Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          qp08CjlFtucQYGPcLXAmAl0+hzCpGGCXwqtcQh11AEM=
Subject key identifier:   AB:17:FA:9E:36:AF:09:32:85:6C:2A:8B:D6:5C:EE:B3:39:99:22:F0
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       1BEAC3E86405D2993E6C92B7EAFC823069479726
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:57 +0000
ROA not before:           Thu 04 Apr 2024 20:08:57 +0000
ROA not after:            Thu 03 Apr 2025 20:13:57 +0000
asID:                     28191
IP address blocks:        186.193.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ea:c3:e8:64:05:d2:99:3e:6c:92:b7:ea:fc:82:30:69:47:97:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:57 2024 GMT
            Not After : Apr  3 20:13:57 2025 GMT
        Subject: CN=AB17FA9E36AF0932856C2A8BD65CEEB3399922F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:5f:4b:24:36:f9:5a:41:91:cc:cf:51:0b:
                    15:10:77:a1:5e:6b:42:5b:5a:bd:02:ca:89:45:c8:
                    dc:cf:b3:8a:2c:00:e9:ab:be:ae:88:20:2c:7d:d0:
                    41:c9:73:f7:da:c9:8d:6c:98:7e:60:1d:0c:fc:29:
                    c1:4a:ea:f3:fb:85:56:5c:74:ee:d9:09:13:21:78:
                    98:28:05:9c:97:f6:cc:89:68:08:ca:e3:54:61:5f:
                    e1:52:a1:91:5a:fb:8c:1e:be:f0:90:66:06:ec:2c:
                    83:1f:91:3d:9a:c5:87:c7:4e:3c:bc:38:9b:c8:c4:
                    d0:8e:a6:9a:1a:e7:5e:d4:f7:df:f9:61:33:ec:d7:
                    ae:88:0a:29:2f:66:e0:80:39:fe:b4:fa:89:eb:8a:
                    80:73:b2:52:75:0e:d5:c5:cc:cd:ac:a4:01:5b:cd:
                    d9:4c:85:aa:b6:24:a1:94:6b:e7:75:90:26:58:f2:
                    67:b6:6e:dd:6c:a4:ce:83:e6:e2:2d:fa:4f:b7:43:
                    5c:e1:b7:f5:9e:98:e9:aa:19:0d:f9:70:8d:86:19:
                    5b:84:ab:65:ca:be:f8:29:68:3e:85:31:db:41:b7:
                    f5:67:fd:79:83:11:b5:7f:2c:2c:f6:f5:56:d0:09:
                    69:c3:9d:84:c1:a2:71:10:4e:c5:cb:de:09:54:1e:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:FA:9E:36:AF:09:32:85:6C:2A:8B:D6:5C:EE:B3:39:99:22:F0
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3137382e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:ca:e8:6d:4a:d9:d6:08:ef:fc:20:52:95:a9:35:29:42:
         34:3f:1e:01:f6:22:14:00:79:9f:3b:82:49:46:ec:c5:57:2e:
         55:f8:37:fb:f4:8c:52:04:f6:64:5c:8e:e7:0d:e0:b7:9d:65:
         c5:26:41:c4:10:bc:c7:37:ff:41:f5:a2:a0:07:f0:54:fa:bc:
         5a:c7:c7:a0:2d:df:a5:b3:2b:da:96:db:ce:23:b5:ab:50:6f:
         b8:ca:2a:3c:07:bc:74:ab:49:4b:3a:74:39:40:dc:2b:47:46:
         2b:e1:a4:a8:a1:6b:c7:39:5f:f5:62:45:54:84:62:3d:41:3e:
         d6:60:67:a6:c2:b8:b7:6a:24:64:c7:79:6c:08:1d:ce:d5:b7:
         23:e8:98:01:8f:25:7c:cb:66:a0:01:0c:ee:f9:6e:8a:2b:6e:
         a9:74:26:8b:76:08:ed:a8:95:61:60:89:b8:b1:2a:da:89:88:
         0f:4a:09:35:42:88:e5:36:56:99:bb:c7:bb:b6:31:e1:f0:e4:
         b1:61:b0:44:fc:25:24:4c:99:90:07:10:cb:bb:13:c3:77:6d:
         38:e8:6e:8c:6c:77:7b:43:94:8e:a4:23:ef:86:d1:90:12:8f:
         ef:ef:7a:bb:b8:d3:98:01:40:e2:a9:33:50:33:6e:26:fb:7c:
         e9:f3:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org