Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133302e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133302e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          WuoM+UaM77YepRa4Ci+7tpq5sgMO4JJXkmW5fOQ9KLI=
Subject key identifier:   10:55:53:C2:32:17:18:C7:B0:EC:F7:9B:22:E1:59:15:1E:B8:38:6A
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       4CC985FBE97A86231DDBD8FDF65E2F8623B22988
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133302e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:16 +0000
ROA not before:           Fri 05 Apr 2024 01:00:16 +0000
ROA not after:            Fri 04 Apr 2025 01:05:16 +0000
asID:                     28182
IP address blocks:        170.231.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c9:85:fb:e9:7a:86:23:1d:db:d8:fd:f6:5e:2f:86:23:b2:29:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:16 2024 GMT
            Not After : Apr  4 01:05:16 2025 GMT
        Subject: CN=105553C2321718C7B0ECF79B22E159151EB8386A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:b5:a9:59:99:70:c7:1e:42:80:05:e2:1a:
                    f5:4f:30:6e:7c:a8:e7:f7:73:b2:04:72:16:e9:6f:
                    bd:b0:90:37:a6:e1:16:c9:24:4f:a9:5d:93:e8:8e:
                    81:9c:4d:25:94:9f:1f:d9:22:f9:ed:fc:31:67:50:
                    79:cf:dc:cb:c4:42:3a:ff:29:ad:f9:32:c2:2e:44:
                    f7:f7:18:71:31:34:2a:07:d2:d2:75:7b:77:33:f5:
                    fa:e9:8e:4d:5a:4e:0a:6d:a9:d1:b2:ae:57:e2:95:
                    0f:c3:8e:62:8a:be:96:9f:c6:d7:98:8f:7f:72:ad:
                    c2:66:c6:68:98:93:5c:3d:02:6f:eb:7e:fa:bb:fb:
                    25:a6:dd:29:c0:de:23:83:b3:62:1d:10:93:67:d0:
                    51:1e:e4:c2:49:63:5b:ed:29:5b:26:6a:5d:06:40:
                    c9:b3:67:48:ac:dd:db:34:6a:8a:7b:c1:68:d2:35:
                    82:9e:40:c0:1a:2d:16:a5:2d:9b:71:25:d1:93:0f:
                    e8:42:03:e7:99:42:40:99:32:d4:61:2d:c0:8d:69:
                    fb:22:7b:ae:43:b2:c0:9f:dd:14:b8:f2:a6:b9:34:
                    16:7c:a5:33:25:b9:28:bf:70:d5:b1:19:08:88:77:
                    62:0a:3f:af:6b:d7:9c:22:33:bc:6d:76:04:27:60:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:55:53:C2:32:17:18:C7:B0:EC:F7:9B:22:E1:59:15:1E:B8:38:6A
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133302e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:24:fa:66:fe:8c:2e:ff:e5:f3:a2:2c:fd:73:84:3f:d7:13:
         ef:ff:e8:69:21:5e:73:b7:07:ab:81:1b:60:32:b2:98:3a:c3:
         97:7b:87:fa:ef:19:58:da:8e:7f:34:b6:05:92:c4:46:88:57:
         7f:ff:56:e2:9f:af:02:64:63:eb:0a:a3:de:00:32:69:af:01:
         53:e3:d7:44:1a:43:c8:23:f8:ae:07:8e:11:41:16:7f:f7:e4:
         2e:ea:fb:cb:9a:f1:c8:e3:e3:9b:65:3f:70:ba:d0:63:6e:62:
         2f:5c:dc:96:94:f5:c6:6e:19:ef:d5:a8:07:26:c1:d9:ce:e3:
         23:2c:63:72:40:ec:91:1d:12:20:90:29:b3:5d:e9:3d:4d:2c:
         77:f6:77:58:cd:09:61:45:e2:85:1a:fa:8f:03:23:36:6e:9c:
         3f:c0:ad:9c:2c:03:d9:2a:fc:65:e9:6e:e9:b8:3f:ef:78:4c:
         81:ab:3f:f3:2e:a6:0d:eb:e3:e2:e7:f2:8b:81:3e:d4:18:91:
         d6:47:32:1f:c5:ac:d3:27:b2:2c:90:e7:d6:10:bd:84:c5:29:
         b5:62:2e:da:73:49:01:5b:fb:e3:ac:37:d0:e6:e8:d8:03:e4:
         d0:8c:d1:bc:e9:a6:7d:dc:68:f9:fc:75:28:ac:dc:ba:79:7f:
         cc:17:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org