Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          XkJS4wSfOPjlIbDzxq+ve7jZzajwWUL/bPZbOV0PfHQ=
Subject key identifier:   E8:FC:62:B5:C7:3A:35:8C:15:75:25:3E:94:51:9E:25:B6:62:DB:2F
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       02BFAC4A451DC56A5EAF715CECF327D554E637B9
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:45 +0000
ROA not before:           Thu 30 Nov 2023 12:34:45 +0000
ROA not after:            Thu 28 Nov 2024 12:39:45 +0000
asID:                     28182
IP address blocks:        189.89.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:bf:ac:4a:45:1d:c5:6a:5e:af:71:5c:ec:f3:27:d5:54:e6:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:45 2023 GMT
            Not After : Nov 28 12:39:45 2024 GMT
        Subject: CN=E8FC62B5C73A358C1575253E94519E25B662DB2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:29:29:37:f0:02:b3:43:c3:c9:cc:3e:87:
                    af:4f:41:8c:cf:b4:a8:04:3f:14:09:33:b2:b3:f4:
                    18:de:e7:2f:52:47:15:86:62:a3:fb:0e:6f:b1:ce:
                    14:76:4a:73:1f:a7:60:08:bd:ff:1f:29:f2:ee:85:
                    64:1c:65:d3:d7:40:df:3b:54:fc:d5:17:d6:27:2d:
                    12:83:8b:75:83:35:42:3b:ac:d1:60:e5:01:58:6a:
                    7e:ef:ed:4e:63:a5:a0:a7:ff:49:ca:a0:7e:f9:ac:
                    ee:4a:98:82:cd:63:04:9e:ea:5b:5d:60:d3:0b:34:
                    fa:02:9a:6e:43:9e:70:2b:9d:da:9b:69:38:25:13:
                    e8:9c:a1:16:0c:af:90:af:a5:13:5d:a3:73:99:9c:
                    32:04:f1:19:c9:78:f3:eb:4a:99:81:25:43:7a:46:
                    f2:f6:92:1e:ac:86:56:5b:17:df:38:8a:87:9a:23:
                    52:ce:42:7a:d1:e0:5a:4c:fd:a3:70:ca:69:a0:c9:
                    4a:95:29:33:2f:17:f9:26:4a:85:54:eb:c8:1b:c8:
                    17:df:38:86:22:7c:37:85:75:c2:c5:90:91:72:52:
                    3d:64:27:54:5c:50:0a:86:11:47:e7:da:7e:8c:29:
                    64:4e:65:7e:37:8f:a7:df:f1:47:eb:e1:e5:90:fe:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FC:62:B5:C7:3A:35:8C:15:75:25:3E:94:51:9E:25:B6:62:DB:2F
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:37:22:0b:70:67:5e:5c:ab:2f:c0:d4:4d:b7:5c:0d:d4:01:
         66:5e:93:8e:f2:84:5e:2e:67:fc:25:dc:f7:dc:52:01:51:fa:
         cb:b3:b3:a9:81:31:66:af:f0:c0:96:1b:b1:01:9c:df:02:7c:
         a0:4b:ed:25:88:5a:b4:47:35:e2:5e:07:20:0b:d1:30:45:86:
         35:70:55:fc:7a:71:62:6f:63:14:ac:85:65:77:97:1a:fe:f4:
         96:89:a0:62:fb:7f:ef:b5:0a:b5:e0:a4:83:b7:00:a6:40:4d:
         b8:09:6d:b5:8d:3b:ae:57:b8:d3:e6:00:ba:73:2f:95:94:47:
         1c:66:8b:ef:e0:9a:af:1f:c2:dc:19:55:c8:5a:33:f8:db:ff:
         05:05:c2:41:89:ad:46:bb:cb:05:1a:f1:a7:5f:d7:6f:55:5f:
         e4:48:81:c9:1e:d1:77:6a:ab:46:2a:87:b5:73:c8:1a:8e:7b:
         4e:a1:d8:fa:7e:5b:53:a3:14:be:7a:3f:b8:e0:2c:3e:94:2b:
         65:6a:cb:08:05:08:4d:f1:b0:5c:24:72:c2:4f:b7:20:63:f6:
         bf:a2:41:47:17:f4:e5:ea:da:59:d0:55:04:cf:d6:11:41:ca:
         d2:b2:df:8d:1d:6b:f4:65:73:7d:bc:66:85:45:14:de:8d:41:
         ef:f2:72:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net