Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e362e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          lGHs3JsQxtY88u3Y1y+g8zLKPd2k/6VUNtsOc/l20bI=
Subject key identifier:   CA:C5:11:9F:DD:A3:02:71:3D:C8:DE:B0:48:50:7D:50:EE:D1:D7:FA
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       0F5C977E1C371487EF42D366E30CA4CF45C0EDDE
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32332d3233203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:46 +0000
ROA not before:           Thu 30 Nov 2023 12:34:46 +0000
ROA not after:            Thu 28 Nov 2024 12:39:46 +0000
asID:                     28182
IP address blocks:        189.89.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5c:97:7e:1c:37:14:87:ef:42:d3:66:e3:0c:a4:cf:45:c0:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:46 2023 GMT
            Not After : Nov 28 12:39:46 2024 GMT
        Subject: CN=CAC5119FDDA302713DC8DEB048507D50EED1D7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:00:5a:34:4b:82:27:45:54:a1:12:c9:ce:
                    47:33:0b:16:80:a6:51:9d:4e:55:c6:82:e7:da:28:
                    b5:78:4c:fc:61:93:46:5d:7e:58:fd:25:7b:74:c0:
                    b2:43:67:a9:29:86:63:8a:14:f2:c7:66:22:0b:41:
                    64:5e:66:c5:30:bd:eb:50:dd:2b:88:54:a1:09:f9:
                    d5:9e:9a:8c:4b:a6:49:32:aa:08:9c:1b:f1:12:03:
                    2f:97:d4:49:ef:ed:e9:01:96:66:e4:33:0e:85:18:
                    ea:e5:27:88:f7:c3:58:25:0e:6e:8f:a3:66:53:20:
                    2e:b5:c6:90:ac:36:18:48:8d:d6:d8:a7:10:45:0e:
                    ac:02:18:00:7c:b6:bd:2e:ab:1a:78:02:4e:12:27:
                    f1:1c:9a:81:26:d2:b3:c0:91:72:91:d3:e9:af:6d:
                    8c:9f:de:3b:b4:84:e6:72:5f:b7:e3:82:8f:b5:fc:
                    1a:cc:7c:9e:d4:85:fa:8d:66:9c:2e:23:be:29:d7:
                    56:de:31:43:f6:19:ad:d8:39:b6:4f:f4:b6:83:93:
                    e5:bd:7d:c7:a8:bc:e5:ff:af:9a:d4:91:b8:3c:bf:
                    99:54:69:c4:c3:70:05:9d:1f:52:0f:db:0e:13:54:
                    7a:f7:c9:4f:d0:d7:65:7f:99:be:57:6d:f8:27:18:
                    3e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C5:11:9F:DD:A3:02:71:3D:C8:DE:B0:48:50:7D:50:EE:D1:D7:FA
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:fa:22:de:51:3b:04:25:56:27:03:a7:82:a4:d7:e4:0e:
         ab:41:67:a9:4a:f0:84:c0:6d:b7:bd:08:af:82:4b:2d:de:70:
         2d:d9:2a:ac:77:43:d7:85:b4:ed:04:26:5e:f4:35:b6:fd:70:
         91:63:bc:11:01:59:2e:b7:f7:e4:4e:ea:54:98:db:aa:bd:e1:
         6a:71:0c:15:d9:d9:a6:0c:d4:b7:da:96:29:c3:55:c4:5b:0c:
         3e:07:4f:34:79:98:3f:f9:7b:be:71:2e:b9:34:3d:2a:d6:0b:
         01:98:f0:d5:f3:ae:62:d0:d9:1b:76:de:50:88:18:58:68:5a:
         1d:f2:e1:16:54:82:24:84:1e:99:6c:30:76:c4:db:8d:19:8e:
         0f:35:cd:40:c7:4b:fa:ed:1c:fa:6b:c0:12:e9:d8:84:61:b1:
         31:dd:80:95:3d:8e:a1:11:e0:6c:df:af:a1:69:72:ba:d6:a0:
         02:e4:a7:e8:90:f3:4d:cf:4c:fa:4f:0a:b7:0d:03:16:97:c4:
         2e:ee:86:58:b2:0a:0f:cd:67:35:59:7d:94:0e:04:48:bc:5f:
         5d:f6:ae:e3:c7:f9:77:7a:80:13:f3:20:8f:28:88:ed:f9:b0:
         43:ac:ee:e8:7d:ba:0c:24:b2:41:b4:87:19:c3:fb:35:4d:87:
         b0:85:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net