Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31302e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31302e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          cYhI5MdfuyU+LhVHHmek49wL1SRDZ6FAmCbqLnfv0e4=
Subject key identifier:   19:57:EA:EE:FB:BF:11:C8:9C:B0:FC:A8:08:62:B4:9B:BC:46:D5:E1
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       6DA8D06751D3CBC48C6371F4E49FA3A148482E85
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31302e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:46 +0000
ROA not before:           Thu 30 Nov 2023 12:34:46 +0000
ROA not after:            Thu 28 Nov 2024 12:39:46 +0000
asID:                     28182
IP address blocks:        189.89.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a8:d0:67:51:d3:cb:c4:8c:63:71:f4:e4:9f:a3:a1:48:48:2e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:46 2023 GMT
            Not After : Nov 28 12:39:46 2024 GMT
        Subject: CN=1957EAEEFBBF11C89CB0FCA80862B49BBC46D5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:37:8d:77:96:ab:f8:b6:2a:a3:c0:8b:98:
                    ca:7a:e4:6b:f8:f0:b4:8f:cb:90:8a:19:41:c0:db:
                    08:e9:58:ee:51:d3:79:62:d2:04:3c:eb:4f:a2:da:
                    f3:b9:bc:38:3d:bb:98:21:62:0d:d8:fd:9e:7e:72:
                    37:1a:9e:9d:a6:99:89:ce:a5:68:52:0c:e0:ed:ef:
                    48:15:b6:04:d2:f7:76:9e:fa:73:61:e9:87:03:39:
                    b6:50:ba:23:38:13:02:db:f1:88:84:2e:e9:e3:8d:
                    bb:a9:2c:39:00:8b:2b:cc:51:43:5c:8a:bd:f7:20:
                    69:7b:10:3a:08:c1:a2:41:66:dc:cd:f4:b1:4a:09:
                    a2:fc:fa:4e:62:a7:3a:89:5c:4a:59:14:67:c8:7e:
                    56:a6:ec:3c:02:a9:d4:e6:be:3c:e9:98:dc:84:00:
                    4e:52:78:41:e6:9f:69:ea:a0:9d:97:25:38:10:cc:
                    97:19:de:10:b1:61:fa:fa:00:7e:15:e8:e5:39:47:
                    f7:70:0b:fd:5f:87:67:2b:75:e6:48:9c:09:81:33:
                    1f:c6:8c:bc:3b:95:91:75:2f:e6:08:54:7b:c5:f9:
                    7a:56:3a:f7:24:43:1f:95:94:7c:5a:90:97:4c:a7:
                    19:c9:b1:fd:09:cf:28:82:e5:5a:28:b3:ac:cf:a8:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:EA:EE:FB:BF:11:C8:9C:B0:FC:A8:08:62:B4:9B:BC:46:D5:E1
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31302e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:ff:50:f8:dc:41:3a:7b:38:a9:ed:83:23:4d:c4:60:0a:
         61:40:86:26:3e:8f:3e:34:d4:01:c4:70:cd:d9:1d:9d:ce:76:
         95:97:6b:7c:72:d0:2c:d6:57:de:78:bf:2b:2a:16:4d:e1:53:
         ab:74:54:81:ac:27:24:fc:b6:e1:0d:f6:68:09:5e:75:cb:79:
         a0:15:71:fe:95:76:23:fa:fe:0d:ee:d3:34:df:a4:a2:67:14:
         a1:ed:5b:d7:d7:4b:b3:e9:a3:48:17:0e:95:1c:9e:38:c1:43:
         48:69:1f:60:dd:a1:07:cd:44:1b:9c:89:e1:de:37:41:c1:55:
         9e:8c:52:48:9b:c0:0f:10:12:5f:c9:a4:29:80:a6:41:30:66:
         d5:94:ad:b0:24:5b:a2:0a:90:6a:d2:7a:99:7f:7d:03:ad:73:
         b6:e1:02:62:1c:58:8a:84:26:5a:05:16:16:a7:21:22:32:4a:
         df:b0:5f:d7:ca:77:ae:e5:aa:ed:64:cf:48:c7:3a:42:53:46:
         6f:5c:30:bf:16:92:2d:f3:c5:e7:45:4e:fb:5d:de:8a:05:3c:
         aa:a5:f4:e6:11:fe:d3:a4:ca:a4:e0:5a:88:1b:4c:d9:db:ed:
         93:88:44:01:e3:41:0a:87:84:29:56:c6:22:16:3f:c5:ab:48:
         73:98:08:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net