Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          3z5701Wu/IK1rQ2Muq+Q4WSC98PT/mfBYwHXV2Thou8=
Subject key identifier:   3E:9A:C5:BF:E8:BD:33:C2:DB:DD:5B:56:6B:2B:75:F5:A0:B6:6E:39
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       3F3BC785DD64E272FBA3C9365050D54A11DE0080
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:43 +0000
ROA not before:           Thu 30 Nov 2023 12:34:43 +0000
ROA not after:            Thu 28 Nov 2024 12:39:43 +0000
asID:                     28182
IP address blocks:        189.89.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3b:c7:85:dd:64:e2:72:fb:a3:c9:36:50:50:d5:4a:11:de:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:43 2023 GMT
            Not After : Nov 28 12:39:43 2024 GMT
        Subject: CN=3E9AC5BFE8BD33C2DBDD5B566B2B75F5A0B66E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:89:a7:33:d9:00:39:b0:cc:03:1e:aa:8e:
                    c8:05:75:9a:de:21:9c:9c:a7:d1:b0:50:7a:2a:b8:
                    91:23:6a:d2:1b:49:eb:28:8e:08:e0:91:98:93:f3:
                    49:8f:f9:0f:96:46:1a:59:aa:91:85:01:7e:5f:d1:
                    0e:c0:81:64:f5:7b:09:fb:3f:bf:c7:cf:54:b1:5b:
                    80:0e:86:c9:e9:2b:57:8e:d5:ad:3a:f1:be:fd:2a:
                    35:a7:f3:de:15:46:40:92:33:a7:67:1c:22:40:4e:
                    ea:9f:be:92:cb:0e:6d:51:d9:71:34:73:a2:5a:c8:
                    f7:51:63:ba:b2:12:19:dc:cf:c3:e6:4e:60:4c:42:
                    6b:c2:26:27:c4:d8:f9:c2:6a:1d:8b:af:ee:44:ab:
                    e2:a3:ce:75:3b:01:dd:40:e5:73:b5:34:3e:03:ec:
                    75:3c:e8:e9:ac:57:70:5f:25:33:c1:85:18:60:88:
                    c6:29:d4:67:9f:83:99:8a:8f:0a:eb:3c:f2:0c:d4:
                    9a:f5:d5:9e:cd:f3:7e:4d:df:2c:32:e1:d4:86:9b:
                    bb:16:24:fd:2c:ea:f9:d7:f5:34:c5:ec:d7:16:31:
                    f8:e4:06:2a:7a:30:9d:5a:2b:7f:51:75:57:80:64:
                    97:c9:f0:f4:a9:12:cf:04:3d:e3:cc:c1:22:67:d6:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:C5:BF:E8:BD:33:C2:DB:DD:5B:56:6B:2B:75:F5:A0:B6:6E:39
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:11:2a:97:07:3f:8d:1b:b4:14:66:9d:e2:6c:49:95:c4:7d:
         6c:0c:d8:a9:af:81:52:95:11:0e:43:a8:85:37:2d:16:09:50:
         51:5c:64:d0:5c:15:e2:35:78:f1:ce:35:17:31:bb:24:3a:a9:
         cb:56:e2:a3:32:d4:38:04:a6:50:cf:05:e0:e6:b6:d4:93:c5:
         9d:a6:c3:3b:b4:95:64:10:f6:c7:41:2d:07:67:bf:23:7f:8d:
         6b:3a:b0:3f:7b:d2:17:04:36:9f:13:49:45:07:1f:2d:a7:76:
         87:22:de:10:1b:a5:f7:3b:95:c2:83:0c:6d:1c:10:57:48:62:
         12:f1:ea:7a:2f:35:94:cb:db:a2:a3:b5:5b:42:22:2b:0f:de:
         24:94:0b:54:4f:3a:3b:a5:18:91:65:09:62:f4:d3:3b:89:7d:
         3e:46:d0:b7:5b:fc:9c:4d:89:76:4e:ae:5b:bf:e4:23:6b:1a:
         03:a7:10:af:dc:94:61:ed:c9:0e:43:6d:c2:6c:b8:eb:54:3b:
         1c:23:03:08:b2:71:ed:b9:67:9e:c7:04:5c:f2:fc:6f:fd:b2:
         82:c7:d6:72:45:1e:13:78:a3:92:8e:32:dc:70:2a:48:a2:03:
         86:b7:3c:e0:d5:c4:8f:b3:0b:16:ab:6e:dd:0d:69:77:ad:8f:
         4a:09:8f:1e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPzvHhd1k4nL7o8k2UFDVShHeAIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I4MzFBRjRFNTU3NzlGRkRFQjg2OUZGODk4MEVCRjJG
REM0MjE5MjAeFw0yMzExMzAxMjM0NDNaFw0yNDExMjgxMjM5NDNaMDMxMTAvBgNV
BAMTKDNFOUFDNUJGRThCRDMzQzJEQkRENUI1NjZCMkI3NUY1QTBCNjZFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVImnM9kAObDMAx6qjsgFdZre
IZycp9GwUHoquJEjatIbSesojgjgkZiT80mP+Q+WRhpZqpGFAX5f0Q7AgWT1ewn7
P7/Hz1SxW4AOhsnpK1eO1a068b79KjWn894VRkCSM6dnHCJATuqfvpLLDm1R2XE0
c6JayPdRY7qyEhncz8PmTmBMQmvCJifE2PnCah2Lr+5Eq+KjznU7Ad1A5XO1ND4D
7HU86OmsV3BfJTPBhRhgiMYp1Gefg5mKjwrrPPIM1Jr11Z7N835N3ywy4dSGm7sW
JP0s6vnX9TTF7NcWMfjkBip6MJ1aK39RdVeAZJfJ8PSpEs8EPePMwSJn1mPjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPprFv+i9M8Lb3VtWayt19aC2bjkwHwYDVR0j
BBgwFoAUO4Ma9OVXef/euGn/iYDr8v3EIZIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC8zQjgzMUFGNEU1NTc3OUZGREVCODY5RkY4OTgwRUJGMkZEQzQyMTkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCODMxQUY0RTU1Nzc5RkZE
RUI4NjlGRjg5ODBFQkYyRkRDNDIxOTIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzODM5MmUzODM5MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL1ZDDANBgkqhkiG9w0BAQsFAAOCAQEAQBEqlwc/jRu0
FGad4mxJlcR9bAzYqa+BUpURDkOohTctFglQUVxk0FwV4jV48c41FzG7JDqpy1bi
ozLUOASmUM8F4Oa21JPFnabDO7SVZBD2x0EtB2e/I3+NazqwP3vSFwQ2nxNJRQcf
Lad2hyLeEBul9zuVwoMMbRwQV0hiEvHqei81lMvboqO1W0IiKw/eJJQLVE86O6UY
kWUJYvTTO4l9PkbQt1v8nE2Jdk6uW7/kI2saA6cQr9yUYe3JDkNtwmy461Q7HCMD
CLJx7blnnscEXPL8b/2ygsfWckUeE3ijko4y3HAqSKIDhrc84NXEj7MLFqtu3Q1p
d62PSgmPHg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net