Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e382e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e382e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          BI5QEHmmwSEh1HDm5jazpHsUhBKG6MR8m3t+hITrlW0=
Subject key identifier:   16:86:B6:E5:59:69:2C:95:F2:0A:68:6E:31:3F:C1:CB:1D:FE:DF:03
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       3F56F16998454B297A1FA855205D4B9405E686EE
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e382e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:15 +0000
ROA not before:           Fri 05 Apr 2024 01:00:15 +0000
ROA not after:            Fri 04 Apr 2025 01:05:15 +0000
asID:                     28182
IP address blocks:        189.89.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:56:f1:69:98:45:4b:29:7a:1f:a8:55:20:5d:4b:94:05:e6:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:15 2024 GMT
            Not After : Apr  4 01:05:15 2025 GMT
        Subject: CN=1686B6E559692C95F20A686E313FC1CB1DFEDF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:37:2b:cd:ee:8b:14:63:c7:f3:b2:2c:36:
                    9c:be:e4:30:09:19:79:81:75:2d:6b:21:57:29:b4:
                    6e:4d:6b:ec:39:8c:a0:30:8f:9e:87:cd:5e:70:ab:
                    db:78:15:b3:7a:ab:d4:d7:8b:47:ac:b7:0f:58:f0:
                    50:5c:87:39:ea:47:9d:a2:74:3a:71:b2:cd:78:80:
                    31:72:ac:1f:09:7f:99:16:6c:7e:ff:44:e9:75:3c:
                    53:b9:c8:e5:b8:bc:87:77:29:50:d7:16:10:31:a4:
                    55:47:92:54:85:71:dd:c5:84:88:e3:6e:fb:c5:7b:
                    cb:e2:84:38:2e:60:73:5c:9d:19:94:62:f2:37:66:
                    a8:9e:bd:d2:f5:d6:05:c4:2f:21:50:d0:73:e8:b9:
                    fa:ce:c4:a4:e2:b1:db:04:c4:b7:f4:f3:08:e4:9c:
                    2a:89:4d:ee:4a:19:0b:13:be:4b:40:2b:79:e0:fb:
                    91:56:6e:04:43:d6:9f:e3:a5:47:c9:ec:4d:7c:3a:
                    88:20:d2:86:22:1a:77:f6:8d:6d:26:36:c8:c4:38:
                    d5:ad:23:99:53:14:cb:f1:84:dc:68:f0:32:b1:72:
                    a8:93:6c:10:1d:ba:c1:39:58:c7:f0:bb:3a:c4:35:
                    0d:8e:4c:2d:bf:13:58:fc:92:89:f1:84:53:66:9b:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:86:B6:E5:59:69:2C:95:F2:0A:68:6E:31:3F:C1:CB:1D:FE:DF:03
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e382e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:6b:df:dc:4c:f9:d9:e3:91:e3:f0:8a:34:f7:62:20:2d:1d:
         51:cf:c5:68:4f:ed:3c:11:27:fc:35:09:37:e6:07:13:da:18:
         d6:04:35:03:a6:af:86:a8:c4:0f:59:5f:4a:f9:a4:f9:dd:8a:
         ea:51:17:91:b1:a8:ea:22:d9:5b:48:59:4a:26:ff:85:71:40:
         67:65:b5:01:d1:47:2a:d3:89:e9:33:d2:04:22:64:17:7d:45:
         e6:e1:17:6d:1b:ef:8b:28:6f:48:7e:94:57:b1:c2:54:a4:41:
         05:49:3d:82:5b:d9:f8:d5:bc:b2:a2:51:04:fa:38:af:ed:45:
         ef:60:c5:19:06:99:4c:57:94:6a:e4:52:fe:1b:ab:3e:86:5d:
         96:5b:d0:8f:5d:09:3c:29:d0:34:20:0f:e7:51:17:81:c5:5f:
         e7:b0:7f:6e:a9:af:1a:64:16:e2:c4:38:d7:83:13:b6:ff:f0:
         ef:47:a6:5f:9b:b6:73:a4:f1:ef:04:03:6e:69:c5:bc:14:b1:
         ac:01:92:32:11:46:37:26:37:1c:dd:9b:a4:46:53:77:a8:79:
         a4:b8:f0:18:69:4e:5c:94:98:a1:6f:20:85:3b:fe:79:7c:03:
         94:74:0e:73:74:22:3f:4f:82:33:31:00:86:3b:29:a2:e6:93:
         4d:6e:08:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org