Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137362e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3137362e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          ER2EM3u13ly9FWzUxuvqWRAZEbqy54pi8DAezt1GVgI=
Subject key identifier:   C5:FD:B6:C0:65:7D:4E:7C:12:9F:E4:36:EF:D1:13:FF:71:D0:03:1B
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       436DC291C261C9FA3100EA1D7085531F4243AF63
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137362e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        186.193.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6d:c2:91:c2:61:c9:fa:31:00:ea:1d:70:85:53:1f:42:43:af:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=C5FDB6C0657D4E7C129FE436EFD113FF71D0031B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bd:3d:11:63:c5:2c:6f:ed:06:11:c1:78:0e:
                    00:b4:39:36:64:dd:ef:0c:c7:1f:84:aa:7b:bb:19:
                    94:42:b7:c4:b2:d9:be:7c:5d:8e:0a:c1:3e:8e:ee:
                    32:d6:b2:b4:52:54:a3:77:55:33:da:16:16:a6:be:
                    2f:ee:20:18:80:5f:68:c1:78:0a:22:43:82:b6:b0:
                    84:6e:7f:bc:a5:9e:2e:d5:0a:34:33:a6:a0:d3:4c:
                    16:fb:00:87:cb:3c:4a:fa:f0:10:69:7b:69:f3:7a:
                    ec:26:d4:ad:15:c1:2e:31:4e:bb:0f:e0:72:65:64:
                    03:b0:b5:17:28:54:0c:51:45:86:03:72:6c:26:cc:
                    04:2a:a8:17:a7:7c:18:fe:c4:61:bf:c2:c2:29:7b:
                    4f:ba:e5:94:68:97:e7:35:1c:c6:ab:58:e6:ad:e8:
                    f5:e4:b2:10:42:76:c2:c2:02:7c:a8:e4:24:69:e0:
                    2c:98:44:99:b3:ee:85:16:db:b2:f2:9a:58:10:47:
                    55:d9:e9:74:19:cc:67:6f:f5:de:18:e9:55:7b:56:
                    15:da:d6:80:53:08:5c:6e:4b:02:e5:81:40:f8:cb:
                    a2:63:b3:57:36:de:e9:27:f1:39:ee:39:4a:cf:18:
                    33:c9:3c:26:f0:56:2f:ca:91:b9:7c:de:f8:5d:4c:
                    03:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FD:B6:C0:65:7D:4E:7C:12:9F:E4:36:EF:D1:13:FF:71:D0:03:1B
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137362e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b2:20:ee:75:e8:37:09:6a:ff:68:18:b9:b4:7b:f0:1c:2c:
         1b:6e:eb:53:22:1d:a6:dc:a5:b7:cd:92:e1:b1:86:9f:4d:f1:
         eb:22:d2:ce:5b:52:2e:19:d2:5b:2a:8a:e0:8c:4e:ef:2c:6f:
         a8:26:d1:6a:59:14:c7:24:49:5c:12:15:28:32:87:ed:0d:57:
         55:ea:29:58:d8:6c:9d:ff:dd:b6:28:e9:b1:db:ce:89:57:9f:
         e0:b0:ad:67:21:15:34:87:a7:dc:ba:3a:08:92:15:a7:2e:b0:
         c4:95:60:ac:a6:b6:c1:49:fb:29:54:94:28:e4:e7:ad:d6:f9:
         f0:13:c7:35:24:b9:bc:bc:99:e4:b7:1b:d2:f1:67:fe:5a:40:
         87:f4:74:1d:ce:8d:99:10:a0:92:c2:cb:70:df:7d:eb:96:a4:
         cf:07:11:36:fa:49:f1:38:bd:ba:1b:29:a2:01:02:80:46:4c:
         4a:04:ae:68:14:fc:40:46:3f:35:a8:ac:0c:26:ea:26:f4:c4:
         32:6c:88:c1:25:5b:59:f6:e4:9d:01:de:a7:2f:20:c5:0b:e4:
         27:89:b7:13:78:3e:37:cf:2a:eb:1f:43:58:bc:e1:25:29:7f:
         81:9b:c1:f1:5f:61:23:e3:97:13:7b:23:d1:05:fb:a1:cb:94:
         2b:b1:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org