Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3234203d3e203238313832.roa
File:                     3138392e38392e302e302f32302d3234203d3e203238313832.roa (raw, json)
Hash identifier:          ffcvTgHwv/gdQph71pl3Zpq0iJidYcnxO82VC8uB2LU=
Subject key identifier:   C5:D9:51:A8:29:ED:20:76:FA:CE:44:2A:2A:D0:2F:FF:0B:9A:0F:47
Certificate issuer:       /CN=214830E53E884DA5FC21A586B90AB77FE89D064D
Certificate serial:       4DECBB218D476F67ECCBCAFD488B08BD789EFA0B
Authority key identifier: 21:48:30:E5:3E:88:4D:A5:FC:21:A5:86:B9:0A:B7:7F:E8:9D:06:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/214830E53E884DA5FC21A586B90AB77FE89D064D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3234203d3e203238313832.roa
Signing time:             Wed 01 Feb 2023 22:00:00 +0000
ROA not before:           Wed 01 Feb 2023 21:55:00 +0000
ROA not after:            Wed 31 Jan 2024 22:00:00 +0000
asID:                     28182
IP address blocks:        189.89.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ec:bb:21:8d:47:6f:67:ec:cb:ca:fd:48:8b:08:bd:78:9e:fa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214830E53E884DA5FC21A586B90AB77FE89D064D
        Validity
            Not Before: Feb  1 21:55:00 2023 GMT
            Not After : Jan 31 22:00:00 2024 GMT
        Subject: CN=C5D951A829ED2076FACE442A2AD02FFF0B9A0F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:cc:f0:d5:9d:ff:15:97:9f:23:c7:a4:f4:
                    f8:32:af:43:f4:46:9c:a0:52:72:39:66:44:8a:84:
                    e3:ae:7e:43:6c:a1:d3:23:d1:c3:a1:93:03:75:46:
                    b6:e8:9a:c5:9e:cf:de:72:98:42:33:ce:5b:00:9f:
                    65:68:36:cc:b5:fc:c8:6f:de:a9:c3:21:40:13:de:
                    5c:ea:a1:cd:26:40:2b:53:f6:da:fc:f7:39:db:80:
                    94:40:80:89:4d:69:0a:16:ae:d6:71:f2:2a:37:cf:
                    ed:a9:dc:91:dd:5e:a4:d5:d8:6b:6e:d0:32:90:c2:
                    5f:25:7b:69:c0:a5:69:fe:db:d5:78:91:76:4c:2f:
                    2c:bb:1b:52:c7:1c:d4:b6:17:4e:d8:84:18:d3:2e:
                    22:38:d2:84:57:8d:1d:77:94:a9:01:13:bf:06:d4:
                    0e:70:2d:d6:1d:82:b7:d3:ad:ad:3e:1c:77:74:81:
                    78:35:af:22:70:4a:ae:6a:c8:bf:8a:53:90:44:44:
                    d1:97:f3:2e:02:68:f8:4b:22:c4:23:c7:fb:71:5c:
                    a8:96:6d:03:51:ad:43:cb:83:7d:2a:7c:0d:af:0b:
                    16:4f:98:2a:4b:67:40:14:92:50:d7:5c:c9:f7:68:
                    45:24:e9:fd:be:41:bc:d4:c0:9b:d0:98:71:41:63:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D9:51:A8:29:ED:20:76:FA:CE:44:2A:2A:D0:2F:FF:0B:9A:0F:47
            X509v3 Authority Key Identifier:
                keyid:21:48:30:E5:3E:88:4D:A5:FC:21:A5:86:B9:0A:B7:7F:E8:9D:06:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/214830E53E884DA5FC21A586B90AB77FE89D064D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/214830E53E884DA5FC21A586B90AB77FE89D064D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3138392e38392e302e302f32302d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:83:0a:96:57:88:ea:a1:25:11:ec:1e:3d:e8:6d:84:3b:
         e4:c0:a7:7f:bc:bb:3e:1f:f4:05:96:4b:d5:d3:74:eb:73:bb:
         67:97:d5:e4:31:ca:85:05:81:81:69:19:77:96:c4:84:0c:62:
         bf:b3:9b:6a:2f:52:f2:3e:06:c7:09:53:b0:7b:11:b9:58:97:
         8a:7e:f3:c0:7a:f0:6e:02:89:79:92:5d:53:de:a3:31:16:82:
         1c:1e:d2:af:ed:5c:35:e6:75:0f:7f:ec:e0:97:52:41:db:f8:
         7d:21:5e:c2:c8:c9:8f:38:e7:90:47:06:a6:e8:52:f7:a9:b6:
         52:2d:93:28:dd:6a:c9:61:02:92:3c:5f:9d:4e:2b:87:09:3f:
         cc:fc:b5:b5:aa:b6:5d:2d:e1:d2:71:17:c5:c8:d2:db:1d:91:
         cb:a0:bf:1e:4b:03:ee:34:6e:1b:9a:3a:30:79:18:a9:62:5b:
         e4:17:f2:6b:95:c9:f7:3d:32:ef:75:8c:ac:ea:57:78:f8:47:
         12:41:10:b3:30:fa:d0:e2:36:7c:9b:5f:26:43:25:27:15:58:
         60:71:59:af:36:23:ce:68:54:83:ba:66:fd:ec:d6:12:70:10:
         ef:7a:b2:7f:e3:b0:ed:23:45:da:b9:53:a7:4c:ee:2a:31:d2:
         01:11:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org