Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          VlvllCvIlNZ2FWJv6Q4JAt167if9bukd+2LGsqtsNgQ=
Subject key identifier:   95:90:57:F1:DA:56:C8:8F:AD:D7:39:C3:8D:75:A0:86:86:96:E7:F4
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       3A7B9D817CA777E6DEB142E01502C4CF04200F0C
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:15 +0000
ROA not before:           Fri 05 Apr 2024 01:00:15 +0000
ROA not after:            Fri 04 Apr 2025 01:05:15 +0000
asID:                     28182
IP address blocks:        170.231.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:9d:81:7c:a7:77:e6:de:b1:42:e0:15:02:c4:cf:04:20:0f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:15 2024 GMT
            Not After : Apr  4 01:05:15 2025 GMT
        Subject: CN=959057F1DA56C88FADD739C38D75A0868696E7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:0c:9d:a2:b1:41:02:c9:65:ef:0e:44:54:
                    33:67:52:94:da:e0:86:34:4d:7e:c7:6b:b2:1e:9b:
                    1c:c7:08:3e:f9:92:e4:98:c5:21:cc:1c:ce:21:e2:
                    0e:17:fb:dd:7b:a6:47:0b:b9:7c:dd:a5:8f:84:b9:
                    8f:7a:e8:be:57:97:1b:00:73:06:24:f4:15:c1:06:
                    de:e2:a2:c8:a3:7c:66:76:71:94:38:de:a9:3c:b3:
                    2f:9e:cd:5b:44:10:2d:a5:18:f0:fd:57:4c:a9:e8:
                    2a:4f:92:9d:c5:4a:71:dd:82:ee:ed:ff:8f:77:23:
                    8b:43:9f:7b:ef:4f:af:00:b0:ed:b2:f7:db:75:3f:
                    c5:19:c8:40:8f:fd:7e:ca:32:a5:d5:30:71:ed:d8:
                    1a:74:d0:02:76:bc:29:16:14:f7:0c:1b:cc:84:25:
                    0b:0a:4a:3a:bc:b8:ef:8e:2f:6e:d7:12:0f:e5:bf:
                    5f:b1:6c:49:c1:ab:0d:69:50:59:57:e7:84:82:28:
                    2d:bd:4f:ec:59:3d:0b:9f:9c:bd:49:25:a4:a5:4b:
                    7f:6c:f8:92:d4:31:11:96:df:bf:eb:c0:64:11:13:
                    87:56:c3:54:20:82:9b:f6:c3:91:b4:21:c4:48:2b:
                    f9:a1:ec:ea:0f:8c:71:75:2f:ed:f0:ce:bc:76:b1:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:90:57:F1:DA:56:C8:8F:AD:D7:39:C3:8D:75:A0:86:86:96:E7:F4
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132382e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:21:81:9a:7f:1c:ae:f2:d7:92:7e:8f:18:97:2c:bd:12:b2:
         67:92:d0:76:5e:31:16:ed:d2:f4:a2:0e:8d:0f:a8:42:89:82:
         74:49:e9:ba:d0:fc:1b:d5:68:57:b3:f8:37:8a:d9:21:2a:71:
         73:0f:6a:6e:ae:ad:59:4b:bf:43:cc:28:40:27:65:83:57:5a:
         b4:e7:e1:57:f5:4b:7e:db:2e:7f:1c:15:10:34:0a:4b:db:03:
         c4:b0:41:d6:8f:dc:e5:35:06:0c:33:79:b7:99:cf:88:38:4c:
         81:d2:88:3a:c8:a6:1c:58:a8:95:13:39:04:85:05:4d:db:e4:
         58:1f:26:5a:ee:bc:d8:27:7e:63:c1:bd:27:3e:fa:98:b3:5e:
         37:a3:d9:2c:90:65:0e:ba:97:8d:46:ce:9f:f6:39:10:e1:82:
         7b:00:c2:20:bf:78:8e:00:ea:02:05:4b:f0:d9:8d:f8:58:70:
         10:db:8d:d0:f4:dc:b1:56:1b:6e:e8:72:a9:61:54:fc:aa:4e:
         8b:28:13:80:85:56:a2:da:ea:c7:d8:f7:52:52:aa:d3:e3:c0:
         9e:62:24:87:d5:67:75:1e:65:30:e9:27:8b:f4:b4:17:db:cf:
         22:89:85:22:6d:cb:18:8a:3d:10:cd:c1:d6:a3:b3:06:08:95:
         d6:22:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org