Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e382e302f32342d3234203d3e203238313832.roa
File:                     3138392e38392e382e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          TV8xcW5kGLQZ3MAA6J94wvs1wtQ/zX3/O5UmniCRwIM=
Subject key identifier:   AA:55:3A:88:F7:2B:DF:92:DE:1B:28:1C:02:66:C6:9C:6B:BD:18:DD
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       6C6D7BF324702E12428C9EB70705A17E21155A62
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e382e302f32342d3234203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:16 +0000
ROA not before:           Fri 05 Apr 2024 01:00:16 +0000
ROA not after:            Fri 04 Apr 2025 01:05:16 +0000
asID:                     28182
IP address blocks:        189.89.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:7b:f3:24:70:2e:12:42:8c:9e:b7:07:05:a1:7e:21:15:5a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:16 2024 GMT
            Not After : Apr  4 01:05:16 2025 GMT
        Subject: CN=AA553A88F72BDF92DE1B281C0266C69C6BBD18DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:9a:af:93:d0:1f:45:8c:cd:90:8d:a5:c0:
                    84:90:c7:63:09:74:0d:d3:28:7a:8a:c6:32:98:f7:
                    bc:d4:f4:e7:16:36:53:50:47:9c:02:c6:b2:8a:f9:
                    d0:c9:f4:bd:f6:08:5b:35:c8:fd:57:b4:bf:ea:36:
                    33:5c:55:84:4d:cc:e7:fe:45:12:51:cb:85:c9:f8:
                    6b:73:0e:f2:27:b3:69:fc:0e:e2:b3:e3:2d:a3:56:
                    06:41:7a:99:09:50:60:b4:f2:38:b9:69:9b:ed:2f:
                    2b:c0:5b:70:3c:ab:aa:01:41:c5:95:c9:c2:6e:e3:
                    73:a2:73:f0:a9:a5:8a:18:c5:ef:c3:fa:0b:60:ed:
                    f3:50:88:a6:1d:d2:7f:85:b4:ae:c0:da:9a:7a:6f:
                    a4:a3:45:74:a0:52:c2:20:c9:14:4c:ae:54:bb:81:
                    69:7b:c6:d5:66:dc:37:7f:8d:8b:00:86:48:b2:a4:
                    e8:90:27:ff:7a:83:05:ca:4a:04:db:5f:26:d7:93:
                    dd:66:99:ac:1f:0a:46:a2:e8:2c:ca:e0:8b:c6:7d:
                    f2:5f:45:69:34:63:a9:98:78:84:63:12:86:ad:ec:
                    d5:4d:c9:d8:de:12:7e:ad:fb:ed:a4:07:08:3d:f1:
                    70:86:b5:9b:84:aa:0e:f7:51:99:46:a5:7b:d8:43:
                    a1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:55:3A:88:F7:2B:DF:92:DE:1B:28:1C:02:66:C6:9C:6B:BD:18:DD
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e382e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:19:11:af:4c:dc:d2:a2:ef:69:97:ec:6c:25:87:5f:d7:eb:
         be:3d:59:ac:81:c8:5e:00:c1:2b:18:e4:ae:59:c8:05:87:af:
         21:d2:2f:3d:9c:a8:fb:6b:ca:db:22:a5:5f:c7:ad:d2:da:f2:
         e4:60:a0:1f:4c:f3:59:3d:64:b1:e4:90:4f:32:33:e3:b3:ed:
         9f:2c:ba:b3:a0:c0:b3:bc:ea:fd:e4:a2:e2:7c:e1:20:05:9b:
         fc:98:4c:53:92:d1:3d:56:c7:7b:5f:39:cc:a3:95:f5:ee:5f:
         eb:d4:69:1a:ee:76:e0:45:a9:aa:13:b0:1e:88:d9:80:c5:50:
         54:af:0d:eb:c8:54:70:08:18:02:77:0c:0f:c9:78:9a:e6:24:
         d5:44:ec:64:cf:0e:2d:7e:fd:a4:e4:7a:50:48:f6:ad:15:6b:
         d5:5d:80:08:63:36:53:3d:58:ff:54:e7:1a:ba:b7:1d:78:60:
         39:75:96:e6:7b:f3:0a:96:0c:83:a7:b5:66:65:b7:14:97:a8:
         c3:b5:76:8b:16:62:96:5f:aa:e4:0d:22:06:11:46:b8:5d:98:
         2a:31:79:67:81:cc:4b:c4:a7:ea:7e:be:df:09:a7:e1:2c:b2:
         18:6a:00:5e:f4:c3:25:7f:2b:8f:7f:a6:ca:d0:59:7a:0e:0c:
         a1:cb:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org