Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e372e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e372e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          XR8219xNX/UQQf9vxy0V2KVZvxv4GTV4IvpW9i/3yR4=
Subject key identifier:   51:2A:2C:EB:19:A3:F8:B4:8C:A7:9E:63:E7:89:06:91:CA:18:53:D0
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       5EBF1F72DA7C1DB6019627BD73F1F262A063D282
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e372e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:15 +0000
ROA not before:           Fri 05 Apr 2024 01:00:15 +0000
ROA not after:            Fri 04 Apr 2025 01:05:15 +0000
asID:                     28182
IP address blocks:        189.89.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bf:1f:72:da:7c:1d:b6:01:96:27:bd:73:f1:f2:62:a0:63:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:15 2024 GMT
            Not After : Apr  4 01:05:15 2025 GMT
        Subject: CN=512A2CEB19A3F8B48CA79E63E7890691CA1853D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:e5:05:2b:10:99:47:22:af:2c:40:54:62:
                    f3:31:d9:40:3f:68:79:4f:12:1c:17:83:ca:ef:97:
                    9f:88:e0:40:2a:4c:9b:04:9a:1b:16:25:ba:13:84:
                    63:b7:c0:65:cb:f1:68:79:73:7e:62:b8:fb:88:8c:
                    d8:ba:1a:95:1b:30:60:14:61:3a:28:4c:d3:78:7b:
                    ce:b7:4b:57:0f:fa:36:8d:15:b5:87:e8:e5:96:ac:
                    e2:10:21:1c:5f:ea:27:58:a5:df:1a:9d:2b:95:8d:
                    a4:98:c4:0b:28:81:be:41:5c:89:ec:3a:9e:4c:a0:
                    6e:bd:fd:af:aa:c2:16:0f:5f:d6:64:6a:70:a6:b1:
                    a8:e1:ef:56:bc:4c:68:59:6b:51:43:b0:1e:6f:60:
                    72:ee:0b:4c:0a:1a:db:48:21:cb:fb:b9:43:3a:8e:
                    a4:17:65:b8:73:81:3c:84:38:cb:e6:a9:da:06:a4:
                    40:f4:cd:77:36:ea:37:e4:11:b1:86:66:d2:4f:c0:
                    46:46:44:77:68:c8:98:dd:97:91:2d:06:00:00:65:
                    60:64:97:0c:a9:37:e7:ad:61:84:5b:e7:57:0e:67:
                    9f:22:22:e5:1e:7b:8b:a2:4e:f8:a0:10:65:28:42:
                    68:39:ee:34:4f:88:e5:6a:91:fd:1e:40:42:5c:dd:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2A:2C:EB:19:A3:F8:B4:8C:A7:9E:63:E7:89:06:91:CA:18:53:D0
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e372e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:2d:3d:e6:5a:2f:bf:7c:24:9d:a6:a1:6e:be:38:f8:2b:
         e3:11:11:27:f9:40:7e:36:30:cd:3f:04:08:bb:c6:e4:fd:52:
         bf:7d:31:4c:34:3f:f4:8d:64:83:3b:d3:6c:8f:3e:6d:6f:6f:
         e5:3e:1d:7d:d6:cf:da:c9:8f:aa:be:6d:23:2c:c6:a4:ab:c6:
         0f:92:ec:07:2a:3a:d9:89:90:ee:00:45:95:d4:08:13:bd:10:
         dd:e5:a3:e0:eb:3d:d7:4c:78:e4:a4:3c:36:09:c0:7c:b3:58:
         ce:49:48:9d:2d:b1:8b:08:79:29:82:dd:c3:c9:1e:9b:65:3a:
         69:f3:1c:f9:85:c0:18:d1:f9:f3:75:5f:c6:24:40:75:21:4d:
         91:d5:df:fb:35:4e:30:7f:cb:68:dd:ff:c8:cf:73:9e:7f:17:
         9a:08:e5:cc:e0:75:92:c6:93:f0:9a:a3:2a:c5:d0:97:c7:9f:
         23:56:6d:bf:12:94:72:33:88:73:3b:5a:b9:fd:ac:de:56:b6:
         b5:ab:d0:f5:91:0c:6f:cb:95:2d:32:f0:e6:5b:fe:2a:12:63:
         28:73:81:db:c2:5c:ae:c8:8d:bf:80:dc:63:26:ec:dd:db:98:
         e3:87:09:02:c4:47:bc:ec:5d:d7:6f:13:16:4e:84:3e:fd:7b:
         a1:d7:18:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org