Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31312e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31312e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          Nt2ZwCCl7ixoe8li95W3kamzG/8vAHh2nMYu5X37WzM=
Subject key identifier:   73:91:93:22:41:FD:89:B0:00:03:93:53:C0:91:8E:26:FE:A3:2F:D2
Certificate issuer:       /CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
Certificate serial:       4B4D2B63ED7154FDF5DBC4852B88FADFCF060E80
Authority key identifier: 3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31312e302f32342d3234203d3e203238313832.roa
Signing time:             Thu 30 Nov 2023 12:45:52 +0000
ROA not before:           Thu 30 Nov 2023 12:40:52 +0000
ROA not after:            Thu 28 Nov 2024 12:45:52 +0000
asID:                     28182
IP address blocks:        189.89.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4d:2b:63:ed:71:54:fd:f5:db:c4:85:2b:88:fa:df:cf:06:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B831AF4E55779FFDEB869FF8980EBF2FDC42192
        Validity
            Not Before: Nov 30 12:40:52 2023 GMT
            Not After : Nov 28 12:45:52 2024 GMT
        Subject: CN=7391932241FD89B000039353C0918E26FEA32FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5b:f8:e2:d2:1a:de:14:3f:10:64:06:57:a4:
                    b5:76:d7:e9:ca:d9:5e:78:a7:16:66:17:c9:b6:98:
                    e8:4e:e4:59:75:05:08:76:88:b1:9a:f7:b2:00:2b:
                    aa:96:ad:a5:56:00:98:df:2b:22:71:5d:00:e5:eb:
                    e1:34:1e:e9:b8:c7:18:f3:93:e4:22:7f:72:51:20:
                    51:46:f4:fb:4e:47:0e:14:da:4d:1d:33:0d:93:1c:
                    af:5b:73:75:5e:a5:16:5a:ab:20:9d:97:21:fe:57:
                    92:6b:04:aa:e4:68:8e:f2:fb:1f:cd:9e:5e:6e:8e:
                    b6:66:4a:ca:15:5d:7b:7d:31:83:d4:49:94:f4:a6:
                    f3:2c:eb:8c:e9:e8:c5:0b:d9:f7:11:0d:23:8f:67:
                    10:c9:f6:05:4c:b3:1f:8c:86:1c:4e:2a:06:bd:8b:
                    49:19:39:38:fd:4a:04:9f:0c:8f:89:8a:28:11:ce:
                    07:42:35:91:e7:67:43:be:a7:c3:0f:4c:73:25:ec:
                    27:fb:77:f9:5d:fb:6a:0a:5f:dc:a0:2c:1d:8d:9d:
                    74:97:6d:3a:3e:fb:11:aa:7d:67:34:8b:13:4f:3e:
                    5c:a2:2b:53:9a:1b:38:b4:1f:b1:38:23:e6:4d:a9:
                    ba:08:93:1c:12:ec:cf:0d:06:fa:3a:8b:6e:b8:b0:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:93:22:41:FD:89:B0:00:03:93:53:C0:91:8E:26:FE:A3:2F:D2
            X509v3 Authority Key Identifier:
                keyid:3B:83:1A:F4:E5:57:79:FF:DE:B8:69:FF:89:80:EB:F2:FD:C4:21:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B831AF4E55779FFDEB869FF8980EBF2FDC42192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e31312e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ec:ac:c0:ef:78:00:70:c6:3a:0e:b2:3c:9f:13:50:c6:45:
         89:d8:b1:e4:24:3d:bc:66:cd:f8:51:41:ce:36:e1:48:fa:32:
         d0:d5:0c:19:4c:80:eb:76:cc:ba:1f:24:5c:76:66:8d:1b:07:
         b3:27:b1:d0:29:0e:66:2a:64:92:f6:c5:e0:7b:3a:e7:c1:17:
         58:b7:08:70:86:a1:02:59:43:30:59:0c:23:64:42:30:4c:09:
         1f:1a:d2:6d:43:6a:bb:cf:64:8f:46:96:8c:0c:cf:2a:b0:fd:
         f5:39:51:3d:26:fa:fd:6a:fa:80:5a:61:f1:15:53:30:86:05:
         cd:ae:bf:09:9b:f7:61:82:e9:8e:45:27:98:ad:45:46:b9:25:
         aa:7b:65:5f:58:bf:14:01:40:44:49:f6:5e:8d:6b:dd:4a:f0:
         e1:e2:e4:71:a4:33:a6:0a:72:97:29:75:2f:dc:58:fb:c4:19:
         6a:eb:a7:47:37:ad:0e:15:a9:b9:98:1b:c2:1a:c4:59:66:15:
         7e:3d:e7:33:b5:00:85:dd:d2:d0:05:db:28:f1:4e:b7:7d:41:
         61:7c:22:14:6e:a5:55:11:ec:ef:99:c9:f5:6e:b0:65:dd:26:
         98:61:44:a6:f0:32:34:ff:2a:e2:4f:9f:b6:9e:74:52:bf:8b:
         51:90:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org