Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          Z89fb5J+fnhLxL6V58y2y8yQxbQ/t4PiADFIHz3T5Uo=
Subject key identifier:   A1:F8:26:12:22:5F:DA:56:0D:04:5A:A4:F7:55:28:E7:60:BF:17:31
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       6F9B6A79413C9A0CEED4F711A9DC02C69FB3CF06
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:15 +0000
ROA not before:           Fri 05 Apr 2024 01:00:15 +0000
ROA not after:            Fri 04 Apr 2025 01:05:15 +0000
asID:                     28182
IP address blocks:        170.231.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9b:6a:79:41:3c:9a:0c:ee:d4:f7:11:a9:dc:02:c6:9f:b3:cf:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:15 2024 GMT
            Not After : Apr  4 01:05:15 2025 GMT
        Subject: CN=A1F82612225FDA560D045AA4F75528E760BF1731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:ca:26:7b:bd:60:d7:eb:53:b7:6a:2e:73:
                    25:aa:e7:a3:fb:d9:70:cb:69:1d:ba:9e:90:42:ac:
                    81:5b:17:e5:06:ac:6a:33:0c:53:54:85:28:bb:02:
                    8d:e9:cd:bb:5c:d5:b1:a4:31:b6:dd:ef:3f:d6:b6:
                    c2:d1:5b:f9:ea:26:e9:3e:43:12:09:19:bd:eb:c7:
                    54:4c:9a:23:9c:23:67:25:07:eb:81:31:c2:4d:c9:
                    1f:da:13:48:69:09:63:4f:de:78:5b:d2:c6:82:3e:
                    16:98:55:e4:4d:3f:b3:7b:60:34:db:ce:ea:20:6e:
                    b0:ff:00:25:87:fc:b4:3c:33:f4:98:98:6a:e0:1d:
                    ab:75:99:3e:c8:9c:36:9b:37:b0:f0:08:da:c5:e5:
                    78:80:5c:0e:28:54:af:e7:cc:8c:1b:08:42:d5:8e:
                    a7:6f:3f:7e:bd:a1:ae:c5:88:38:df:d0:17:3e:b0:
                    5d:e7:77:bf:6b:95:84:3c:18:99:ed:ec:f0:c6:ca:
                    90:f8:59:0c:9a:ef:82:73:00:d1:94:ba:48:c2:dc:
                    fc:4a:c2:4d:3c:54:47:4f:ad:3d:88:5c:41:9a:6a:
                    f3:78:c7:d2:0c:90:60:b0:64:e9:17:e1:17:2e:03:
                    32:1b:76:a4:7b:a2:14:0e:b2:e9:5a:11:00:d3:27:
                    08:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:26:12:22:5F:DA:56:0D:04:5A:A4:F7:55:28:E7:60:BF:17:31
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3132392e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:92:42:51:c9:c2:88:ef:11:e9:93:f3:54:19:09:55:fb:17:
         19:08:b4:d7:3c:ff:c9:6b:fb:ff:2a:d9:97:67:7a:89:6e:f5:
         bf:b1:18:a3:93:e6:45:6f:17:81:fb:43:61:98:a2:41:dc:87:
         f1:e0:19:96:35:04:3a:1d:af:1a:7a:a6:71:b3:3b:e4:c9:6a:
         f7:50:8c:2c:b1:39:a8:b5:0c:13:b8:55:b2:37:10:e7:db:33:
         3e:85:b0:c1:1f:e9:65:b8:e7:81:72:5d:83:53:eb:99:05:3d:
         6f:62:d2:8f:a9:4e:c2:8d:8a:f2:d7:f3:e3:bb:4c:90:fe:08:
         21:4e:62:76:a7:59:22:75:8e:e1:5f:b9:da:40:7d:83:6b:15:
         d1:7e:92:f6:23:d8:f6:a6:fe:b5:ca:61:16:a5:bd:7a:13:93:
         ce:af:39:9f:fb:48:17:c7:5f:6f:3a:00:27:b2:7a:93:b8:9a:
         76:1a:f4:07:d2:a1:07:b8:e0:db:a7:40:64:a0:9f:c4:c3:52:
         c7:6e:37:87:00:d2:73:52:29:ee:83:03:83:8b:71:01:53:58:
         12:37:9e:25:5c:37:48:7b:1a:ca:2f:84:1a:f1:e6:0a:f3:11:
         bc:64:c0:e1:0d:92:50:fb:e7:7a:02:a6:dc:39:b9:2a:86:1d:
         2c:7d:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org