Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e362e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          9OkbxWPLJZ79ZHn7Abc/2KcrNlNTwxeB+mWskfVBbwo=
Subject key identifier:   0A:88:F5:F4:51:0B:26:85:4E:C9:83:87:46:AD:14:F8:F3:97:B8:7C
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       7CDEC30E43DFCAB6A7D8349537210626AE8D39C2
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:44 +0000
ROA not before:           Thu 30 Nov 2023 12:34:44 +0000
ROA not after:            Thu 28 Nov 2024 12:39:44 +0000
asID:                     28182
IP address blocks:        189.89.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:de:c3:0e:43:df:ca:b6:a7:d8:34:95:37:21:06:26:ae:8d:39:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:44 2023 GMT
            Not After : Nov 28 12:39:44 2024 GMT
        Subject: CN=0A88F5F4510B26854EC9838746AD14F8F397B87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:b7:3c:68:fe:27:1d:1d:56:dd:19:df:75:
                    e4:25:8a:b4:cf:e1:f7:f0:eb:a3:3e:ed:ff:37:90:
                    71:cc:e9:fe:7c:0d:b8:ef:5e:c4:2c:68:0e:35:b3:
                    0a:da:09:a6:ac:85:84:9a:77:71:a1:85:40:62:2f:
                    8e:ab:ce:4b:3a:18:80:f4:ef:e3:99:93:0e:76:9d:
                    4e:3e:8e:da:18:af:9f:42:b5:74:64:47:ea:00:4e:
                    df:57:bb:0d:a9:b6:30:4b:da:ad:b0:8a:68:2b:dc:
                    b6:b7:a7:d4:a7:d6:c3:1b:f9:b1:95:cf:f6:cf:29:
                    84:6f:9e:95:e7:b0:53:3d:d2:7a:95:53:0e:b0:8f:
                    e4:84:f8:40:87:87:30:6a:40:f6:b0:3e:87:f8:af:
                    a3:43:7a:da:18:be:0a:fa:e4:34:5e:ad:06:5a:80:
                    aa:36:6f:9b:d4:9b:be:f4:c6:99:cb:f1:87:40:00:
                    45:d4:20:5f:9e:35:71:16:4b:61:9a:29:3f:25:5a:
                    2a:f2:a9:24:7c:01:79:bf:67:68:69:50:24:8f:92:
                    f9:46:9f:81:6d:c1:9e:1e:c2:eb:fe:47:a2:6f:62:
                    78:e1:fc:c9:0b:15:fc:80:af:82:93:15:c2:a3:30:
                    d5:bb:73:aa:63:79:8f:69:35:4c:04:c7:9a:7a:d4:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:88:F5:F4:51:0B:26:85:4E:C9:83:87:46:AD:14:F8:F3:97:B8:7C
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e362e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:d1:b4:4e:ac:8c:4a:b4:f2:7d:03:34:52:0c:d0:9b:74:
         aa:47:8a:b3:10:a2:d5:83:58:23:81:9f:eb:11:99:04:3c:80:
         2e:dd:a7:90:a9:09:13:1d:d7:1a:08:40:24:14:43:e6:99:d0:
         c6:5d:ec:ac:6a:4a:7b:b0:e7:0e:ce:ac:5b:79:ce:78:35:e7:
         d3:4e:c1:0a:8a:ed:3f:b7:a8:60:d3:1f:f1:86:a8:3f:9c:28:
         e7:e9:da:af:19:06:92:ad:d4:5e:6c:bf:6a:ca:27:7f:bf:02:
         95:22:4c:ed:18:29:62:1f:92:d6:0a:81:6d:73:08:c6:30:7c:
         8b:06:03:ae:f8:90:9f:45:d8:b3:25:8a:b6:7d:a3:67:d7:92:
         73:f9:30:c8:4e:19:45:65:44:5a:f4:c7:a2:db:6c:7a:f4:a9:
         af:be:9f:13:88:9f:14:2d:3f:d6:ad:99:98:7a:b2:2e:33:d6:
         ee:9f:d0:7f:cd:ca:44:68:68:fb:2f:2e:ee:d5:71:f7:66:19:
         36:4d:e4:58:d7:3d:cc:68:a1:7b:65:a4:9c:03:36:0c:c8:3c:
         a1:86:f7:4f:1e:83:d9:59:ce:15:4c:ba:e6:47:bc:da:bc:a2:
         27:e4:5f:27:d6:96:9e:6e:e7:87:cc:94:99:8a:16:32:30:c0:
         82:4a:0a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net