Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          mEJhdBBkzYLzSAPZZ8Ohr1P/EzjTd3sjd3mo2Q6I4Fg=
Subject key identifier:   F4:D0:86:78:01:2F:53:EE:DE:4C:BD:36:EA:CA:86:31:32:D6:AE:27
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       17166124732D65B416E0E7EF1FE3BD3904A7686A
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:11 +0000
ROA not before:           Fri 05 Apr 2024 01:00:11 +0000
ROA not after:            Fri 04 Apr 2025 01:05:11 +0000
asID:                     28182
IP address blocks:        170.231.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:61:24:73:2d:65:b4:16:e0:e7:ef:1f:e3:bd:39:04:a7:68:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:11 2024 GMT
            Not After : Apr  4 01:05:11 2025 GMT
        Subject: CN=F4D08678012F53EEDE4CBD36EACA863132D6AE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:37:fa:69:25:91:11:8f:53:4e:dd:27:38:
                    b3:18:69:5b:b5:9b:47:3c:62:ad:8b:e7:38:f6:5f:
                    fb:73:e4:70:2b:82:15:58:e7:86:54:8b:90:9b:31:
                    98:ec:ca:8a:25:d6:5f:a5:6e:88:c5:19:0c:03:ec:
                    0f:65:65:e8:af:04:83:51:17:99:d8:7d:84:b0:58:
                    71:09:3c:5a:e5:8a:f7:f5:85:e7:9d:c2:16:4a:52:
                    cd:fc:6b:95:33:a1:b6:6b:12:f1:26:25:a9:24:14:
                    bd:25:bd:74:f0:56:eb:88:ea:58:8b:6d:2b:81:89:
                    00:d4:7a:ca:92:ca:ad:a5:b6:a3:2e:83:73:a9:57:
                    0d:5e:0d:11:34:37:e1:93:7e:39:8b:25:d7:45:fe:
                    42:9d:27:74:07:62:e2:3a:2c:44:94:29:fd:60:53:
                    96:6c:39:4d:0c:ed:58:7d:04:32:1d:4d:fc:d2:a3:
                    c7:a4:c8:03:b4:b4:ed:52:27:ea:59:b4:28:61:ec:
                    be:bc:7e:25:de:2c:71:e8:ab:00:73:21:ac:12:98:
                    e1:ad:2b:44:9b:b0:6f:4e:56:c1:8a:22:04:18:e8:
                    c0:aa:e2:cd:ec:0a:8e:20:df:02:0c:44:cb:66:b8:
                    fe:d8:11:12:44:d0:86:b1:92:92:47:dc:4a:7c:72:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D0:86:78:01:2F:53:EE:DE:4C:BD:36:EA:CA:86:31:32:D6:AE:27
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:44:70:af:c9:80:20:8c:33:18:6a:7e:fa:42:d7:64:a1:df:
         75:09:a2:69:c5:cf:39:c4:0f:f8:f2:5b:ca:f2:d4:f8:14:19:
         34:5f:54:34:ad:16:a4:3a:00:00:d5:57:9c:84:a0:59:d3:9f:
         6b:52:ce:62:b0:8d:23:44:dc:22:fd:b9:fb:33:82:e7:93:69:
         75:f6:05:1a:44:2f:0b:6d:c5:64:75:8b:ac:b0:df:ef:af:fe:
         3d:df:ef:9b:c9:56:a4:29:a2:e3:21:3e:ad:e2:c0:79:f8:85:
         75:bb:a2:04:d9:5c:a1:b7:89:96:21:94:50:d6:6e:37:d4:03:
         35:78:e5:7b:5b:0d:04:23:36:2d:ea:0f:58:f7:7b:e6:07:a5:
         b2:c7:f4:66:3a:be:b1:90:13:8f:37:09:d7:80:81:8d:be:0e:
         96:50:b8:79:29:2e:62:bd:9f:1e:92:79:60:ac:4e:e6:18:68:
         b0:ac:f9:df:59:4f:a0:59:b6:65:0c:f2:03:5d:99:98:1d:41:
         42:95:48:0a:ff:c8:ef:bf:fe:ee:32:27:a3:87:9b:d1:a5:20:
         bd:f1:e6:2a:a8:4b:64:20:1c:38:d4:a5:cb:01:59:d5:55:4d:
         06:d6:d6:df:12:65:b4:bc:ff:3d:a6:a5:11:5f:a6:b6:5a:3f:
         ee:29:99:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org