Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e362e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e362e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          JG8k5DrN9MI9i4ZHAuU4iaSNb2WPGUXdrWVVEuCzz2M=
Subject key identifier:   A4:1A:AC:61:50:7C:52:24:68:3E:CA:5D:98:D9:17:1E:C3:DA:A8:AE
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       75F874313472C4FE247C574895A8994F1E6EF94C
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e362e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:14 +0000
ROA not before:           Fri 05 Apr 2024 01:00:14 +0000
ROA not after:            Fri 04 Apr 2025 01:05:14 +0000
asID:                     28182
IP address blocks:        189.89.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f8:74:31:34:72:c4:fe:24:7c:57:48:95:a8:99:4f:1e:6e:f9:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:14 2024 GMT
            Not After : Apr  4 01:05:14 2025 GMT
        Subject: CN=A41AAC61507C5224683ECA5D98D9171EC3DAA8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:f3:7c:d1:4e:63:fe:e8:8a:3d:1d:83:cf:
                    85:7e:c0:57:bd:6a:e5:c1:5b:40:c8:65:25:3b:6a:
                    10:b4:de:32:ca:ff:85:67:e1:d4:f0:66:28:a7:27:
                    6d:04:91:2e:fd:07:8c:e6:a7:84:6f:05:bd:51:f7:
                    b0:63:13:c7:3f:a1:dc:a5:03:db:13:37:5a:0f:bb:
                    aa:a2:e7:78:59:3c:3f:09:b1:dd:79:8c:e8:8e:df:
                    86:96:77:61:39:49:cd:1d:75:84:24:7f:27:f2:2b:
                    b1:2c:51:19:31:07:7d:9f:12:de:65:67:dc:c2:71:
                    d7:f0:88:f7:fd:6d:9a:39:d8:d0:01:f0:5d:1f:ef:
                    35:32:9f:08:60:cb:a6:de:82:a0:67:90:5f:d9:17:
                    f5:9c:8c:9b:9f:95:f1:73:52:cc:70:51:1d:9a:d5:
                    33:7f:69:4a:75:9e:02:d5:04:a3:92:a7:92:6c:f5:
                    56:e8:ce:39:34:44:a3:fd:80:8f:78:66:5b:4b:03:
                    fe:9a:58:c1:99:6b:47:8b:3c:f9:58:83:20:b8:32:
                    b6:0a:27:09:4a:82:86:40:91:3e:fa:d7:45:28:e2:
                    a0:91:55:fd:54:6e:e0:4a:90:9b:af:a6:65:1d:0a:
                    a0:ae:80:7b:3b:c7:a0:fb:28:60:db:bc:f6:69:c4:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1A:AC:61:50:7C:52:24:68:3E:CA:5D:98:D9:17:1E:C3:DA:A8:AE
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e362e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:f1:87:22:2a:8e:07:8b:b5:10:bc:79:ce:fa:ba:74:65:67:
         f1:7e:31:ab:13:bf:d7:e3:44:21:21:5b:5f:bf:9f:bc:37:4a:
         ff:15:e9:6d:76:38:8f:2a:1e:da:c7:d5:c3:35:2b:c9:5e:8f:
         57:81:8a:74:24:a7:c4:12:b5:2d:ff:d3:e6:1b:d6:48:23:fc:
         a4:ff:b6:bc:fe:e4:ac:b8:e6:f3:df:96:6d:c8:95:aa:79:3d:
         c2:88:bf:5e:ed:d8:f5:df:f9:07:31:0e:77:51:35:dd:6f:0f:
         59:d9:5e:6c:06:55:bd:1b:0c:a0:c8:76:43:9f:e7:18:40:3b:
         0e:f4:87:1d:63:ca:1a:aa:77:5a:d4:f1:5d:09:9c:c0:1f:a4:
         00:dc:cd:bf:01:22:9b:81:79:1e:23:b0:af:d4:8e:eb:67:4e:
         df:15:e2:a0:20:b5:fb:fd:5e:74:f2:45:01:57:3a:15:4b:78:
         44:bb:c3:1e:31:ac:31:21:4a:fb:2f:14:4d:4d:fe:8c:2e:a9:
         c4:8f:e7:ed:ca:c7:b6:32:38:81:9c:b6:16:a5:b4:09:7f:bb:
         ba:23:c1:b3:3a:74:74:d2:5c:2e:8f:4f:c7:9d:4b:f0:17:e8:
         31:a0:0e:8c:0e:0c:fe:63:53:86:c2:8c:a0:e5:f7:b2:27:74:
         38:df:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org