Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e322e302f32332d3233203d3e203238313832.roa
File:                     3138392e38392e322e302f32332d3233203d3e203238313832.roa (raw, json)
Hash identifier:          hjk6Mvsnrcewtwzu8bDbmSs6+5ECzp/QxLznhh8C/m4=
Subject key identifier:   B7:C1:2B:C4:77:92:94:D4:5E:B3:70:D0:8F:DC:AF:6D:81:89:15:40
Certificate issuer:       /CN=16B9C582730C28B297957612533E707E2A6E6990
Certificate serial:       52491E94897C0176CAE14F51012EB6196568465E
Authority key identifier: 16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e322e302f32332d3233203d3e203238313832.roa
Signing time:             Fri 05 Apr 2024 01:05:15 +0000
ROA not before:           Fri 05 Apr 2024 01:00:15 +0000
ROA not after:            Fri 04 Apr 2025 01:05:15 +0000
asID:                     28182
IP address blocks:        189.89.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:49:1e:94:89:7c:01:76:ca:e1:4f:51:01:2e:b6:19:65:68:46:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B9C582730C28B297957612533E707E2A6E6990
        Validity
            Not Before: Apr  5 01:00:15 2024 GMT
            Not After : Apr  4 01:05:15 2025 GMT
        Subject: CN=B7C12BC4779294D45EB370D08FDCAF6D81891540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:d2:61:25:f9:ae:e8:18:85:86:01:0a:b7:
                    df:67:3a:e9:6b:81:f1:b2:35:a1:d9:69:65:a4:c4:
                    55:71:cd:f0:30:60:ae:b6:28:d4:92:16:37:22:37:
                    97:0b:4b:c6:93:32:a1:11:e5:bc:ec:7a:c3:5f:6b:
                    ea:b1:cc:93:31:f3:5e:30:3a:88:0a:01:ce:fd:e5:
                    bf:a3:95:b7:21:bc:2f:1a:81:cc:fb:90:00:fe:1a:
                    37:11:0c:7d:8a:49:a3:f8:45:4a:d2:c3:91:f1:c0:
                    45:b6:c8:16:e4:40:bb:5b:4c:e0:8d:d8:a6:41:78:
                    09:c2:2a:ef:7a:24:a7:e8:d4:32:83:6c:fc:fc:77:
                    bd:23:90:3b:0d:e6:21:93:0d:05:48:9a:3d:63:e2:
                    77:72:93:dd:66:ab:9f:ae:8a:52:35:2a:db:5e:3d:
                    b4:c0:a6:cc:97:fa:11:f4:de:62:46:ec:65:97:52:
                    09:52:e9:ca:f6:c4:ad:73:92:da:ff:02:3e:39:3a:
                    69:00:b4:da:e1:67:4c:97:fa:33:54:aa:e0:b3:ed:
                    66:20:ab:70:1d:ed:61:35:4a:0b:d6:68:55:be:e1:
                    67:87:0b:79:99:4b:ac:17:48:84:c8:f3:32:e7:c2:
                    4e:81:b6:0a:5a:4a:ff:9f:bb:be:ad:93:29:50:ab:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C1:2B:C4:77:92:94:D4:5E:B3:70:D0:8F:DC:AF:6D:81:89:15:40
            X509v3 Authority Key Identifier:
