Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          6NvgAnZ53SdTuk9f8TADD57UkfNvdKcd8uDYnQHWyFE=
Subject key identifier:   7D:A5:38:16:77:64:9F:42:D9:93:E6:8E:98:1E:17:4E:84:D3:3A:0B
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       0C75EF04A21FFAEA1086256127D837081100C165
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:42 +0000
ROA not before:           Thu 30 Nov 2023 12:34:42 +0000
ROA not after:            Thu 28 Nov 2024 12:39:42 +0000
asID:                     28182
IP address blocks:        189.89.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:75:ef:04:a2:1f:fa:ea:10:86:25:61:27:d8:37:08:11:00:c1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:42 2023 GMT
            Not After : Nov 28 12:39:42 2024 GMT
        Subject: CN=7DA5381677649F42D993E68E981E174E84D33A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:7b:f8:ca:06:e8:55:94:07:a1:23:1b:08:29:
                    9a:54:18:23:63:25:a9:23:3a:c0:a5:0a:4e:ed:33:
                    6a:71:fa:07:e5:1f:0e:f8:e6:fc:70:52:a7:f7:16:
                    00:fd:3f:52:e9:3c:4d:c0:75:56:ea:3c:c6:cc:9f:
                    a5:53:d5:4a:0e:c3:71:16:35:d4:7d:41:a8:f6:a3:
                    14:16:cc:2b:89:4e:2c:57:4d:3c:a3:1a:4b:fc:54:
                    a1:0b:70:30:bd:56:43:ad:89:2b:69:39:7f:fa:29:
                    90:c1:67:c2:f8:f1:98:f8:05:33:b3:c8:3b:be:db:
                    dd:e3:99:54:47:fb:be:a4:5c:60:e1:e5:0b:3b:c5:
                    64:4e:bc:56:a3:06:93:1e:d9:17:fc:e1:81:dc:6d:
                    28:7e:8f:dd:e6:38:8f:d7:05:38:a0:6b:54:16:63:
                    07:a7:e7:5d:1c:91:e4:1e:96:0e:9e:af:ad:6f:85:
                    33:8d:31:13:1b:3d:4d:fa:eb:c2:58:83:55:b8:a1:
                    c5:39:97:ad:ef:4a:fa:7e:ed:e6:46:b8:1c:82:46:
                    90:f8:ca:9e:e2:c1:ce:1d:76:d5:23:50:af:a7:c2:
                    d2:ef:bb:fa:e5:1d:55:43:62:ef:42:d0:43:33:73:
                    45:15:f3:c1:21:69:4b:be:3a:8e:c1:46:81:95:df:
                    8e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A5:38:16:77:64:9F:42:D9:93:E6:8E:98:1E:17:4E:84:D3:3A:0B
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31342e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:61:ab:53:05:72:4f:1a:8c:78:e5:ca:12:1c:b7:07:05:
         89:19:ac:67:ba:c9:87:7c:93:5b:26:11:0c:9b:f8:2e:12:e0:
         89:af:c2:5f:02:64:28:9d:15:8e:14:a1:7e:62:38:81:58:b3:
         ca:02:1e:dc:7a:73:68:7d:b1:37:bb:12:1c:88:b2:c5:11:a9:
         8e:02:0b:c8:78:60:a1:49:39:81:fd:a0:a7:61:d0:49:81:e9:
         b3:11:1c:53:5f:1c:45:95:4a:80:45:dd:1e:f0:8d:60:04:39:
         59:ba:cf:0c:ab:8b:41:76:d9:aa:91:c8:40:cc:e1:44:3b:93:
         91:9c:e8:b4:f9:ea:57:09:1f:19:cc:20:df:c5:ac:f3:77:ef:
         5e:92:43:fd:c9:86:8c:c7:bf:28:59:86:9b:da:19:b2:37:30:
         8c:9b:9c:2e:9b:47:4e:fd:03:c5:9d:24:a0:6f:23:ea:23:00:
         90:c9:6e:08:cd:84:c8:bc:60:b3:3e:fa:99:8a:59:82:00:ca:
         72:3c:83:79:bb:03:b4:bd:43:3e:69:d0:00:69:d6:98:4f:35:
         ff:bf:ba:91:cc:63:c4:fc:82:9d:9a:8c:0e:b1:a1:67:d4:d8:
         7f:fb:85:92:37:d3:c9:43:48:c6:fc:eb:e0:eb:2f:d2:c5:2a:
         5d:8a:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net