Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e35312e31362e302f32302d3234203d3e203238313938.roa
File:                     3138392e35312e31362e302f32302d3234203d3e203238313938.roa (raw, json)
Hash identifier:          J5xg9X6+FTQiaXnfYicTjwS8nxXsSB3VOOxJJrQtmlM=
Subject key identifier:   93:09:2F:05:D1:67:69:D5:5B:09:0A:A8:1B:DA:D8:D8:A1:E7:DE:28
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       1485B4E97D61D4FB4CB701398F281A8E78BB9E67
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e35312e31362e302f32302d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:18:04 +0000
ROA not before:           Mon 21 Aug 2023 20:13:04 +0000
ROA not after:            Mon 19 Aug 2024 20:18:04 +0000
asID:                     28198
IP address blocks:        189.51.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:85:b4:e9:7d:61:d4:fb:4c:b7:01:39:8f:28:1a:8e:78:bb:9e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:13:04 2023 GMT
            Not After : Aug 19 20:18:04 2024 GMT
        Subject: CN=93092F05D16769D55B090AA81BDAD8D8A1E7DE28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:fa:0d:90:8d:00:f8:23:38:4b:99:bf:11:
                    12:cd:92:10:a4:e5:6a:37:99:33:8b:6b:a7:18:ea:
                    54:a1:c4:16:e5:65:c4:cb:a2:6f:9f:91:57:09:96:
                    e3:e6:11:c6:58:66:dc:b3:21:0e:1a:36:e2:f5:07:
                    70:cf:da:65:5f:c9:ec:9c:d8:0c:74:6d:30:e4:48:
                    29:49:04:80:80:af:8e:b6:08:1a:31:95:73:76:c1:
                    a7:60:0c:78:b3:9d:89:25:98:53:d9:11:d9:1f:12:
                    bc:bf:ea:34:27:55:d7:17:3b:ba:ef:9e:ce:b1:bd:
                    c3:78:a2:8b:ae:9e:e1:cf:7f:2d:1e:ef:78:b1:c1:
                    2a:7f:c0:5f:7e:9a:4a:42:38:77:74:c5:28:e5:35:
                    13:3e:68:4c:27:7c:3b:07:ff:1c:40:c8:10:03:67:
                    92:a1:39:39:c6:e6:4e:1c:c5:e4:18:2c:f9:5c:9c:
                    f8:34:6d:06:ce:4a:c1:95:ed:39:86:e0:98:bc:dc:
                    41:12:55:4b:b3:97:4f:69:6a:3c:9f:e4:06:1f:3e:
                    f5:0c:30:bd:c8:f2:56:c3:6c:be:20:f1:56:c8:ce:
                    ba:12:8c:1d:a0:31:b5:ed:35:7d:d3:1b:17:59:2f:
                    81:5f:26:a8:15:53:3c:86:d4:b7:f5:2e:b0:a5:c9:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:09:2F:05:D1:67:69:D5:5B:09:0A:A8:1B:DA:D8:D8:A1:E7:DE:28
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3138392e35312e31362e302f32302d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:fd:38:3e:58:3f:b0:8b:8e:3d:56:3c:4a:47:be:fa:c7:8d:
         00:76:79:dd:ff:62:96:1b:61:3a:0d:6d:2a:55:d1:0c:a7:a1:
         be:9e:c1:81:7d:fe:d1:99:99:91:a3:43:03:47:4e:b6:a2:ac:
         5e:b6:2f:39:ac:e4:8d:47:09:e1:a5:d5:22:db:b3:83:ce:bc:
         5c:b6:d2:7b:dd:e2:92:53:f4:20:d4:6b:e7:1b:33:1d:4d:30:
         de:70:1a:30:31:8d:cf:ab:f9:9a:78:ad:3b:83:77:bf:4b:75:
         bd:a2:d0:54:c7:d6:f2:6e:93:02:b5:60:ea:6a:eb:df:b5:cc:
         76:68:96:3e:e5:1f:3c:cd:61:2b:07:5e:82:c4:05:aa:f6:91:
         03:1c:d0:fc:a4:40:66:f3:0c:2a:28:ee:04:a5:6b:f2:c6:cd:
         df:93:49:f6:58:02:e1:a5:e0:1d:08:01:fa:12:e6:9d:d0:fa:
         71:42:61:ab:1b:7f:a6:01:c2:44:00:78:60:0f:82:f5:41:19:
         40:74:f6:db:ad:99:90:f0:39:a7:51:c6:7e:e7:3f:55:c3:37:
         be:9c:74:1c:f7:8f:55:74:ab:90:ff:51:cf:6c:18:18:25:12:
         2b:0c:86:31:13:f1:34:30:7b:d0:5d:83:d1:57:35:15:e6:67:
         f9:2d:1d:a4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFIW06X1h1PtMtwE5jygajni7nmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNDMTg5M0U1NUY2NDUxNERCRkMzQjZCODAxQzE2RDAz
NjA5MTNGRTAeFw0yMzA4MjEyMDEzMDRaFw0yNDA4MTkyMDE4MDRaMDMxMTAvBgNV
BAMTKDkzMDkyRjA1RDE2NzY5RDU1QjA5MEFBODFCREFEOEQ4QTFFN0RFMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6/oNkI0A+CM4S5m/ERLNkhCk
5Wo3mTOLa6cY6lShxBblZcTLom+fkVcJluPmEcZYZtyzIQ4aNuL1B3DP2mVfyeyc
2Ax0bTDkSClJBICAr462CBoxlXN2wadgDHiznYklmFPZEdkfEry/6jQnVdcXO7rv
ns6xvcN4oouunuHPfy0e73ixwSp/wF9+mkpCOHd0xSjlNRM+aEwnfDsH/xxAyBAD
Z5KhOTnG5k4cxeQYLPlcnPg0bQbOSsGV7TmG4Ji83EESVUuzl09pajyf5AYfPvUM
ML3I8lbDbL4g8VbIzroSjB2gMbXtNX3TGxdZL4FfJqgVUzyG1Lf1LrClyfpdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkwkvBdFnadVbCQqoG9rY2KHn3igwHwYDVR0j
BBgwFoAUc8GJPlX2RRTb/DtrgBwW0DYJE/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC83M0MxODkzRTU1RjY0NTE0REJGQzNCNkI4MDFDMTZEMDM2MDkxM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQzE4OTNFNTVGNjQ1MTRE
QkZDM0I2QjgwMUMxNkQwMzYwOTEzRkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzODM5MmUzNTMxMmUzMTM2MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMx
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBL0zEDANBgkqhkiG9w0BAQsFAAOCAQEAy/04Plg/sIuO
PVY8Ske++seNAHZ53f9ilhthOg1tKlXRDKehvp7BgX3+0ZmZkaNDA0dOtqKsXrYv
OazkjUcJ4aXVItuzg868XLbSe93iklP0INRr5xszHU0w3nAaMDGNz6v5mnitO4N3
v0t1vaLQVMfW8m6TArVg6mrr37XMdmiWPuUfPM1hKwdegsQFqvaRAxzQ/KRAZvMM
KijuBKVr8sbN35NJ9lgC4aXgHQgB+hLmndD6cUJhqxt/pgHCRAB4YA+C9UEZQHT2
262ZkPA5p1HGfuc/VcM3vpx0HPePVXSrkP9Rz2wYGCUSKwyGMRPxNDB70F2D0Vc1
FeZn+S0dpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org