                keyid:16:B9:C5:82:73:0C:28:B2:97:95:76:12:53:3E:70:7E:2A:6E:69:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/16B9C582730C28B297957612533E707E2A6E6990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16B9C582730C28B297957612533E707E2A6E6990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/1/3138392e38392e322e302f32332d3233203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:2a:0f:19:9f:dd:f3:e4:e1:87:49:03:85:01:c3:03:d2:b5:
         de:1e:f1:e1:70:d9:2a:76:73:b4:67:76:1f:20:e2:73:74:88:
         1b:2b:4c:7c:fe:02:f6:25:e2:eb:da:38:23:b5:e5:ec:0b:6d:
         e2:3b:3f:2c:87:c5:a2:6d:fe:5a:01:06:cf:03:74:51:5d:c8:
         0f:4c:94:c6:7b:c8:f2:4d:60:d3:39:19:7f:7a:0d:d3:c9:da:
         7b:38:b5:58:35:05:75:fd:29:ca:c3:28:74:bd:78:48:6a:97:
         d0:7b:e1:89:a2:15:28:90:13:55:8b:73:7e:ac:2f:49:78:85:
         ba:e5:52:c2:5d:37:62:5c:0e:c7:5f:82:5b:42:a4:a8:9f:03:
         3d:13:f7:f2:f5:52:28:d9:77:e2:d9:ff:b8:de:6f:03:97:66:
         d1:80:79:ae:5a:a4:89:dc:ec:bf:b4:b1:c6:eb:0d:56:34:46:
         84:f9:f4:d3:c7:c3:21:0d:f6:f2:4a:93:2f:9f:2b:0a:c9:11:
         82:19:1e:eb:ed:4f:88:04:f2:e8:62:e3:c5:71:72:ad:99:21:
         89:2d:2b:c1:5e:08:63:6c:c7:ca:31:a9:a5:a3:6e:7d:c2:8c:
         a4:d5:70:a6:d1:ef:c0:a0:40:61:43:c9:8d:73:df:11:2c:de:
         4b:46:ee:07
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUkkelIl8AXbK4U9RAS62GWVoRl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCOUM1ODI3MzBDMjhCMjk3OTU3NjEyNTMzRTcwN0Uy
QTZFNjk5MDAeFw0yNDA0MDUwMTAwMTVaFw0yNTA0MDQwMTA1MTVaMDMxMTAvBgNV
BAMTKEI3QzEyQkM0Nzc5Mjk0RDQ1RUIzNzBEMDhGRENBRjZEODE4OTE1NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtdJhJfmu6BiFhgEKt99nOulr
gfGyNaHZaWWkxFVxzfAwYK62KNSSFjciN5cLS8aTMqER5bzsesNfa+qxzJMx814w
OogKAc795b+jlbchvC8agcz7kAD+GjcRDH2KSaP4RUrSw5HxwEW2yBbkQLtbTOCN
2KZBeAnCKu96JKfo1DKDbPz8d70jkDsN5iGTDQVImj1j4ndyk91mq5+uilI1Ktte
PbTApsyX+hH03mJG7GWXUglS6cr2xK1zktr/Aj45OmkAtNrhZ0yX+jNUquCz7WYg
q3Ad7WE1SgvWaFW+4WeHC3mZS6wXSITI8zLnwk6BtgpaSv+fu76tkylQqzlLAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUt8ErxHeSlNRes3DQj9yvbYGJFUAwHwYDVR0j
BBgwFoAUFrnFgnMMKLKXlXYSUz5wfipuaZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMS8xNkI5QzU4MjczMEMyOEIyOTc5NTc2MTI1MzNFNzA3RTJBNkU2OTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2QjlDNTgyNzMwQzI4QjI5
Nzk1NzYxMjUzM0U3MDdFMkE2RTY5OTAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzEv
MzEzODM5MmUzODM5MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzgzMTM4
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG9WQIwDQYJKoZIhvcNAQELBQADggEBAJsqDxmf3fPk4YdJ
A4UBwwPStd4e8eFw2Sp2c7Rndh8g4nN0iBsrTHz+AvYl4uvaOCO15ewLbeI7PyyH
xaJt/loBBs8DdFFdyA9MlMZ7yPJNYNM5GX96DdPJ2ns4tVg1BXX9KcrDKHS9eEhq
l9B74YmiFSiQE1WLc36sL0l4hbrlUsJdN2JcDsdfgltCpKifAz0T9/L1UijZd+LZ
/7jebwOXZtGAea5apInc7L+0scbrDVY0RoT59NPHwyEN9vJKky+fKwrJEYIZHuvt
T4gE8uhi48Vxcq2ZIYktK8FeCGNsx8oxqaWjbn3CjKTVcKbR78CgQGFDyY1z3xEs
3ktG7gc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org