Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
File:                     3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa (raw, json)
Hash identifier:          CMiJoaHPAULh2qIPe8PV0Czfc+I8B2nuYC+7zZWL5+U=
Subject key identifier:   71:EE:E9:44:5A:61:BE:79:69:D6:66:FB:C9:69:DA:42:B5:E5:54:AA
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       310440EE1E1B5A68215A6F158C83ECE5CA516B0B
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:13 +0000
ROA not before:           Fri 05 Apr 2024 01:00:13 +0000
ROA not after:            Fri 04 Apr 2025 01:05:13 +0000
asID:                     28182
IP address blocks:        170.231.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:04:40:ee:1e:1b:5a:68:21:5a:6f:15:8c:83:ec:e5:ca:51:6b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:13 2024 GMT
            Not After : Apr  4 01:05:13 2025 GMT
        Subject: CN=71EEE9445A61BE7969D666FBC969DA42B5E554AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:fe:e0:f3:9d:2f:ba:42:96:43:a9:03:e3:
                    b1:cd:1f:bc:5e:b0:80:31:88:5a:76:ea:8c:61:7e:
                    a4:33:c5:f9:a5:10:9f:f2:e6:f3:6c:ae:5f:78:d6:
                    d7:39:d3:02:cc:ce:c7:a5:47:c9:fa:87:16:a1:b2:
                    da:a2:eb:a4:03:6d:bc:4a:67:d0:df:b0:8a:0a:9b:
                    20:e3:f5:29:e9:8a:eb:76:97:f1:5e:ee:88:7d:00:
                    0d:05:14:00:f8:1a:94:4e:cd:9c:5a:ff:5f:7a:9d:
                    78:25:22:92:aa:91:2f:4c:17:e7:08:ad:10:3c:3f:
                    dd:b8:88:5c:0c:32:9e:c7:55:fd:a3:f5:08:ad:ba:
                    98:f3:1c:5c:d4:d8:85:e5:dd:dc:b4:81:65:54:30:
                    03:01:ad:c4:d5:31:3b:3a:1e:0c:58:1c:f9:7c:90:
                    5f:6e:72:fe:e9:7b:fd:eb:cb:35:35:01:69:ee:0d:
                    f1:8f:56:15:4a:03:ca:0f:1b:88:77:e2:0c:17:dc:
                    1e:d1:a5:47:e8:40:05:f6:da:2e:63:e4:1f:06:d6:
                    7b:2e:f9:c4:2a:1c:b5:95:65:a6:78:2f:20:09:0f:
                    cc:e5:d1:2e:f7:03:de:10:6e:c7:60:c1:3e:08:17:
                    8a:f7:49:b5:eb:f0:d4:f1:bd:7a:d1:79:90:a2:83:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EE:E9:44:5A:61:BE:79:69:D6:66:FB:C9:69:DA:42:B5:E5:54:AA
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3137302e3233312e3133322e302f32322d3232203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:b9:e9:4e:f3:7c:a4:b3:dc:af:bf:2e:4f:b0:50:de:28:
         08:24:84:59:73:5a:b4:09:8a:67:67:ea:71:4a:e0:fc:fe:9a:
         05:57:dd:ed:4a:bd:58:2d:5c:75:da:48:fa:27:3a:57:c9:e7:
         61:a1:b3:1e:28:fc:3d:7c:3f:e0:84:a1:9d:45:b9:ec:e8:a2:
         6a:b3:2e:12:33:37:56:ba:34:00:c3:18:c8:15:64:55:33:5b:
         5f:00:28:3c:86:b9:f9:79:f2:ca:9c:8d:04:e6:aa:69:90:0d:
         f3:0d:1f:72:7a:cd:0f:74:0d:dd:8d:87:fc:71:3d:b0:51:2b:
         82:6a:2a:31:2d:bb:33:88:22:e4:d1:66:28:07:37:1e:72:b8:
         94:06:89:94:5b:98:22:6c:ef:62:c8:9a:7e:1a:d4:45:e6:96:
         ec:01:8c:3e:92:8c:f2:5e:af:23:07:39:0b:c3:a4:13:4f:b7:
         69:1a:50:a8:7a:f9:01:c0:0a:2c:4a:9c:50:89:ef:5d:1d:75:
         4f:1c:d5:bc:e1:62:59:ff:70:83:43:fb:b1:39:72:5b:92:4c:
         43:52:d1:3f:f3:7e:91:c7:31:2f:cf:c6:38:91:5d:4b:18:1d:
         30:6b:ea:76:34:05:19:81:a0:3f:f8:3c:45:eb:cf:86:f3:0b:
         bc:9a:e7:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMQRA7h4bWmghWm8VjIPs5cpRawswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCOUM1ODI3MzBDMjhCMjk3OTU3NjEyNTMzRTcwN0Uy
QTZFNjk5MDAeFw0yNDA0MDUwMTAwMTNaFw0yNTA0MDQwMTA1MTNaMDMxMTAvBgNV
BAMTKDcxRUVFOTQ0NUE2MUJFNzk2OUQ2NjZGQkM5NjlEQTQyQjVFNTU0QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ef7g850vukKWQ6kD47HNH7xe
sIAxiFp26oxhfqQzxfmlEJ/y5vNsrl941tc50wLMzselR8n6hxahstqi66QDbbxK
Z9DfsIoKmyDj9Snpiut2l/Fe7oh9AA0FFAD4GpROzZxa/196nXglIpKqkS9MF+cI
rRA8P924iFwMMp7HVf2j9QitupjzHFzU2IXl3dy0gWVUMAMBrcTVMTs6HgxYHPl8
kF9ucv7pe/3ryzU1AWnuDfGPVhVKA8oPG4h34gwX3B7RpUfoQAX22i5j5B8G1nsu
+cQqHLWVZaZ4LyAJD8zl0S73A94QbsdgwT4IF4r3SbXr8NTxvXrReZCig3xFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUce7pRFphvnlp1mb7yWnaQrXlVKowHwYDVR0j
BBgwFoAUFrnFgnMMKLKXlXYSUz5wfipuaZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMS8xNkI5QzU4MjczMEMyOEIyOTc5NTc2MTI1MzNFNzA3RTJBNkU2OTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QjlDNTgyNzMwQzI4QjI5
Nzk1NzYxMjUzM0U3MDdFMkE2RTY5OTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzEv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq54QwDQYJKoZIhvcNAQELBQADggEBAKTduelO
83yks9yvvy5PsFDeKAgkhFlzWrQJimdn6nFK4Pz+mgVX3e1KvVgtXHXaSPonOlfJ
52Ghsx4o/D18P+CEoZ1FuezoomqzLhIzN1a6NADDGMgVZFUzW18AKDyGufl58sqc
jQTmqmmQDfMNH3J6zQ90Dd2Nh/xxPbBRK4JqKjEtuzOIIuTRZigHNx5yuJQGiZRb
mCJs72LImn4a1EXmluwBjD6SjPJeryMHOQvDpBNPt2kaUKh6+QHACixKnFCJ710d
dU8c1bzhYln/cIND+7E5cluSTENS0T/zfpHHMS/PxjiRXUsYHTBr6nY0BRmBoD/4
PEXrz4bzC7ya56w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org