Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e332e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e332e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          rVXjU2PQAhsEeWk6Eo5cPihuBIdK5NK3AA/6m4yggjE=
Subject key identifier:   09:2B:86:71:BC:45:F7:66:CF:60:54:F7:53:14:4A:E4:4B:27:8D:E4
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       3432CBA6DC6FA9B2B23ACCC9D66DE12F452CF866
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e332e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:13 +0000
ROA not before:           Fri 05 Apr 2024 01:00:13 +0000
ROA not after:            Fri 04 Apr 2025 01:05:13 +0000
asID:                     28182
IP address blocks:        189.89.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:cb:a6:dc:6f:a9:b2:b2:3a:cc:c9:d6:6d:e1:2f:45:2c:f8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:13 2024 GMT
            Not After : Apr  4 01:05:13 2025 GMT
        Subject: CN=092B8671BC45F766CF6054F753144AE44B278DE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:ba:71:41:fd:c5:97:8c:9b:7b:5d:6a:bd:
                    52:07:17:d5:57:f6:f2:de:e1:ab:0f:f8:f8:4b:fd:
                    45:65:7d:9f:53:35:e8:7c:d0:0d:00:ef:9f:a5:ed:
                    86:df:4d:b7:04:b9:66:76:8c:3f:d6:cd:90:65:44:
                    ee:7f:4d:e2:2a:82:b4:bb:f3:20:45:f8:aa:f6:95:
                    a7:fb:d1:54:61:6d:a7:17:b9:38:5f:72:1f:28:d0:
                    bf:41:e2:5b:cd:2f:02:f6:e7:64:29:f1:34:f0:c4:
                    62:18:42:78:4b:55:55:e6:cc:9c:1f:68:bf:37:31:
                    c4:7e:50:97:ae:f5:7c:c5:5d:53:e4:62:20:b9:eb:
                    3f:92:fe:6b:b3:31:a7:fe:92:58:bb:bc:58:24:40:
                    7b:32:66:0b:af:a5:3b:06:0d:70:db:d4:7c:94:b4:
                    59:b6:bb:f8:fa:38:8c:5c:6a:34:22:3e:35:07:51:
                    1a:05:66:53:55:27:ce:ba:cf:c0:41:90:39:be:b4:
                    b0:96:7f:bb:01:98:9c:6a:ab:73:77:04:df:0b:e6:
                    f9:96:e4:76:49:97:4b:45:ad:91:de:03:17:4f:ee:
                    56:3d:e1:3b:f5:cb:e0:0b:8b:2f:0e:04:f1:20:07:
                    d3:4f:c2:f4:de:51:58:09:d0:9f:d5:e4:db:d9:1d:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2B:86:71:BC:45:F7:66:CF:60:54:F7:53:14:4A:E4:4B:27:8D:E4
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e332e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:fc:a9:be:93:97:55:da:1b:8a:f6:4c:23:c4:25:b5:15:
         46:3d:11:d4:d7:ba:91:62:78:10:29:e8:d0:19:09:95:88:e8:
         15:c2:83:e4:13:64:48:25:70:b1:6f:0c:29:ae:63:6a:2a:50:
         27:80:ca:37:36:74:f6:4d:18:7c:c1:54:c5:e0:0f:b3:b5:70:
         19:21:64:2b:7b:2e:c7:96:70:cd:a9:9b:2c:ae:99:a0:87:e1:
         b3:b5:47:e3:f8:0b:7f:71:54:42:da:95:dc:ed:c1:6e:75:2d:
         17:20:15:73:c1:73:55:18:bd:74:46:aa:49:46:a9:de:4b:50:
         ae:17:93:b9:13:e3:4e:e8:67:ed:0e:19:0d:b2:9e:d4:55:17:
         f6:b3:52:77:28:16:99:d2:c9:63:9f:f8:7d:1f:a3:2e:76:f1:
         ca:bd:fb:e8:09:25:4e:a2:54:81:33:b4:49:2d:69:fe:25:14:
         36:5f:45:81:19:6e:71:89:fa:4a:8a:e4:5a:02:67:b6:e0:2c:
         71:b6:77:a2:a3:91:7a:21:9e:91:5d:25:b7:4f:06:4e:7d:a4:
         45:66:66:c7:64:81:82:13:58:4e:0a:69:e2:a3:c6:05:ea:5d:
         ea:b9:7f:91:4b:dd:ed:ee:7a:a6:af:58:18:f2:16:2d:1c:55:
         7a:1d:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org