Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e31322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          TEHPiNPY/rbYYxwHcLet4GU4IhjAFjFKtA2yE7kxqUY=
Subject key identifier:   F6:BC:DE:E5:5F:EE:30:C3:DD:25:38:29:16:3C:7F:46:72:0C:74:25
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       1A2B789313C74D56D3F81AC872B4DFF1437C3F08
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31322e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:15 +0000
ROA not before:           Fri 05 Apr 2024 01:00:15 +0000
ROA not after:            Fri 04 Apr 2025 01:05:15 +0000
asID:                     28182
IP address blocks:        189.89.12.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:78:93:13:c7:4d:56:d3:f8:1a:c8:72:b4:df:f1:43:7c:3f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:15 2024 GMT
            Not After : Apr  4 01:05:15 2025 GMT
        Subject: CN=F6BCDEE55FEE30C3DD253829163C7F46720C7425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:51:00:33:a7:94:6a:5e:81:68:9c:36:81:
                    f2:f9:97:b2:a8:a3:f2:8d:46:be:53:8e:ec:47:f0:
                    48:15:13:1f:23:ba:45:10:2c:d9:b2:d4:2c:46:4e:
                    59:c5:8c:95:06:c6:56:ca:3e:10:25:ae:c0:e3:84:
                    20:f6:e3:9e:5c:ac:0a:6d:09:0d:39:7f:68:42:49:
                    09:5b:d0:f2:c6:f4:93:f3:86:d6:a2:1f:d8:9b:80:
                    63:db:ea:b2:b2:d2:1f:78:ed:df:ba:10:78:86:a0:
                    1f:79:30:e0:a3:3b:6f:22:fe:89:47:c8:8e:df:8b:
                    85:c4:ac:f1:c7:6f:70:91:d3:a5:5e:a7:58:86:50:
                    55:92:a8:fb:23:2f:cf:f5:b7:0f:c5:9d:a9:a3:0a:
                    07:c4:5a:6c:63:29:3c:6a:4e:df:0b:9e:47:e7:59:
                    88:ef:18:6b:98:1e:fd:51:d3:55:4c:df:89:50:19:
                    5b:9a:b5:b3:f0:b1:6e:c4:d2:20:fc:7c:6d:54:cc:
                    77:84:09:78:3e:cf:c9:42:2d:0e:1f:4e:dc:a5:4d:
                    85:b7:76:f0:2f:c7:16:36:74:6f:f1:71:46:d5:6e:
                    35:26:b8:92:22:b5:b7:e4:71:89:02:ed:0a:e2:3b:
                    c0:52:0d:4e:3f:53:2f:30:c6:47:fa:e9:58:28:a0:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BC:DE:E5:5F:EE:30:C3:DD:25:38:29:16:3C:7F:46:72:0C:74:25
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:60:18:a8:df:1a:27:d5:b8:f1:12:47:7e:e3:6c:bc:86:58:
         23:8e:a9:83:ba:d8:6b:d1:0b:36:5a:88:03:66:a7:d8:28:28:
         24:98:c1:86:8f:8f:02:0c:45:87:76:b1:08:ff:5b:8c:92:e1:
         bb:6f:d7:e5:e3:58:91:1d:68:a8:ef:d8:cf:26:af:b2:42:98:
         f3:08:b8:00:1b:01:30:f8:22:cd:ba:63:30:b6:4b:62:96:50:
         ff:81:9c:6d:eb:f8:7d:27:51:0c:af:9b:23:b2:fe:41:1b:0f:
         b3:c0:12:58:a0:6f:f9:17:c3:9a:b9:de:a4:c4:13:db:45:d1:
         eb:fd:49:b2:56:12:b5:46:3b:c8:0c:27:97:24:8e:29:96:a3:
         28:b7:a2:e2:b2:32:84:ba:79:92:39:b0:9e:c7:fd:38:0a:7a:
         50:f9:09:ca:e5:60:b0:1f:a2:47:f2:40:40:8c:f2:79:49:73:
         48:06:27:51:bd:ec:2a:57:5b:8d:63:4d:a5:7c:d5:5c:9a:38:
         ec:21:e8:d6:7d:31:46:fb:0a:cb:47:71:c0:26:28:ae:70:8c:
         63:14:45:35:4e:5a:12:1a:f6:2d:3f:da:49:16:9f:15:5d:51:
         85:f5:a3:ef:2c:51:77:88:f7:6c:f9:dc:aa:4a:41:6e:31:3d:
         ff:61:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org