Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31332e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e31332e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          h3tE4IPPoDx62ngl6DLH0YWw4nHFIu75IpuK+OoFof0=
Subject key identifier:   75:4F:33:97:09:8B:62:2D:CD:F2:6E:49:A4:42:B7:48:C0:F0:49:D2
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       1C2D599BD5DB7C970F5FF739DFDC1296F05C5234
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31332e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:16 +0000
ROA not before:           Fri 05 Apr 2024 01:00:16 +0000
ROA not after:            Fri 04 Apr 2025 01:05:16 +0000
asID:                     28182
IP address blocks:        189.89.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2d:59:9b:d5:db:7c:97:0f:5f:f7:39:df:dc:12:96:f0:5c:52:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:16 2024 GMT
            Not After : Apr  4 01:05:16 2025 GMT
        Subject: CN=754F3397098B622DCDF26E49A442B748C0F049D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:aa:9f:6b:0f:18:4e:31:9b:88:ad:57:0e:
                    40:dc:9f:a5:2c:b0:4d:1a:5e:62:f5:0b:f8:a4:4e:
                    f8:d4:c8:14:fe:03:1d:02:77:bd:8d:6b:4f:5a:f9:
                    eb:ef:89:5e:91:64:2e:04:ae:d5:da:f0:25:f0:e5:
                    83:7c:a7:4a:e3:f7:cc:b3:e6:e1:48:14:d7:d2:49:
                    54:5c:1a:8a:4b:72:63:19:97:9c:41:1e:02:1c:f7:
                    2b:6f:22:d7:22:69:86:d1:fe:73:0f:57:97:1b:79:
                    fe:98:f0:00:83:e4:6d:ea:fd:76:b4:58:b9:7b:50:
                    42:6e:8c:8a:32:80:3f:bf:ed:6f:dc:db:8a:93:6e:
                    6b:26:6f:b7:5b:a4:09:af:d9:6b:22:10:03:92:76:
                    3f:27:ab:f6:cd:5d:1f:c8:00:41:4c:89:17:f3:c8:
                    ef:89:1a:be:c6:57:f5:00:a4:67:da:8f:28:e3:7d:
                    1f:6c:48:ea:5f:07:0b:1a:58:bd:b6:3a:59:d8:9d:
                    a7:44:dc:05:05:00:1f:f0:31:90:e1:36:9b:16:ec:
                    96:aa:19:60:11:58:dc:ac:25:e0:5c:45:ff:f8:d8:
                    ca:5d:e0:b7:e5:14:9f:67:a6:15:33:9e:95:bf:a3:
                    16:74:08:5e:b4:20:c7:5c:25:49:5f:6f:35:13:2c:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4F:33:97:09:8B:62:2D:CD:F2:6E:49:A4:42:B7:48:C0:F0:49:D2
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e31332e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:46:2f:35:f7:9f:f5:ef:55:d2:4c:01:95:38:aa:14:98:e9:
         f1:eb:51:3d:e7:33:b7:b8:e8:fc:16:13:48:4f:0d:50:ca:39:
         26:2b:6d:5f:71:e7:40:a8:ec:38:79:23:a8:61:ca:38:e3:61:
         2d:f9:06:db:bc:bb:e3:02:be:33:16:be:f2:28:d1:57:1f:3d:
         fe:15:fb:17:51:2b:59:a1:72:87:5d:f1:da:db:79:82:46:49:
         79:50:1b:29:46:1b:51:c3:97:03:7b:34:3f:35:22:76:61:ad:
         62:be:35:f7:56:ae:66:71:33:16:df:1d:ff:81:8f:07:51:82:
         b6:54:4c:be:bc:cf:81:9c:36:3a:a6:cf:80:08:25:8a:15:85:
         59:8b:40:78:ed:43:3a:a8:92:2e:1f:75:aa:69:2e:6f:74:61:
         35:79:9f:9a:b6:3b:b1:5e:9d:33:ce:54:15:5a:42:de:98:a8:
         e3:21:54:cf:3d:1a:f2:9d:9a:e5:6e:90:db:aa:6d:37:71:d7:
         1b:f6:0b:af:0f:62:53:8b:53:b4:e6:27:59:91:ac:60:55:08:
         4c:11:69:4e:e4:38:c4:c8:ac:8b:f9:57:e0:e8:8a:64:5b:a0:
         f5:85:23:b6:62:99:d0:80:65:d1:f6:44:59:12:57:b6:c8:b6:
         fc:cb:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org