Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e312e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e312e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          aVtlwDZuHvtVKIZ8Xm1VmgeimBNl7P9UWw4gss/aUdk=
Subject key identifier:   FE:2A:38:AE:1E:C6:56:10:C6:D4:61:26:C4:26:7D:A0:40:40:1C:61
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       58CAA5DB8651580C4B60180638F1EC3865E910C6
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e312e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:11 +0000
ROA not before:           Fri 05 Apr 2024 01:00:11 +0000
ROA not after:            Fri 04 Apr 2025 01:05:11 +0000
asID:                     28182
IP address blocks:        189.89.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ca:a5:db:86:51:58:0c:4b:60:18:06:38:f1:ec:38:65:e9:10:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:11 2024 GMT
            Not After : Apr  4 01:05:11 2025 GMT
        Subject: CN=FE2A38AE1EC65610C6D46126C4267DA040401C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:8d:61:94:3e:1b:91:1c:c7:ff:11:51:a2:
                    0d:aa:52:62:2a:5c:4d:f0:44:aa:8e:d3:6b:55:91:
                    0e:9f:fb:63:be:27:c9:ca:ee:ea:e4:77:88:66:22:
                    69:23:00:6f:20:c7:59:6b:de:3c:fc:63:1e:0e:be:
                    31:e6:8a:08:95:6b:36:5c:27:db:df:08:95:af:2f:
                    56:95:39:48:91:8b:96:fc:98:d9:09:55:3a:e6:1e:
                    13:db:e4:39:08:30:cc:5c:ed:da:66:8f:ca:cf:6d:
                    dc:22:4f:71:30:6b:da:88:3d:0f:74:02:c0:0c:ad:
                    2b:6a:2c:d4:3c:67:8a:dc:c7:1c:d0:ec:06:22:0e:
                    12:46:7c:3e:c3:e4:f1:da:a7:82:04:33:e0:9f:bb:
                    e0:77:a8:30:b9:9e:a4:4c:d0:43:1f:22:5e:29:8c:
                    1c:24:ed:53:9c:c9:61:13:b9:44:53:26:ce:28:81:
                    1c:24:e0:bf:dd:4b:3d:89:7a:49:09:10:53:37:d9:
                    ac:72:b3:04:d7:42:aa:2c:68:86:77:16:e0:bd:b9:
                    d5:16:dd:c4:a8:bb:b8:e8:28:30:20:2b:75:92:c2:
                    74:14:71:ad:9d:e5:db:cc:48:86:e0:29:2f:65:c8:
                    96:cf:f4:ec:5d:b2:fc:20:60:c6:f9:35:d1:ca:f7:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:38:AE:1E:C6:56:10:C6:D4:61:26:C4:26:7D:A0:40:40:1C:61
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e312e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c6:19:61:e1:c9:44:05:35:f9:0a:8f:f3:74:59:c3:c8:8f:
         bb:0b:df:17:16:f5:e0:7c:5f:a0:d6:b0:f1:79:02:8f:c3:49:
         53:89:d7:c9:66:b6:5c:37:cb:3f:2e:07:d9:1e:f8:37:fa:14:
         a3:7f:cc:68:e4:04:da:80:a3:68:0d:c3:a5:89:0f:94:3c:48:
         00:83:25:1d:dc:59:60:4c:58:93:fa:4e:7c:b5:80:de:27:8f:
         00:9f:2f:8e:48:77:8d:6e:1b:77:e7:57:81:77:06:91:ff:f8:
         0c:27:95:ae:3c:96:59:93:66:e7:7a:b2:30:77:4a:e8:e9:d5:
         22:f2:87:84:a4:cf:39:e8:fe:40:59:06:8e:82:d3:ab:96:91:
         94:4d:0a:a4:a3:4a:e9:f7:a0:0c:44:60:f5:c0:71:94:6e:a9:
         c3:23:19:c4:ad:bd:e3:13:4f:fb:ff:63:69:42:1d:3d:39:41:
         e9:1a:ec:ba:73:89:ec:fb:e7:5e:90:65:2c:f6:4a:d8:47:ec:
         48:7c:cb:38:05:97:88:3b:1c:5f:6b:d7:25:83:dd:a3:1f:af:
         ab:cf:28:fb:c9:2f:da:1c:d5:d7:0e:c0:9f:62:c7:44:7c:8b:
         df:3f:d9:66:c5:cf:b0:3e:7e:08:1c:8b:2c:5d:2e:f5:9c:c5:
         cf:3c:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org