Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          Hli9RP/wg53gGOMPl+GWHu9w/1sMiUE249mb5RWkRsI=
Subject key identifier:   85:07:05:E9:69:EB:31:A6:1F:8E:C7:2E:70:80:DD:DE:32:7A:6A:65
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       050D8F00E126468ACEB8D4DD0B3D5971F6BDFCCF
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:13 +0000
ROA not before:           Fri 05 Apr 2024 01:00:13 +0000
ROA not after:            Fri 04 Apr 2025 01:05:13 +0000
asID:                     28182
IP address blocks:        170.231.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0d:8f:00:e1:26:46:8a:ce:b8:d4:dd:0b:3d:59:71:f6:bd:fc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:13 2024 GMT
            Not After : Apr  4 01:05:13 2025 GMT
        Subject: CN=850705E969EB31A61F8EC72E7080DDDE327A6A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:8e:98:67:43:8e:06:0a:f4:e8:e1:43:e2:
                    4d:7a:bf:40:a8:a1:bd:12:ab:60:0f:57:0a:a6:c6:
                    3b:67:4b:1a:f2:8f:c1:1e:8c:80:55:13:24:b1:b1:
                    13:dd:5c:cb:70:69:e0:b6:03:1c:33:8d:c3:22:22:
                    cc:b9:63:73:15:c6:62:9f:7c:e5:7d:43:ea:71:da:
                    30:bc:48:3d:ef:3f:f5:70:d4:b9:86:3c:3e:78:71:
                    09:2b:e2:f6:4f:de:2f:6a:c5:31:7f:39:95:8f:18:
                    25:2e:cf:c9:1f:c2:e3:e4:ee:84:f9:66:24:3f:69:
                    b6:b6:24:89:8b:37:7b:4f:b8:90:8a:23:73:23:da:
                    bb:d6:42:1b:a6:84:d9:99:29:0f:95:24:16:3d:f9:
                    1a:ce:84:eb:18:06:eb:38:ee:58:5d:37:76:34:61:
                    fa:87:d8:43:e5:4c:f4:99:cc:8a:5e:de:95:45:da:
                    ed:cb:27:5e:af:9b:dd:16:54:70:9b:30:65:60:22:
                    ff:ef:6f:6e:16:d0:eb:ea:f1:fb:48:07:50:3c:54:
                    57:da:24:92:37:8d:98:ed:d6:a0:09:03:1e:e3:b6:
                    56:1e:32:e5:e3:ad:13:95:a9:ec:b3:73:60:27:b6:
                    29:9e:fa:0d:e5:28:4c:a1:b5:79:85:43:66:90:ac:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:07:05:E9:69:EB:31:A6:1F:8E:C7:2E:70:80:DD:DE:32:7A:6A:65
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133342e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:bb:f5:b5:73:59:b4:e4:b9:9c:e2:bb:63:85:a8:e5:0b:
         9e:d8:a4:12:89:5b:48:27:c3:72:da:cc:12:93:f0:5a:61:3a:
         9e:a9:d2:01:7d:58:76:ca:ad:64:d3:24:5f:c9:24:9c:e4:dc:
         02:6e:91:31:2b:6a:9d:4d:23:c0:69:67:0f:a6:c9:9d:a5:9b:
         cd:13:2d:9a:a5:58:01:7e:db:54:c0:09:a4:ab:3b:7c:2c:f0:
         2b:fc:8c:a7:9e:0d:cf:24:83:b6:78:99:ec:23:8e:27:a9:ec:
         ff:ab:8a:0e:8a:00:db:54:cc:67:5f:3a:26:28:2a:24:66:25:
         b5:99:10:96:93:40:a1:a4:30:06:67:0f:03:ed:1b:35:05:21:
         9d:56:92:fb:02:a7:6e:1e:4c:f3:bc:fb:50:a8:b9:93:f4:b9:
         93:fe:93:7e:be:dd:3c:ff:8b:b8:e4:12:5a:67:58:8a:5f:7d:
         18:24:ec:5a:5a:2c:91:6d:0b:99:0d:e1:93:b5:63:64:aa:9d:
         3a:25:c2:d4:59:fb:da:1e:40:3b:13:58:47:45:ac:10:38:6f:
         57:f8:0d:5f:24:9d:3e:f9:14:7a:66:b0:f5:d9:d6:db:f8:20:
         28:59:fc:ba:92:23:8c:fc:21:40:e7:f8:41:9f:8b:03:21:a1:
         b6:13:a0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org