Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e322e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e322e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          K2oirnVqgrGjCJB9xeXm4Ts1F98gkHZjJBtn56xSGoQ=
Subject key identifier:   43:8B:98:9D:9F:56:8D:48:97:B3:EB:34:18:74:93:CF:F4:EE:57:A9
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       702EB31E43CDCB6319599A119217882563AAEA79
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e322e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:12 +0000
ROA not before:           Fri 05 Apr 2024 01:00:12 +0000
ROA not after:            Fri 04 Apr 2025 01:05:12 +0000
asID:                     28182
IP address blocks:        189.89.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2e:b3:1e:43:cd:cb:63:19:59:9a:11:92:17:88:25:63:aa:ea:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:12 2024 GMT
            Not After : Apr  4 01:05:12 2025 GMT
        Subject: CN=438B989D9F568D4897B3EB34187493CFF4EE57A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:50:4d:49:d1:ac:c1:17:a9:51:e9:de:3e:
                    2b:eb:4d:db:3f:8c:2c:9f:ea:57:ec:a2:9b:1b:b0:
                    7d:0f:94:0b:a7:7b:0a:e5:7a:c2:37:24:64:9a:f0:
                    0d:b1:e8:67:49:e4:46:d0:94:84:4d:21:ce:27:28:
                    92:24:e5:c9:ce:90:34:86:98:36:4e:58:5e:de:a9:
                    01:b1:63:b4:96:86:26:a5:03:ad:af:a8:85:f9:74:
                    d6:80:6b:46:a0:f4:05:ca:fb:f6:b7:37:d6:9b:26:
                    9d:02:d4:ab:27:bb:00:b7:09:45:b6:a5:b6:19:07:
                    8b:d9:8f:8a:22:ca:6b:0a:36:0d:02:1b:14:41:66:
                    00:41:e7:bc:f7:6c:76:66:4f:6d:a5:7d:b8:77:8e:
                    f1:a2:2a:b7:c3:d3:db:de:cb:f4:03:ab:95:5f:8e:
                    28:f0:98:ac:53:70:37:1e:e9:4b:68:9a:2a:c6:fc:
                    8f:27:3f:6d:9e:27:c4:f0:a6:fb:3e:7b:e5:f8:74:
                    12:1b:b3:8a:a2:c0:2e:64:fe:43:1c:a6:64:89:56:
                    c0:d6:17:4c:54:38:53:61:47:98:5c:b9:2d:11:93:
                    6b:78:e7:1d:af:27:8b:65:8f:63:aa:ab:57:3c:f4:
                    6a:ef:7c:90:95:99:6e:11:34:9e:74:d9:d4:fb:5e:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8B:98:9D:9F:56:8D:48:97:B3:EB:34:18:74:93:CF:F4:EE:57:A9
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e322e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:31:23:f7:58:4a:67:23:06:d9:7e:a7:24:0c:dd:b5:09:7a:
         01:14:56:8d:bd:3d:d7:87:5f:b2:32:41:0d:5b:2f:32:69:75:
         be:d6:53:3b:c9:3a:a4:ef:d8:ab:b3:14:ce:cc:8c:39:fc:a6:
         f1:8c:99:b7:e9:9c:e4:15:19:b7:41:98:f1:ce:d5:18:4c:ce:
         b4:2e:fe:64:71:0e:1b:a0:ff:86:60:cc:75:c0:3f:91:1d:b9:
         03:ee:9e:d9:85:05:18:76:35:93:f6:f5:b6:c7:73:a0:5e:0a:
         41:4e:33:b0:64:87:6e:54:85:07:30:ee:1a:99:95:bf:92:28:
         04:41:12:5c:bd:32:3c:05:fb:bf:e2:df:76:a0:ef:8c:eb:d6:
         2c:bd:dc:31:aa:66:f1:80:b3:d6:ae:58:f0:ca:df:f5:16:94:
         69:64:8e:9b:10:d3:cf:2b:17:66:f4:8e:b5:d7:07:3e:99:7c:
         55:67:8a:39:c3:a9:fc:af:1b:3e:97:7d:78:e0:82:92:96:8c:
         79:c2:5d:00:40:24:44:2b:d9:fc:7a:5b:a2:48:4e:db:63:e3:
         11:d3:99:15:6b:c4:9b:2c:d1:7d:b8:c9:58:6c:dd:17:6d:98:
         7f:51:7d:f7:1d:ae:6d:1f:0a:66:5a:a0:36:ac:1a:44:db:4f:
         68:c0:01:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org