Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          qrVnbr848Gta38dUz8QVX4CZULf42vGwPmfbd8OtxVk=
Subject key identifier:   CC:B9:2A:28:C0:4B:79:35:B5:09:95:F1:83:8D:05:C7:5F:4E:A8:51
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       47B9A7BB9018D0519E1B01643104A38C7E990725
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:55 +0000
ROA not before:           Thu 04 Apr 2024 20:08:55 +0000
ROA not after:            Thu 03 Apr 2025 20:13:55 +0000
asID:                     28191
IP address blocks:        186.193.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b9:a7:bb:90:18:d0:51:9e:1b:01:64:31:04:a3:8c:7e:99:07:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:55 2024 GMT
            Not After : Apr  3 20:13:55 2025 GMT
        Subject: CN=CCB92A28C04B7935B50995F1838D05C75F4EA851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:04:72:6d:2b:ff:11:f0:9c:82:ce:f6:e2:
                    29:c5:0f:44:57:ed:3c:f8:4a:9b:44:6f:45:a6:da:
                    79:49:e3:e0:26:5c:e5:0d:0a:2b:fe:fd:3e:b7:db:
                    32:94:cb:ec:5d:38:a3:79:5e:e3:52:97:c4:61:3c:
                    61:2b:9e:58:f6:5c:34:91:a2:37:69:f6:26:c6:1a:
                    b8:fb:df:a5:41:02:58:e5:94:98:46:f4:8a:b4:07:
                    0d:1b:a9:67:5c:3d:ba:c7:2d:50:29:47:48:89:71:
                    76:68:ff:85:37:cb:d5:97:60:ef:5f:ef:e2:5f:c8:
                    40:f7:39:05:3c:69:62:f2:31:50:fe:ff:c0:dd:b2:
                    7a:ee:94:d3:51:bf:f6:c9:00:f1:a6:c2:c0:68:15:
                    8e:d3:63:26:4b:99:57:ac:52:ff:dd:be:3b:f9:0c:
                    39:bf:f1:8d:6b:cf:18:4a:c4:96:ae:e2:5a:dd:d0:
                    09:f0:dd:a4:70:c3:de:ea:7e:da:0b:50:e7:13:c9:
                    9c:54:aa:cb:14:4a:7f:45:65:3b:89:89:41:84:38:
                    84:b8:39:f0:aa:72:0f:e3:67:c6:10:29:92:e9:d1:
                    94:95:7b:a2:b9:87:1d:37:cc:71:c9:e7:bd:47:dd:
                    1f:47:ab:d1:5b:33:82:79:53:0a:4a:43:44:dd:be:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B9:2A:28:C0:4B:79:35:B5:09:95:F1:83:8D:05:C7:5F:4E:A8:51
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138302e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:61:8c:08:b4:96:ab:8e:f2:4d:cc:dc:b4:d8:41:c1:f3:
         43:06:7b:5f:6e:dd:cc:94:d3:d4:a3:06:3c:aa:34:10:9c:94:
         2b:bb:fd:cd:3b:e9:69:0f:3b:41:56:10:17:cb:25:30:1f:59:
         75:61:45:f5:19:d6:28:57:8d:21:2f:af:77:95:d7:a4:88:75:
         90:ca:1e:8a:94:30:20:41:3b:42:7a:e6:35:09:8d:cd:d5:0d:
         18:f3:74:cc:a7:a9:a9:a6:12:ea:c2:d5:6a:bd:a5:20:7b:38:
         a7:62:9d:42:b8:2e:25:c9:65:54:76:5b:ea:f9:5b:f2:de:1d:
         cf:93:13:9d:62:de:3e:d5:ac:e7:e8:af:6f:81:f1:2f:74:c1:
         62:de:21:ff:34:e4:53:01:52:f1:2e:ec:31:a7:22:33:41:f1:
         74:3a:b3:2b:68:27:e5:a5:27:64:52:c9:29:6b:55:ea:29:64:
         44:93:5f:14:52:f2:68:73:85:99:39:33:56:e6:4b:93:a1:39:
         63:6c:c3:55:af:e3:13:9b:14:4c:93:72:e7:a5:c9:af:0d:d1:
         65:a0:03:91:3b:21:69:68:88:36:cb:1c:4d:89:c0:34:9b:ae:
         d0:1b:53:7b:38:6f:1e:4c:de:14:5a:31:94:3c:af:b0:3d:03:
         81:cd:23:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR7mnu5AY0FGeGwFkMQSjjH6ZByUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg5NUVEODEzNTUzRTY3RDRGRTQ2RkY0NDdCRjQyMzU3
ODVBMTdEODAeFw0yNDA0MDQyMDA4NTVaFw0yNTA0MDMyMDEzNTVaMDMxMTAvBgNV
BAMTKENDQjkyQTI4QzA0Qjc5MzVCNTA5OTVGMTgzOEQwNUM3NUY0RUE4NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/gRybSv/EfCcgs724inFD0RX
7Tz4SptEb0Wm2nlJ4+AmXOUNCiv+/T632zKUy+xdOKN5XuNSl8RhPGErnlj2XDSR
ojdp9ibGGrj736VBAljllJhG9Iq0Bw0bqWdcPbrHLVApR0iJcXZo/4U3y9WXYO9f
7+JfyED3OQU8aWLyMVD+/8DdsnrulNNRv/bJAPGmwsBoFY7TYyZLmVesUv/dvjv5
DDm/8Y1rzxhKxJau4lrd0Anw3aRww97qftoLUOcTyZxUqssUSn9FZTuJiUGEOIS4
OfCqcg/jZ8YQKZLp0ZSVe6K5hx03zHHJ571H3R9Hq9FbM4J5UwpKQ0Tdvho1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzLkqKMBLeTW1CZXxg40Fx19OqFEwHwYDVR0j
BBgwFoAUWJXtgTVT5n1P5G/0R79CNXhaF9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMS81ODk1RUQ4MTM1NTNFNjdENEZFNDZGRjQ0N0JGNDIzNTc4NUExN0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4OTVFRDgxMzU1M0U2N0Q0
RkU0NkZGNDQ3QkY0MjM1Nzg1QTE3RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzEv
MzEzODM2MmUzMTM5MzMyZTMxMzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6wbQwDQYJKoZIhvcNAQELBQADggEBAKOQYYwI
tJarjvJNzNy02EHB80MGe19u3cyU09SjBjyqNBCclCu7/c076WkPO0FWEBfLJTAf
WXVhRfUZ1ihXjSEvr3eV16SIdZDKHoqUMCBBO0J65jUJjc3VDRjzdMynqammEurC
1Wq9pSB7OKdinUK4LiXJZVR2W+r5W/LeHc+TE51i3j7VrOfor2+B8S90wWLeIf80
5FMBUvEu7DGnIjNB8XQ6sytoJ+WlJ2RSySlrVeopZESTXxRS8mhzhZk5M1bmS5Oh
OWNsw1Wv4xObFEyTcuelya8N0WWgA5E7IWloiDbLHE2JwDSbrtAbU3s4bx5M3hRa
MZQ8r7A9A4HNI9o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org