Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          4ZC/Te0m2/9dxVx9WRQf8vQDMV9ETFlBDTFbdKM3orY=
Subject key identifier:   4D:FD:83:31:A6:A6:D3:3B:4F:35:A1:4B:61:9F:80:52:41:E5:B1:0A
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       54D51394CE3F93935E537A084596A7B1123A88B3
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:11 +0000
ROA not before:           Fri 05 Apr 2024 01:00:11 +0000
ROA not after:            Fri 04 Apr 2025 01:05:11 +0000
asID:                     28182
IP address blocks:        170.231.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d5:13:94:ce:3f:93:93:5e:53:7a:08:45:96:a7:b1:12:3a:88:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:11 2024 GMT
            Not After : Apr  4 01:05:11 2025 GMT
        Subject: CN=4DFD8331A6A6D33B4F35A14B619F805241E5B10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:65:6d:af:f1:0f:99:b3:da:da:9b:b6:55:ee:
                    2d:d1:8f:5f:af:ed:1f:a2:10:53:e7:32:ed:b2:bf:
                    0b:5b:ae:26:64:16:2b:0d:de:75:95:d1:74:bd:d5:
                    9b:da:87:55:69:86:6f:1f:a7:5d:ba:a4:92:51:d5:
                    81:38:e0:ea:dd:c5:44:bb:ee:1f:92:9e:d4:3d:d5:
                    47:69:96:fe:8d:7c:87:ba:d9:0e:d0:22:52:cc:9c:
                    83:59:3f:e8:bd:e4:7e:b5:de:62:6a:b0:41:d1:7b:
                    ba:27:a3:fb:0f:f0:2c:b0:a9:24:43:a8:2b:92:82:
                    9d:be:08:e7:2d:1f:41:93:b4:f6:fb:76:9e:2e:9d:
                    8b:90:df:e3:98:15:a0:3a:e8:98:0c:f4:2e:bb:6e:
                    e1:0d:58:ab:8b:68:fd:00:11:b3:c7:89:85:45:92:
                    62:7e:45:f6:a4:8a:66:e9:50:1f:fc:86:cf:4d:ed:
                    ce:31:27:a7:b2:35:b3:fd:4a:00:33:a4:87:99:48:
                    36:78:29:bf:4f:62:f8:69:d6:2b:07:9f:76:e2:7c:
                    8f:21:b6:dc:4b:e1:8b:c6:5f:1c:2d:ab:59:78:4b:
                    0b:94:a8:d5:99:f5:13:5b:77:d6:2a:47:39:49:04:
                    54:5d:5a:b6:87:3e:b9:ad:85:c3:4e:bc:db:b6:c2:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FD:83:31:A6:A6:D3:3B:4F:35:A1:4B:61:9F:80:52:41:E5:B1:0A
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a4:72:32:00:26:03:d4:14:f5:10:e2:01:ed:9f:7b:98:88:
         55:a4:90:fc:9c:3f:aa:42:6e:18:3a:07:3b:3a:be:38:96:ee:
         c5:38:78:0f:7e:7b:07:5b:48:66:8c:f2:41:17:90:4d:35:98:
         bb:57:f2:81:5c:7e:cb:ea:49:16:5d:2b:d4:3c:da:7c:ac:5d:
         13:e2:ae:bc:39:8c:59:b6:06:9d:fa:0c:c3:18:08:75:b9:5a:
         f4:ca:c5:37:0a:a4:bb:71:09:e2:d2:bb:69:c0:68:eb:b7:aa:
         61:f2:f6:36:fe:96:e9:07:05:8a:fa:c2:7e:c4:31:e6:66:90:
         ae:e1:5d:57:3b:0b:90:7d:b1:89:ae:7e:3e:05:05:99:60:9a:
         d5:7b:f5:bd:96:3e:e6:3b:6e:f5:39:de:a3:45:f3:3c:54:1f:
         13:ca:e8:46:47:4d:22:cb:3e:cd:2e:d8:e8:d9:28:d2:94:81:
         4a:f6:3e:67:94:3e:21:d4:71:93:4d:a3:bb:8c:b0:5f:4d:74:
         2a:c6:ec:04:76:09:98:85:4d:ca:44:e4:0e:33:ca:59:98:9d:
         e6:d9:b2:24:86:9a:39:d7:1f:d7:b0:1a:6f:1c:a2:56:5d:f8:
         1d:de:6f:5e:5f:92:d3:dc:93:23:22:90:af:36:02:17:d8:eb:
         25:94:0f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org