Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          9XYguQN9qQMyayNTGbqpAf3UwnQL6vcF7HrqVMKtXkE=
Subject key identifier:   AE:43:A6:6B:16:69:EF:83:8F:E8:0A:CE:8F:DA:45:D1:26:71:49:51
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       579467CDA7A2E887E8EDE207A06CEE1DB61FE893
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:03 +0000
ROA not before:           Thu 04 Apr 2024 20:09:03 +0000
ROA not after:            Thu 03 Apr 2025 20:14:03 +0000
asID:                     28191
IP address blocks:        186.193.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:94:67:cd:a7:a2:e8:87:e8:ed:e2:07:a0:6c:ee:1d:b6:1f:e8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:03 2024 GMT
            Not After : Apr  3 20:14:03 2025 GMT
        Subject: CN=AE43A66B1669EF838FE80ACE8FDA45D126714951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:74:20:1a:dd:ab:db:30:28:fb:90:41:6a:
                    30:6f:84:11:af:91:50:ac:73:c1:52:38:fb:40:9d:
                    e8:8d:25:ef:6f:78:a5:04:ba:29:59:6d:c3:ad:59:
                    9a:02:1a:14:84:99:08:6e:2a:25:57:0c:a2:77:33:
                    0a:67:40:e8:3a:40:23:c3:8f:c0:b1:a5:35:61:8b:
                    b8:8d:64:03:95:b8:d2:c9:22:58:55:02:e2:a2:45:
                    88:c9:d0:ee:76:55:cf:49:18:b9:34:6a:84:be:ab:
                    83:93:04:71:3a:dc:a9:b6:95:06:f1:7f:4a:71:00:
                    10:90:b1:d9:ce:76:86:eb:04:8f:75:f6:82:ef:d1:
                    14:a3:ba:e3:2f:6d:04:10:84:a3:73:38:2d:a8:23:
                    7b:49:2c:d4:fd:f8:18:4b:e2:ed:62:51:7f:f9:27:
                    19:72:0a:d1:38:dd:ac:65:0b:13:d6:e4:c0:46:48:
                    c1:ac:2b:f6:e6:33:e2:0b:6c:60:95:ca:4a:eb:39:
                    53:33:63:a1:ba:fb:de:f1:48:96:fb:e0:a9:e6:9b:
                    de:60:8c:85:76:9f:40:d9:ef:11:a6:31:ac:a4:60:
                    2b:dd:1f:f8:1e:3f:b9:aa:ea:64:bc:e5:e2:d2:e9:
                    f1:f9:31:7b:2d:d4:be:32:27:51:c9:4d:e8:37:b1:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:43:A6:6B:16:69:EF:83:8F:E8:0A:CE:8F:DA:45:D1:26:71:49:51
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:a7:66:6a:c9:11:fd:c8:81:53:84:8d:ec:a0:3a:af:58:
         17:3c:e2:c3:ba:a4:79:e1:63:46:db:ea:a3:ad:50:5f:4c:db:
         05:3d:51:dc:9d:49:ba:81:2e:49:65:e1:a3:3c:53:da:a2:bf:
         80:87:82:59:d7:03:c9:1d:13:ff:3f:cb:4b:4f:db:02:b1:83:
         27:95:47:00:4c:7a:a4:2c:db:4a:19:8f:0f:ab:8c:c9:1a:5f:
         86:09:c4:5b:4f:06:13:16:c8:69:d5:37:9a:43:75:61:2a:08:
         0d:70:5b:10:d2:2e:86:ea:a4:93:c2:22:bc:c1:f9:43:d9:ee:
         dd:13:77:e6:40:2a:ed:12:86:8f:4e:ae:0c:46:d2:65:c1:22:
         a2:d0:62:4e:75:22:7c:fc:5f:3c:97:d3:70:d2:3e:ac:f3:95:
         00:27:4f:61:d7:69:bc:3b:61:92:89:c8:e0:4a:d9:d2:c1:b3:
         2b:b8:48:39:de:d0:74:15:2a:89:57:0a:de:53:bb:12:93:cd:
         07:2f:e2:38:1f:ae:b4:97:ed:56:0a:ee:a6:51:39:78:80:ff:
         7c:33:45:dc:e1:da:ac:db:a5:7b:30:6d:cb:2c:a3:ae:20:46:
         e8:ae:d3:16:76:9f:8b:15:f6:a5:7a:4e:56:8c:d8:dd:f1:7a:
         3e:f2:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org