Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          owPPMnA7xuJnVekW0TRbqcj6kci8qQqHBk77wYdvw6A=
Subject key identifier:   9A:41:BC:F2:95:4A:81:F3:A9:4D:B8:2F:9D:38:60:BC:9D:C1:F1:B3
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       5054118F94AADF453E918BC0C2BB29A32EB338CB
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:16 +0000
ROA not before:           Fri 05 Apr 2024 01:00:16 +0000
ROA not after:            Fri 04 Apr 2025 01:05:16 +0000
asID:                     28182
IP address blocks:        170.231.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:11:8f:94:aa:df:45:3e:91:8b:c0:c2:bb:29:a3:2e:b3:38:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:16 2024 GMT
            Not After : Apr  4 01:05:16 2025 GMT
        Subject: CN=9A41BCF2954A81F3A94DB82F9D3860BC9DC1F1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:51:1a:6d:e8:d9:de:cb:9b:83:f3:c2:15:
                    33:a3:45:83:7f:44:f0:fc:be:8c:2c:83:5e:ee:5d:
                    4c:b4:c9:be:01:74:21:09:e0:ed:63:ef:ee:55:26:
                    92:bc:03:f8:f0:e5:99:f6:77:93:78:59:cf:7f:56:
                    3c:05:22:43:d2:53:62:49:0d:8e:39:81:53:c2:50:
                    a3:28:4d:5e:26:31:8e:3f:dc:99:3d:ea:2e:eb:57:
                    9d:50:40:98:99:94:c4:7a:f7:fc:28:f2:b3:cc:a4:
                    28:11:df:d3:fb:77:ae:97:ad:49:25:8a:22:fe:bd:
                    c7:a3:0c:fb:c8:6e:d8:37:e6:92:db:1c:82:3d:c6:
                    01:b1:81:a3:ca:fd:32:28:0a:bd:67:8c:f9:65:d3:
                    73:6f:5e:ad:be:c4:6a:b0:59:90:62:19:61:5d:71:
                    dd:13:3d:73:06:a6:4a:38:9a:81:b6:91:90:53:79:
                    4c:5d:81:37:37:9b:70:7d:66:06:30:db:42:7f:f7:
                    03:8e:68:be:59:11:93:33:28:ea:5b:c7:64:e4:1c:
                    5a:3e:75:81:5e:95:e9:e3:ce:71:0e:bb:fe:87:af:
                    77:31:55:6c:7a:dd:32:5e:5a:78:a4:2d:96:54:31:
                    f3:2b:eb:53:42:c1:c8:a8:b1:2c:93:51:eb:75:e3:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:41:BC:F2:95:4A:81:F3:A9:4D:B8:2F:9D:38:60:BC:9D:C1:F1:B3
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133352e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:98:09:90:d5:2a:1e:5a:8e:c5:67:46:d9:2f:a0:33:0d:9c:
         f0:a2:50:54:e9:b0:61:51:93:eb:74:21:0f:9f:73:21:44:88:
         0a:20:b4:0c:eb:79:fd:03:8f:91:db:19:fe:98:cb:0f:98:7d:
         bd:1c:f0:55:93:87:e4:f8:cf:5a:d5:b7:43:86:3b:21:66:9e:
         3f:26:64:83:ac:83:c4:b5:06:95:a2:08:6c:a5:21:4a:29:9b:
         7d:49:d4:df:f8:25:04:ac:7a:09:f2:cd:b9:b6:f0:8f:9c:ea:
         5b:77:d9:56:1e:c4:58:f8:e1:22:5b:68:8f:8d:92:45:57:14:
         19:9e:04:7b:8e:b0:39:f2:10:92:33:1f:03:1e:59:00:93:a0:
         4e:49:d1:53:b5:96:91:72:50:93:a9:6f:b7:17:55:63:89:7e:
         34:cb:7d:b9:e0:de:94:a4:a2:48:ff:61:07:05:1b:85:10:b0:
         ba:66:8b:94:e5:68:8b:dd:ee:f9:f8:2f:d6:36:1e:7e:1b:9c:
         9c:9e:cf:28:62:86:71:15:6a:2e:b5:84:12:77:c6:ee:72:13:
         e4:b3:42:40:74:2a:0a:d6:b6:df:57:c0:2a:d4:f3:9c:4b:11:
         e6:46:18:02:95:c5:20:84:33:6f:5f:27:be:b5:59:fb:d7:96:
         da:1f:2e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org