Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e352e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e352e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          GmuCMKJ7vNG8Lp8w2MuWumf77RNCXaATNgxCxv5Nrx4=
Subject key identifier:   54:9B:47:45:A2:87:1D:5F:3A:A3:9C:59:3C:7E:A3:7B:F3:9D:C0:63
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       4881B26F560CFB7D746EAC84016A7CCA6B4A5321
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e352e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:12 +0000
ROA not before:           Fri 05 Apr 2024 01:00:12 +0000
ROA not after:            Fri 04 Apr 2025 01:05:12 +0000
asID:                     28182
IP address blocks:        189.89.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:81:b2:6f:56:0c:fb:7d:74:6e:ac:84:01:6a:7c:ca:6b:4a:53:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:12 2024 GMT
            Not After : Apr  4 01:05:12 2025 GMT
        Subject: CN=549B4745A2871D5F3AA39C593C7EA37BF39DC063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:4f:3b:a1:c4:3f:fc:e6:88:8f:ff:e5:94:
                    f4:b0:78:44:5b:6c:31:0f:c3:19:c0:17:f2:05:a3:
                    a9:bc:fe:b2:dd:80:58:ec:3d:9a:06:df:07:b5:39:
                    48:9d:3e:36:ba:3b:82:69:9d:2c:a0:75:cc:06:a3:
                    82:f1:4a:90:c5:5d:32:18:7f:c8:de:cb:ec:0e:fb:
                    3e:10:51:c6:07:d3:c9:59:85:a2:a0:3c:e9:5c:43:
                    3f:47:99:fc:f0:ff:83:f5:ab:08:27:61:f2:cb:a9:
                    82:c3:e5:17:92:46:66:23:31:4e:28:2b:68:2d:f2:
                    75:7c:8a:49:8b:7c:8a:6d:02:ca:78:ae:8f:2f:03:
                    ab:0a:a6:92:e7:50:7a:fd:e1:59:ef:d7:a5:b9:6b:
                    c5:a2:1e:8c:c8:88:77:c3:20:bf:97:89:75:46:94:
                    68:d7:42:0b:79:6c:06:88:ab:64:62:a3:00:90:fe:
                    b3:84:bd:2b:34:5e:7a:69:7a:d1:fe:d7:3f:c7:ba:
                    c7:c1:89:c0:8d:91:0b:40:9c:1e:1d:27:16:85:f6:
                    3d:84:0b:04:21:88:37:d1:cd:37:90:49:1e:84:0b:
                    d9:5c:4d:d5:4c:78:2f:94:17:d9:e9:9b:14:6f:75:
                    d6:7b:87:1b:f0:21:5e:94:65:31:62:77:89:49:b2:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:47:45:A2:87:1D:5F:3A:A3:9C:59:3C:7E:A3:7B:F3:9D:C0:63
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e352e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:18:3a:f3:47:f8:35:48:1f:fa:b4:26:8c:13:93:3e:84:
         8e:62:7d:96:cd:29:65:ae:33:e4:cc:e8:3f:ed:71:39:9c:9c:
         e4:cd:80:f7:d5:38:09:98:e4:21:88:b7:37:b4:f6:cb:d6:fb:
         24:58:76:0e:6e:dc:b2:93:bf:9f:45:ac:b3:25:78:b2:2b:3e:
         d5:fd:7e:ad:62:aa:46:d9:62:1e:60:bd:78:34:aa:47:5d:99:
         c9:2d:b2:3e:f3:78:9b:8c:07:b5:27:00:97:00:85:8e:cd:cf:
         ed:eb:d0:fa:5e:87:b5:1f:03:a0:64:ed:8d:ac:85:84:74:c1:
         42:2d:b2:da:76:d1:30:c1:98:f2:1c:5b:ce:ec:fd:2d:e2:27:
         1e:59:44:6b:43:c9:83:b8:69:cc:11:4b:d3:6b:5a:ad:10:69:
         c1:15:13:25:8e:67:25:8e:8b:f7:ee:b1:68:76:a3:89:0d:f8:
         8d:58:22:70:50:ea:56:12:39:05:e7:76:02:a2:9d:7f:a5:a4:
         58:22:96:a6:87:e5:17:2f:5d:6d:e8:ba:43:16:35:ab:0f:12:
         d0:f1:bc:fd:d2:21:c3:df:79:1d:0d:5b:29:6d:c3:5b:be:0d:
         54:38:48:8a:60:f1:71:22:fd:31:d8:8f:06:a0:8b:34:31:57:
         ed:d5:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org