Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e302e302f32302d3230203d3e203238313832.roa
File:                     3138392e38392e302e302f32302d3230203d3e203238313832.roa (raw, json)
Hash identifier:          7WOs8rb74m4VqrZc4WpwhDA+8A+1y/ScQNHh9ySeQIA=
Subject key identifier:   D5:39:70:AA:36:B2:64:A6:43:0E:B1:A1:1F:66:6F:CF:33:3F:4E:72
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       316AB49FE8B02ED5E20704F26CAF2219FB5AB224
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e302e302f32302d3230203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:14 +0000
ROA not before:           Fri 05 Apr 2024 01:00:14 +0000
ROA not after:            Fri 04 Apr 2025 01:05:14 +0000
asID:                     28182
IP address blocks:        189.89.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6a:b4:9f:e8:b0:2e:d5:e2:07:04:f2:6c:af:22:19:fb:5a:b2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:14 2024 GMT
            Not After : Apr  4 01:05:14 2025 GMT
        Subject: CN=D53970AA36B264A6430EB1A11F666FCF333F4E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:67:47:9d:4a:9e:0d:60:c9:58:c2:7f:4c:
                    ba:a0:9b:24:41:ce:e4:58:e4:9c:77:fe:98:76:3e:
                    9b:a2:e9:b4:ea:3d:9c:09:cc:e2:59:49:b4:19:f3:
                    17:f7:5e:32:61:e3:34:3a:fa:15:40:c9:8b:a9:f8:
                    8f:14:19:13:b8:1f:7c:66:13:fe:f7:59:ed:e4:bc:
                    5b:24:b0:ef:14:28:32:4c:25:de:a2:f4:cf:ee:34:
                    80:60:c5:53:90:e7:ce:98:91:20:f7:9b:59:b3:23:
                    10:1d:02:eb:52:a6:8e:d4:e1:e1:81:db:46:30:24:
                    38:af:ae:6b:3f:b4:77:6c:68:8d:29:ba:73:b8:1f:
                    8d:86:0b:13:2e:c4:06:36:dc:44:39:fe:ce:92:48:
                    c0:d5:e0:b3:c8:c3:25:15:33:2b:55:22:06:60:6e:
                    8a:a5:4c:a6:ed:1a:41:52:5e:1d:4e:af:10:bc:b5:
                    a8:da:5f:cf:90:10:64:93:ca:b0:ae:52:c0:73:78:
                    08:93:d5:9f:37:74:6c:be:d0:89:20:46:2e:ad:df:
                    a1:b0:2d:84:82:d8:28:08:0f:2a:d2:7c:50:08:10:
                    b5:24:ba:c7:8c:6c:cd:44:81:d6:e8:2e:30:32:27:
                    65:14:4e:6f:c8:88:10:53:fc:55:e2:83:3b:32:3c:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:39:70:AA:36:B2:64:A6:43:0E:B1:A1:1F:66:6F:CF:33:3F:4E:72
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e302e302f32302d3230203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:f1:42:cb:ce:c8:a0:84:50:b1:e3:d2:a5:fc:81:4d:f0:ff:
         0f:57:4b:ef:67:ab:e7:e1:c9:a9:37:70:67:cf:54:6b:45:30:
         06:da:dd:85:a8:56:73:cb:fd:9b:15:d2:f3:51:14:7d:b8:22:
         2b:46:86:85:14:a1:3d:6c:83:31:6e:e6:29:5d:d3:58:fd:6f:
         ae:79:87:40:e8:16:2d:3a:03:01:61:cb:50:b5:a4:4c:d9:5c:
         ca:27:72:23:2f:64:cc:6d:6a:d8:b3:00:15:36:c1:fb:8b:d5:
         12:0b:db:9f:34:34:a2:35:96:36:5c:12:5b:27:5a:82:68:b4:
         09:f1:a5:20:bc:49:b6:01:6b:28:98:6c:41:96:8e:42:e3:b3:
         76:d1:dc:2e:f1:ce:e9:ba:e8:76:5c:5b:25:07:d5:6f:11:ad:
         e3:41:84:27:2a:e8:f4:0e:13:b5:e8:a1:75:7a:e3:20:4e:0b:
         9c:f9:31:dd:91:a5:70:e0:03:f1:2b:ad:1a:ba:2e:39:71:a5:
         97:2f:c2:81:81:c0:22:79:53:78:0c:53:d7:92:cb:64:ad:ab:
         52:41:0f:4d:7c:c1:a3:57:63:ad:9b:46:e2:8e:dd:3c:15:8b:
         63:ee:7e:3a:32:48:22:58:dc:b7:1e:06:94:a9:d3:0c:d1:0f:
         da:98:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org