Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31302e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31302e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          cN/3G1wWuH3aGNI0We80+N7iKujtwAVe8kZsPIW/8dY=
Subject key identifier:   66:52:55:E1:53:0B:C8:88:FA:B1:BA:4E:E2:A3:66:65:3E:56:15:A0
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       33FAE625A976F027F5050E33A4370919DDACC29E
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31302e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:13 +0000
ROA not before:           Fri 05 Apr 2024 01:00:13 +0000
ROA not after:            Fri 04 Apr 2025 01:05:13 +0000
asID:                     28182
IP address blocks:        189.89.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:e6:25:a9:76:f0:27:f5:05:0e:33:a4:37:09:19:dd:ac:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:13 2024 GMT
            Not After : Apr  4 01:05:13 2025 GMT
        Subject: CN=665255E1530BC888FAB1BA4EE2A366653E5615A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:8e:e5:36:2c:1c:5e:9d:bc:43:41:ba:d5:
                    c3:26:ac:7a:ad:81:4d:0e:5d:0b:f5:98:58:48:44:
                    58:b8:86:97:2b:29:65:78:db:34:01:ca:49:cf:02:
                    21:2f:bc:bb:fb:49:f1:a4:80:67:e1:8a:e8:6a:d6:
                    99:45:d1:d3:21:9c:36:8d:21:8d:72:4c:51:db:5c:
                    38:82:bf:20:4d:2f:ff:a7:32:58:7c:e4:80:55:3d:
                    6c:bf:67:b1:dd:c3:cd:e7:10:12:0c:72:07:23:94:
                    91:b9:45:39:4c:46:c6:f4:c3:92:db:ed:3c:1e:d3:
                    0f:f0:3c:98:e0:3d:ac:d4:c3:0d:20:9b:77:bc:0c:
                    b0:f2:c8:73:5a:51:aa:c9:bb:4f:a9:5f:af:90:81:
                    22:d9:a9:c6:ba:eb:a4:58:ca:17:b1:e2:da:c8:54:
                    52:cf:35:8b:79:40:28:e6:9c:9a:10:dd:49:a4:fc:
                    aa:18:91:78:31:6e:74:6e:42:fe:20:2a:6b:b8:80:
                    64:32:2f:1a:49:ef:76:92:98:20:32:7e:1a:ab:36:
                    20:3d:8d:2d:08:01:bb:6d:85:b0:03:ad:ad:2f:86:
                    e7:c5:cf:43:f4:d1:50:65:e2:17:a8:97:21:1f:2b:
                    8e:3a:9a:05:ee:1d:7c:d5:3a:0e:96:32:0a:b9:f6:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:55:E1:53:0B:C8:88:FA:B1:BA:4E:E2:A3:66:65:3E:56:15:A0
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31302e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b6:49:00:df:33:78:b5:11:ee:62:29:2f:56:99:f9:68:76:
         fd:fa:39:97:d8:a5:1c:8c:a8:de:68:4d:d9:52:14:9f:dd:58:
         b8:a4:04:40:32:8a:6f:50:9f:d6:85:12:13:41:39:8f:02:06:
         85:d8:1e:35:76:70:30:b1:88:13:3f:7a:64:b6:ba:b2:e1:ba:
         94:a9:38:77:17:08:1d:53:4c:75:90:93:04:39:f9:3a:1f:6c:
         95:d0:62:a8:bb:48:ab:46:70:e2:44:3b:ae:23:23:8c:1f:89:
         ef:47:26:d0:9b:23:f8:f0:93:83:5c:a0:c6:04:6e:0b:8d:c4:
         a7:94:4e:7e:00:c6:c7:64:f9:d3:6f:63:df:37:78:f9:01:ef:
         16:70:99:1c:39:da:1a:7d:2a:e6:31:dc:3b:d5:6d:85:96:2a:
         fd:a7:9e:86:4d:0e:4d:6a:40:f0:42:66:6a:2a:23:93:16:0a:
         f2:85:67:5f:71:67:81:04:7d:b6:ba:c4:dc:4f:62:fd:12:de:
         e4:d1:a1:27:18:0b:66:4c:20:33:11:52:ff:24:62:d5:a7:a8:
         6c:d7:76:4d:23:33:b7:7a:c4:58:79:0d:3e:38:50:5d:57:3b:
         93:72:93:81:fa:98:ab:7c:d0:de:5b:d0:55:47:6d:82:bb:ff:
         aa:96:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org