Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          douCUpsEs/dnIigmiIfHWd3YxOrOss4UU2ZF5rAs8Qc=
Subject key identifier:   16:CA:88:54:78:1B:B0:AD:E0:17:C9:A9:E6:CF:51:69:65:82:CA:28
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       48C02698F922157710B3DE94AE0710F6007ACBFD
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31322e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:11 +0000
ROA not before:           Fri 05 Apr 2024 01:00:11 +0000
ROA not after:            Fri 04 Apr 2025 01:05:11 +0000
asID:                     28182
IP address blocks:        189.89.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:26:98:f9:22:15:77:10:b3:de:94:ae:07:10:f6:00:7a:cb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:11 2024 GMT
            Not After : Apr  4 01:05:11 2025 GMT
        Subject: CN=16CA8854781BB0ADE017C9A9E6CF51696582CA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:14:72:2f:0d:37:65:85:eb:ac:ff:9e:33:
                    44:65:d0:43:bc:97:c7:ff:e6:bd:30:c1:63:07:8e:
                    0c:0b:3d:a0:9a:a6:19:8d:39:4d:04:d9:0d:91:aa:
                    4d:78:a6:02:f1:e0:44:71:a3:81:b3:38:85:01:e8:
                    d6:46:63:ce:86:b0:1a:68:70:21:7f:37:8d:79:30:
                    b1:51:64:3a:0c:10:2f:94:e2:98:55:68:85:3f:0d:
                    49:c6:6f:1e:dd:ed:63:88:7a:f0:33:fd:3a:de:99:
                    f9:cc:03:91:27:a2:31:fd:d8:ae:73:fb:63:b4:fb:
                    0b:b1:34:4f:81:1c:c7:ef:1e:09:c9:a7:3c:9a:5c:
                    31:22:12:78:62:bd:f8:d6:f1:85:e5:74:c8:e3:d7:
                    ed:a2:f5:5c:94:44:94:b3:76:d1:0b:79:f4:3a:e0:
                    48:c0:d4:65:99:e4:0b:d8:3b:4f:0d:45:05:b4:e2:
                    a7:90:30:98:d3:02:56:79:e1:3d:9e:82:7a:5e:dd:
                    2c:98:d7:25:69:05:17:99:4d:54:80:c1:91:d6:02:
                    c0:04:d2:b0:d8:83:64:35:c7:9a:ab:f4:3f:b4:dc:
                    2b:aa:4f:fc:c9:2a:76:26:72:57:1a:66:9d:72:da:
                    2c:bf:93:fc:79:7e:40:98:1f:21:4d:37:60:9e:a3:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:88:54:78:1B:B0:AD:E0:17:C9:A9:E6:CF:51:69:65:82:CA:28
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:65:11:a1:c1:4f:67:cc:d3:77:06:49:00:6c:bd:d9:60:52:
         2a:15:33:62:e3:57:dd:f7:b3:bb:61:8b:58:72:3b:6c:dd:f1:
         55:5a:1c:5b:6b:2e:b6:1e:c7:59:b3:9f:d1:ec:d0:81:bb:ba:
         8a:e8:97:76:80:8b:b4:6e:1d:d7:61:9c:62:9c:b4:49:65:37:
         0a:8c:eb:81:99:ba:55:90:b8:c1:f3:40:cf:c5:0d:0a:eb:59:
         72:7c:6d:dd:19:b6:61:7b:8d:ee:64:9a:a1:fc:46:8c:1a:2e:
         d0:fc:16:0f:8a:04:9c:b8:d7:80:3b:b2:cf:8a:0f:ae:dd:87:
         13:81:c8:1f:be:ab:f0:64:d5:4f:94:42:bf:b7:39:91:48:e9:
         d6:2a:df:e1:09:2c:bc:1c:43:56:bb:ec:8f:9d:b3:a7:a8:01:
         d0:98:00:11:51:a7:a7:b9:02:cd:8d:3d:cf:e0:54:7a:44:0c:
         bc:27:40:33:47:71:fb:40:b6:58:f8:99:7e:25:26:84:57:5d:
         66:11:be:19:77:ae:0c:d1:3d:f7:3d:50:54:80:78:52:41:69:
         b2:fd:a0:24:02:a9:65:b4:b7:0e:75:1a:03:74:d8:ea:32:1e:
         46:91:11:99:7b:3e:f0:82:70:a2:13:e4:4a:b6:13:a8:5c:07:
         93:6f:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org