Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e302e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e302e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          p9VkEiSl7qVbUM9bwGHvf0Zy/1N5Kuu8PKHwK3E4d+k=
Subject key identifier:   7A:29:FD:F2:56:48:03:9F:95:BB:4F:E3:60:B7:0C:A4:E5:FE:EF:A8
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       50FC23E354229460DB9C8D2B00A8B961160C9D39
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e302e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:11 +0000
ROA not before:           Fri 05 Apr 2024 01:00:11 +0000
ROA not after:            Fri 04 Apr 2025 01:05:11 +0000
asID:                     28182
IP address blocks:        189.89.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fc:23:e3:54:22:94:60:db:9c:8d:2b:00:a8:b9:61:16:0c:9d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:11 2024 GMT
            Not After : Apr  4 01:05:11 2025 GMT
        Subject: CN=7A29FDF25648039F95BB4FE360B70CA4E5FEEFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:f8:a5:63:ed:51:2c:b1:34:c9:1b:65:d3:
                    0b:4a:72:7b:f1:62:c2:43:c3:89:9c:59:9e:72:c2:
                    e6:a3:88:69:f4:87:a4:31:9e:69:2f:87:a0:49:84:
                    a0:ab:01:cb:84:83:3b:8d:0e:75:ba:42:13:e3:de:
                    3d:b5:ad:c5:c4:67:2b:0d:a4:8f:52:ee:f4:61:c7:
                    32:2d:94:6e:a1:6f:2e:f4:e9:e6:1d:8c:9a:70:74:
                    fe:03:9c:f4:b5:a0:4a:3c:d3:9f:24:28:ac:a7:3e:
                    68:97:0f:ec:47:c5:23:0e:34:80:e7:bd:f7:08:21:
                    a5:81:cc:b6:ab:fc:46:89:ae:08:a3:e9:15:1c:c9:
                    c0:1a:6b:b6:3e:bb:95:83:e8:af:ad:b1:de:55:a7:
                    28:24:69:5a:23:cf:db:fb:cf:8d:19:69:4e:61:79:
                    c7:3c:af:51:58:e5:15:a5:83:05:3e:86:c0:7e:b2:
                    24:64:bc:91:a3:b1:21:79:45:6b:e9:84:a5:cc:24:
                    53:2c:d8:56:fd:a2:b0:10:78:b2:dc:df:24:13:c9:
                    eb:16:e4:f4:e8:f8:c8:08:2a:45:a4:ed:2a:32:c4:
                    e2:27:1a:92:71:cc:fa:30:cb:0b:7d:fe:4d:11:6e:
                    3a:81:b9:92:2f:2d:a5:ae:a3:c4:0a:7c:d5:fd:41:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:29:FD:F2:56:48:03:9F:95:BB:4F:E3:60:B7:0C:A4:E5:FE:EF:A8
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e302e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:d8:bb:a0:8b:2a:11:40:d3:c3:8d:50:37:58:3d:e9:c5:db:
         8a:5c:bf:7e:39:a1:da:5d:ef:5b:e9:47:a6:e1:07:98:af:7b:
         51:52:0f:ae:a0:18:b8:64:69:4f:50:71:7f:86:66:21:ff:d8:
         5b:7b:e0:c9:98:eb:b6:83:ed:bd:7a:8d:0f:6c:6a:da:02:ff:
         7c:cf:1b:f1:6b:6b:85:95:58:e9:22:10:7a:a6:65:33:bf:9a:
         9d:f5:41:b9:35:ee:50:7c:5e:01:5a:ee:6f:f6:e0:28:5f:2e:
         b7:79:ce:a8:c9:e9:8a:c2:b7:1a:e6:bd:79:59:49:7a:1f:d5:
         f4:81:8f:a3:7f:a2:be:52:27:6e:be:22:a9:b3:22:d9:9f:09:
         96:7c:82:b4:93:e6:06:a8:f3:6e:b1:34:dc:bb:da:61:da:bc:
         66:fd:49:e9:76:00:4e:9f:f8:ba:ba:fe:f8:1a:38:45:8c:e1:
         0a:8e:63:f1:60:18:de:c0:bd:df:e2:d2:e3:95:e2:6e:23:9c:
         8b:78:14:c8:55:bb:b5:a1:a3:fa:df:78:f5:1d:ec:1a:58:84:
         31:cb:4b:49:77:e1:0b:56:a4:7a:e7:4c:0d:b1:9b:e6:0c:ba:
         df:5f:c4:42:07:39:21:ec:ad:7e:94:4d:7f:93:54:2f:92:cb:
         b0:d7:b0:6b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUPwj41QilGDbnI0rAKi5YRYMnTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCOUM1ODI3MzBDMjhCMjk3OTU3NjEyNTMzRTcwN0Uy
QTZFNjk5MDAeFw0yNDA0MDUwMTAwMTFaFw0yNTA0MDQwMTA1MTFaMDMxMTAvBgNV
BAMTKDdBMjlGREYyNTY0ODAzOUY5NUJCNEZFMzYwQjcwQ0E0RTVGRUVGQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY3vilY+1RLLE0yRtl0wtKcnvx
YsJDw4mcWZ5ywuajiGn0h6Qxnmkvh6BJhKCrAcuEgzuNDnW6QhPj3j21rcXEZysN
pI9S7vRhxzItlG6hby706eYdjJpwdP4DnPS1oEo8058kKKynPmiXD+xHxSMONIDn
vfcIIaWBzLar/EaJrgij6RUcycAaa7Y+u5WD6K+tsd5VpygkaVojz9v7z40ZaU5h
ecc8r1FY5RWlgwU+hsB+siRkvJGjsSF5RWvphKXMJFMs2Fb9orAQeLLc3yQTyesW
5PTo+MgIKkWk7SoyxOInGpJxzPowywt9/k0RbjqBuZIvLaWuo8QKfNX9QRtjAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUein98lZIA5+Vu0/jYLcMpOX+76gwHwYDVR0j
BBgwFoAUFrnFgnMMKLKXlXYSUz5wfipuaZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMS8xNkI5QzU4MjczMEMyOEIyOTc5NTc2MTI1MzNFNzA3RTJBNkU2OTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QjlDNTgyNzMwQzI4QjI5
Nzk1NzYxMjUzM0U3MDdFMkE2RTY5OTAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzEv
MzEzODM5MmUzODM5MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzMTM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG9WQAwDQYJKoZIhvcNAQELBQADggEBAFLYu6CLKhFA08ON
UDdYPenF24pcv345odpd71vpR6bhB5ive1FSD66gGLhkaU9QcX+GZiH/2Ft74MmY
67aD7b16jQ9satoC/3zPG/Fra4WVWOkiEHqmZTO/mp31Qbk17lB8XgFa7m/24Chf
Lrd5zqjJ6YrCtxrmvXlZSXof1fSBj6N/or5SJ26+IqmzItmfCZZ8grST5gao826x
NNy72mHavGb9Sel2AE6f+Lq6/vgaOEWM4QqOY/FgGN7Avd/i0uOV4m4jnIt4FMhV
u7Who/rfePUd7BpYhDHLS0l34QtWpHrnTA2xm+YMut9fxEIHOSHsrX6UTX+TVC+S
y7DXsGs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org