Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          jguu0F7IFilh72Djec4ZJkzmP0YpL1UtbVWHQvc/s+E=
Subject key identifier:   92:24:CD:23:B8:A6:D2:CB:28:9F:01:2D:F6:A3:60:66:31:A8:D1:73
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       100E85AA993566C5B5534FC55FA044BD76388120
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:14 +0000
ROA not before:           Fri 05 Apr 2024 01:00:14 +0000
ROA not after:            Fri 04 Apr 2025 01:05:14 +0000
asID:                     28182
IP address blocks:        170.231.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0e:85:aa:99:35:66:c5:b5:53:4f:c5:5f:a0:44:bd:76:38:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:14 2024 GMT
            Not After : Apr  4 01:05:14 2025 GMT
        Subject: CN=9224CD23B8A6D2CB289F012DF6A3606631A8D173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:a2:e6:5e:cd:e9:85:54:24:8b:fc:ee:d9:
                    53:e8:c2:18:d4:4c:41:5c:de:15:ad:5c:81:f2:72:
                    1b:16:cf:e5:00:24:5d:f1:4e:be:d6:ad:fa:f9:f0:
                    e7:79:0f:7b:d5:ab:b9:7e:86:7e:ce:f2:d9:39:e9:
                    77:27:83:c5:13:59:88:59:62:15:80:76:8d:07:73:
                    8e:81:2e:db:7f:0c:6a:2c:d0:3e:1d:56:96:09:90:
                    3d:7f:56:99:6b:2f:16:e3:db:48:ec:54:78:90:01:
                    76:0b:1c:cb:6f:60:70:e7:ce:a4:84:27:ae:ff:d3:
                    d3:6d:d3:a6:24:58:a4:16:4a:c4:64:8b:fc:f4:e6:
                    25:d0:c1:c0:a0:de:50:40:48:09:51:9a:e4:34:f6:
                    1b:6d:e7:4b:c5:bf:dd:33:ed:9e:c3:d9:ca:43:db:
                    37:27:0b:fa:31:56:26:97:67:3c:c0:c6:af:22:e2:
                    f3:31:b6:bf:cb:4a:c7:ee:fe:ca:f4:34:15:8d:46:
                    58:4e:d1:60:47:61:7e:e6:e9:c0:7d:78:2b:e6:bd:
                    ab:3e:06:3e:3b:2f:44:1c:ac:9d:77:54:52:d7:ea:
                    3b:f9:50:51:5d:f5:29:41:ec:82:af:61:ac:56:2b:
                    89:d0:cf:49:70:80:87:42:80:b5:c3:9f:1f:43:52:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:24:CD:23:B8:A6:D2:CB:28:9F:01:2D:F6:A3:60:66:31:A8:D1:73
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:0f:f0:80:a8:d9:ed:8b:03:29:e9:55:08:de:6d:2e:b8:1d:
         f6:e8:98:df:23:32:06:80:d1:68:ca:fa:09:c9:27:7e:66:aa:
         c1:07:b0:3a:a7:e3:0b:46:34:74:25:b7:c3:3b:ad:d9:ef:4b:
         de:c9:1a:61:4d:b6:52:8d:23:c2:05:b8:05:ee:a8:d3:93:f1:
         d3:df:0c:7c:a6:69:3d:43:00:a2:d7:c5:5f:83:86:6a:7d:38:
         64:60:2d:50:ea:d2:5c:e0:3c:48:62:5b:71:a2:a2:0c:62:97:
         16:b1:3c:54:7d:c8:20:dc:3b:ee:c0:ad:a3:5a:6c:7c:72:b8:
         2b:9b:8f:ea:bc:c7:e8:31:e1:8a:50:d7:43:be:62:e1:ed:a1:
         5f:10:0c:50:77:8e:20:d1:cd:60:aa:9c:97:9e:6e:2c:03:15:
         af:9b:1b:20:58:d4:29:5c:fe:d1:c0:cb:35:ee:49:cf:d7:a4:
         38:cd:64:f6:bb:b1:d9:24:80:76:af:ee:3c:2d:55:98:89:84:
         26:47:b7:8b:3d:09:50:4d:d2:ec:f4:be:a8:bc:17:d6:e3:ca:
         6f:d5:30:bd:d2:2d:ac:dc:5c:1f:26:ae:ad:34:c0:b3:73:e7:
         24:c0:e5:dd:53:10:32:e8:46:76:d1:03:33:08:e6:4a:64:98:
         ef:39:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org