Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          EKgmeT4OeRtNFQeRBgSm5uP6HayFZWOO286e1cmfeRg=
Subject key identifier:   8E:E8:26:C6:6D:17:1B:5E:2C:3C:D1:40:0B:38:F5:62:A0:68:2D:28
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       3352DDB2521192ACBBA0002A149E765E0076BCE6
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:46 +0000
ROA not before:           Thu 30 Nov 2023 12:34:46 +0000
ROA not after:            Thu 28 Nov 2024 12:39:46 +0000
asID:                     28182
IP address blocks:        189.89.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:52:dd:b2:52:11:92:ac:bb:a0:00:2a:14:9e:76:5e:00:76:bc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:46 2023 GMT
            Not After : Nov 28 12:39:46 2024 GMT
        Subject: CN=8EE826C66D171B5E2C3CD1400B38F562A0682D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:f1:cb:8b:6e:4c:0c:a0:a9:f4:ff:94:52:
                    00:be:bc:ae:ae:1c:ca:0b:f2:a7:b4:ed:8e:5f:f6:
                    8e:c4:8b:b0:75:14:20:63:6c:5d:48:9e:71:c2:67:
                    5f:d0:8a:74:59:b3:b2:f9:25:0f:da:fd:93:81:0d:
                    53:0f:85:26:1f:59:b0:fd:46:73:65:c2:e6:b6:e0:
                    26:00:6e:26:46:3e:03:5a:95:45:b8:27:1d:2a:7a:
                    6e:62:71:82:37:3b:34:70:4b:16:74:96:ed:84:57:
                    bf:e3:a1:54:59:ac:61:73:12:93:0e:aa:d8:49:28:
                    26:e6:0b:95:a8:33:ca:07:67:92:4b:08:73:4c:cf:
                    14:ac:c1:5c:dd:9e:d1:ff:7c:fc:24:e3:c5:2e:01:
                    33:ef:f0:75:da:56:24:87:36:1e:d8:da:32:71:90:
                    00:ab:e6:d6:17:98:aa:d8:08:59:48:85:f0:09:52:
                    52:11:19:45:84:7c:bc:49:80:be:6e:22:29:3f:7b:
                    0a:7f:e6:bc:38:aa:17:ff:fc:26:db:38:e9:74:ba:
                    5e:fb:79:80:01:29:bb:16:7e:65:15:ca:76:2e:08:
                    84:33:7f:b6:36:e6:a3:5a:15:02:c5:09:d9:b8:74:
                    98:50:6c:4d:5e:e8:b3:f0:a2:95:d7:b3:96:3f:ad:
                    16:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E8:26:C6:6D:17:1B:5E:2C:3C:D1:40:0B:38:F5:62:A0:68:2D:28
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:96:c1:1e:6a:9a:12:e4:bf:6a:c3:42:be:a3:6a:88:08:4f:
         ad:be:86:c9:e9:eb:13:d5:57:34:92:02:b2:e7:5e:13:c3:f6:
         0b:77:4f:64:9a:c1:22:8a:97:49:99:24:66:0b:88:0b:4f:70:
         88:6f:e9:5f:ba:b4:2f:e3:53:29:14:09:58:ca:c4:4e:45:b9:
         30:81:da:e3:f5:7b:b9:f5:de:14:8d:f1:36:90:f1:57:1a:63:
         31:41:f0:c9:a5:66:bf:e2:44:a6:16:ac:20:06:af:63:7e:4c:
         9a:bb:ff:17:74:a6:97:f1:a9:73:3f:79:70:35:7f:98:21:4f:
         17:43:10:46:c7:33:6f:be:7f:c6:a9:66:d2:a0:d2:07:fa:83:
         23:59:cd:c8:d8:b7:ef:c7:8b:5a:2c:94:8c:ef:f7:80:d3:f3:
         0f:0f:a8:f5:ae:bb:40:96:c6:98:36:9e:09:9e:c7:0a:d6:6d:
         2c:0d:a2:fb:26:d9:7d:22:6f:bc:de:d0:f8:03:0f:74:5c:7d:
         fe:70:51:68:35:4b:f1:c8:96:7b:49:44:2e:71:0c:d5:ad:63:
         5b:db:d1:74:60:75:72:0a:da:85:3a:ef:53:0a:ad:11:54:2f:
         5c:24:87:f5:d4:c7:15:03:55:2a:ca:49:6e:4b:d1:7b:d3:fe:
         e9:d1:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net