Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e382e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          r/HAfiikgML7/3EempCoz1t/fN1uegoP1UNt/grd9f4=
Subject key identifier:   81:5D:7F:A0:F1:EA:10:89:B6:98:9A:61:7B:D9:D2:46:36:05:A4:C4
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       2BF4BF9D32C88B75E398AD265D9B6F4D3F4F73B6
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:39:45 +0000
ROA not before:           Thu 30 Nov 2023 12:34:45 +0000
ROA not after:            Thu 28 Nov 2024 12:39:45 +0000
asID:                     28182
IP address blocks:        189.89.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f4:bf:9d:32:c8:8b:75:e3:98:ad:26:5d:9b:6f:4d:3f:4f:73:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:34:45 2023 GMT
            Not After : Nov 28 12:39:45 2024 GMT
        Subject: CN=815D7FA0F1EA1089B6989A617BD9D2463605A4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:0e:30:e1:44:15:b7:6d:fc:4c:c4:25:73:
                    f8:11:04:1b:fa:4f:c5:2b:4b:73:ae:53:60:3e:57:
                    2f:35:e7:0f:ab:72:55:bf:e0:ec:4a:f7:0d:e2:8f:
                    d4:57:d5:e9:89:85:a9:1a:1b:1e:e6:3a:cf:c7:1a:
                    a5:58:74:30:8d:74:6d:34:4f:8f:e5:5c:56:cc:81:
                    48:56:c9:cf:df:2f:06:12:1c:28:c5:4b:2a:bf:dd:
                    d0:3d:0e:6c:8e:28:93:78:bc:6e:5b:50:4c:fe:d7:
                    2d:06:f3:0d:4c:4c:3a:30:47:c2:6f:71:d3:b6:8d:
                    d6:4c:60:39:f5:b8:ae:71:fd:f6:6c:9d:ba:48:27:
                    55:1a:14:d5:b8:64:6f:a7:fd:56:cc:ba:d1:93:06:
                    80:df:21:c8:5c:1a:d1:d2:d4:bf:69:11:36:02:4d:
                    46:22:10:c3:8f:45:a5:6c:42:18:43:f3:eb:36:c4:
                    b2:2c:89:0f:a9:89:24:a6:6e:d1:da:f3:36:77:37:
                    16:6c:a0:f5:28:2a:09:6b:e2:ff:95:01:12:2f:6c:
                    9b:91:b9:d3:b7:29:b1:37:24:2d:b1:07:5c:ad:37:
                    cc:06:54:62:66:88:1e:50:58:99:a9:51:9f:07:ba:
                    9c:6e:77:76:22:46:aa:c4:94:86:9d:14:a8:07:50:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5D:7F:A0:F1:EA:10:89:B6:98:9A:61:7B:D9:D2:46:36:05:A4:C4
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e382e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:1f:1c:12:79:02:f8:36:95:60:92:4b:f4:03:2c:cc:74:
         76:a4:6c:5c:b0:bd:ba:44:55:b0:ed:4f:dd:29:c2:a9:16:68:
         9e:b2:7c:e5:5f:cd:cd:98:21:da:38:95:b0:88:ad:27:64:cd:
         b9:aa:67:f7:ea:f5:3c:4f:7d:ed:b9:df:61:83:38:cf:35:71:
         36:6b:5e:cf:13:c8:6d:33:61:b0:76:2a:fe:3a:12:d6:1b:65:
         dd:40:af:72:93:4f:d1:25:c7:f0:ca:f3:b5:83:f3:47:05:72:
         eb:9f:62:94:d7:30:d8:93:41:0b:cc:cc:9a:4b:93:c5:18:05:
         be:b4:e6:f6:c4:fd:73:dc:d6:43:03:09:bc:d1:cf:9b:1f:2f:
         70:41:6b:5a:3c:7f:72:36:eb:e8:d0:8f:ba:db:23:02:69:1e:
         5f:bb:0e:73:28:19:83:5c:e2:80:8c:9b:af:bf:4f:8a:1e:4a:
         ad:6b:c7:f0:ed:d7:3c:c3:08:b7:99:35:f5:3e:60:3a:9f:02:
         eb:df:9c:f5:a3:2f:86:18:4e:4a:a6:b1:f1:91:7a:1d:49:e8:
         6c:a0:9a:e9:a1:57:4d:70:de:ff:01:a1:dc:41:b9:a8:c5:80:
         fc:4f:50:ea:a6:a2:61:71:24:d6:37:e7:71:e2:a1:b7:b3:d0:
         60:43:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:30 2024 by rpki-client on console.sobornost.net