54:6f:7b:60:ff:6a:32:ad:da:fd:bc:
         28:8a:c6:4a:51:34:5e:35:71:9c:7b:fd:a9:87:d9:0d:b7:e9:
         e0:55:58:33:49:99:9e:97:80:40:0e:b7:b8:b9:85:e0:6f:09:
         d7:53:b9:15:cf:f6:75:9f:4f:58:18:a3:1e:44:75:21:8a:de:
         f9:67:cf:4a:30:b4:87:64:78:55:d1:67:b2:5d:53:de:59:93:
         96:74:b2:81:6c:91:b3:29:1c:46:43:ce:b3:4f:5b:4b:7c:20:
         3a:1f:c8:e6:9e:6a:66:db:51:0c:26:19:aa:e1:2b:88:53:5e:
         1d:76:73:22:18:e1:e3:87:e2:d1:96:9b:9f:02:f5:5a:1b:20:
         7e:2b:70:10:c3:a7:56:18:24:1f:1a:61:62:5f:cf:30:44:c0:
         81:36:3e:31:5c:67:f9:5e:c4:7b:29:8c:12:a5:31:ea:7f:b4:
         fe:c2:8a:49
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUd4fmVGOkPsSwpKrrs87wdCFUYC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4MzFBRjRFNTU3NzlGRkRFQjg2OUZGODk4MEVCRjJG
REM0MjE5MjAeFw0yMzExMzAxMjM0NDRaFw0yNDExMjgxMjM5NDRaMDMxMTAvBgNV
BAMTKEM4RkIzNUYwMDVDRjc1MEZBRUU3RkNEMTNFQUMyMDZBQjM0RDM1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGKEBo1j9cJUNs7t+Bml/2FUG
j3rGgdw4q46iLL44eNVHkJ6tEzVXrNeTB3KeYpjyzmh7tc7PNrQXUO8HB94YNeQf
RgG9OP4Yajn5LI9RO7Y8nmMQJwiT6d1EBhonCui9aFxv3agbhETv5UlssIGYYV6L
4yK/GtmdiWT0jeiHInOppSkmXwnttra+D6ZnF6zkZZKCZyp9ZdQJBC+MBOz6huXV
eYIBL76qwzs2N9zemRYQB/HnQY80ilOrFBVDjDCGVf7IPtO1gf715rG9RORTVW/l
rD75oeOcus7RiZDtxSdOSfIDy+gpac1Nby4CrDnlZEH6ysQRd/AzydAvqbEbAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUyPs18AXPdQ+u5/zRPqwgarNNNdswHwYDVR0j
BBgwFoAUO4Ma9OVXef/euGn/iYDr8v3EIZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC8zQjgzMUFGNEU1NTc3OUZGREVCODY5RkY4OTgwRUJGMkZEQzQyMTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCODMxQUY0RTU1Nzc5RkZE
RUI4NjlGRjg5ODBFQkYyRkRDNDIxOTIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMTM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC9WQAwDQYJKoZIhvcNAQELBQADggEBAHF9gRuJr4W2G2Gl
VZUrmnicvpx+BlteGli+96KX/IFkr/10uuKpeRfT3I+aG5GQ0JImRed4Za+3MeHH
6JvCV8CEjzD8ZqxJL2znrgC0Tf5Ub3tg/2oyrdr9vCiKxkpRNF41cZx7/amH2Q23
6eBVWDNJmZ6XgEAOt7i5heBvCddTuRXP9nWfT1gYox5EdSGK3vlnz0owtIdkeFXR
Z7JdU95Zk5Z0soFskbMpHEZDzrNPW0t8IDofyOaeambbUQwmGarhK4hTXh12cyIY
4eOH4tGWm58C9VobIH4rcBDDp1YYJB8aYWJfzzBEwIE2PjFcZ/lexHspjBKlMep/
tP7Cikk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net