Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e362e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e362e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          APhnpEgqeEANQwfCqn2RBcAHP3ZorjCoYyAcUANp0TE=
Subject key identifier:   92:E2:59:5A:6A:07:97:87:B2:37:1B:48:5E:1B:85:B8:02:5B:0F:BF
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       7EFC5EA035E00305F826BE6B6C339609D0479BF2
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e362e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:11 +0000
ROA not before:           Fri 05 Apr 2024 01:00:11 +0000
ROA not after:            Fri 04 Apr 2025 01:05:11 +0000
asID:                     28182
IP address blocks:        189.89.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fc:5e:a0:35:e0:03:05:f8:26:be:6b:6c:33:96:09:d0:47:9b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:11 2024 GMT
            Not After : Apr  4 01:05:11 2025 GMT
        Subject: CN=92E2595A6A079787B2371B485E1B85B8025B0FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:23:0d:0e:4a:3d:66:d5:cf:95:01:88:f6:
                    93:b5:ab:c0:36:f9:d8:b9:21:02:83:07:bb:6b:39:
                    62:00:ce:09:0c:2d:e8:b2:bd:98:2c:e8:48:db:9a:
                    d2:88:b1:ed:90:fc:1b:04:43:32:01:79:14:2c:db:
                    36:b5:c0:9f:3e:f3:0f:34:bd:ca:57:72:24:3c:b9:
                    d8:3f:ce:a8:6e:54:68:f9:65:65:bb:93:f6:bf:9a:
                    19:f5:76:aa:87:bb:ad:f5:71:72:ac:1e:20:1b:72:
                    cb:b9:b4:a2:27:f6:0c:02:50:f1:da:36:8e:c2:3e:
                    5f:66:1f:09:e3:bf:81:2b:eb:1f:32:26:85:e3:d3:
                    e8:c5:11:5f:b9:11:50:95:66:ea:cb:43:6e:9a:40:
                    ab:99:28:db:aa:9c:64:08:82:6c:41:38:75:1b:83:
                    1b:ca:b6:62:93:23:18:1d:db:17:c1:be:f4:22:07:
                    8f:e7:5a:fc:ac:11:b6:16:25:30:d0:2e:0d:29:eb:
                    2d:11:52:9a:ed:08:f5:76:b1:49:8a:30:a4:93:2b:
                    81:5d:3c:35:a3:23:74:da:31:d2:c3:49:f5:de:17:
                    22:69:89:6d:da:90:c4:6e:dc:a4:44:55:3b:f9:a2:
                    e9:41:29:81:d0:8f:cf:6c:f1:d0:9d:d2:29:4d:03:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:59:5A:6A:07:97:87:B2:37:1B:48:5E:1B:85:B8:02:5B:0F:BF
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e362e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:1c:a9:ea:0b:c0:52:6b:18:6d:ff:20:eb:8b:3f:59:42:ce:
         4c:85:48:bd:d3:9b:c4:49:20:4a:7e:47:4a:29:49:6a:a8:c3:
         57:62:19:dc:07:87:eb:a3:7d:ae:b2:c2:8d:7d:6a:72:31:49:
         34:39:bd:db:3e:a9:a1:50:00:5a:b7:49:a8:0a:bf:57:79:c2:
         49:0a:83:ba:f1:5d:51:0f:b5:c5:2c:75:99:5b:b6:ce:09:b2:
         d2:62:8e:15:97:e1:63:38:b3:90:0a:34:c1:5d:11:89:29:ae:
         dd:81:da:4f:46:9c:4e:2e:49:6b:f6:b9:fb:23:f9:f3:57:83:
         22:79:cb:e4:57:59:ce:6b:e6:c9:e5:a8:3f:ec:c0:10:9c:e3:
         4e:d8:10:f5:5d:4e:73:8d:bb:72:88:71:32:f8:47:9e:7b:b5:
         40:aa:70:c1:0a:34:ba:9f:66:9f:53:64:15:14:d3:da:5f:a7:
         d8:81:3f:89:6a:e0:4e:32:d7:98:04:8e:85:45:2f:53:df:50:
         f9:65:b4:56:af:3e:a0:a1:c7:ec:43:b6:55:0e:ff:61:90:1c:
         e7:2b:e8:89:09:3a:b7:5d:ff:77:fb:33:4c:4b:86:64:aa:ad:
         b5:3d:16:0e:e0:0c:54:cf:e1:fe:73:dd:0e:70:1a:d5:b1:80:
         f6:f4:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org