Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa
File:                     3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          4FjwxlbIQyIlaOgsMP9lQZwjcpu92L4/iL4O2P0KrrI=
Subject key identifier:   D8:F6:E9:4D:B6:C7:FC:66:96:4C:D7:E9:23:15:3E:46:63:82:15:FD
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       2A67D022993FE3C4B65CB613713785C0130155C7
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:12 +0000
ROA not before:           Fri 05 Apr 2024 01:00:12 +0000
ROA not after:            Fri 04 Apr 2025 01:05:12 +0000
asID:                     28182
IP address blocks:        170.231.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:67:d0:22:99:3f:e3:c4:b6:5c:b6:13:71:37:85:c0:13:01:55:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:12 2024 GMT
            Not After : Apr  4 01:05:12 2025 GMT
        Subject: CN=D8F6E94DB6C7FC66964CD7E923153E46638215FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:d3:81:44:82:f1:78:5c:89:88:f4:eb:80:
                    ab:4b:31:e2:eb:f8:47:86:58:58:d1:2b:e0:aa:a9:
                    93:9a:91:ad:b0:d0:69:b5:0f:28:3c:c0:f0:c2:00:
                    4a:c3:1e:43:4c:37:ca:c1:10:1c:26:31:ee:41:16:
                    dd:de:5c:a4:cf:14:0d:a1:e9:c4:bd:75:0e:71:d0:
                    d6:b1:ea:e0:b6:95:fe:66:ce:9c:73:b0:33:77:9f:
                    b8:94:be:66:84:df:c6:04:ab:92:17:53:cb:86:49:
                    c0:af:ec:29:15:93:03:15:7e:09:d6:77:2f:71:98:
                    35:be:f3:4b:54:5e:09:db:4a:ce:97:8e:04:96:70:
                    a5:6c:9f:80:e6:f1:4b:4d:97:d7:7f:7e:95:b2:f8:
                    79:1e:fd:79:e0:96:83:fe:57:0d:2a:9a:b5:22:28:
                    a4:ae:bd:63:46:a5:ce:fd:79:2d:04:74:89:6b:af:
                    14:36:1b:e2:08:ea:2c:cc:63:9f:5c:89:9e:ba:76:
                    d9:7c:90:90:e6:19:04:9f:b3:7d:4f:dd:52:8e:06:
                    90:8f:8a:e1:7f:04:a1:c6:ad:8e:a2:78:38:e8:e5:
                    7f:0e:3b:ef:ef:36:43:b5:21:bf:69:7f:8d:0f:79:
                    ae:b1:91:53:fe:e4:a7:f0:85:a3:ad:97:02:8c:51:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:E9:4D:B6:C7:FC:66:96:4C:D7:E9:23:15:3E:46:63:82:15:FD
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133302e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:64:5f:24:b4:63:de:f6:22:e0:bb:f0:57:9b:dd:98:2d:60:
         aa:8b:0b:ae:06:59:b0:7b:b5:d7:ee:22:df:f4:53:1d:74:ee:
         cf:54:73:16:94:9d:f5:cb:fd:9b:e7:f6:c5:50:d9:d6:c2:fd:
         f5:28:34:fb:aa:da:68:8d:3c:3e:b6:0e:59:24:94:4d:01:64:
         6b:a6:08:e9:38:db:83:f9:20:67:5c:f6:bd:26:18:78:b5:df:
         27:65:fb:a3:a6:76:d8:ed:6d:b1:19:2b:3a:15:60:0a:b4:83:
         a0:f9:69:4e:ef:5e:ba:6e:31:0f:df:1c:8a:33:dd:db:b3:07:
         b4:1f:06:e4:d5:92:fb:7f:61:94:ae:63:92:e2:a4:71:d6:52:
         11:f8:b8:31:65:64:cf:97:7b:5a:c4:72:a9:49:0c:ae:d0:b4:
         78:5b:6f:b4:9e:0f:fe:ec:c0:3d:83:74:16:bc:84:7f:61:dd:
         cd:e9:6b:17:1d:07:8a:c7:37:b0:21:47:7c:f1:2b:43:c0:46:
         de:c5:e0:6d:d0:1c:42:34:e8:af:9e:52:2e:9d:d6:94:18:85:
         15:17:f9:29:54:d8:ee:a1:3b:d6:60:c0:3e:f4:e4:71:75:52:
         ff:b1:a1:eb:4c:81:48:2b:69:c7:23:a7:95:96:65:42:2f:39:
         d1:75:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org