Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          rwmJMjwFc6AD4wweny6BJ0LgWMywnhlW31KDWu5li+I=
Subject key identifier:   AC:45:AE:BE:D5:3B:14:4B:0B:4D:50:02:16:CC:3D:4C:0B:D1:A8:8F
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       62632AF2210CA2CC36D479CF3D229F77716709FC
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        186.193.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:2a:f2:21:0c:a2:cc:36:d4:79:cf:3d:22:9f:77:71:67:09:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=AC45AEBED53B144B0B4D500216CC3D4C0BD1A88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:58:74:27:c5:6f:a5:bb:65:eb:36:a8:53:
                    1b:43:5b:a9:db:9e:51:a1:b6:e4:ff:58:76:76:f8:
                    84:17:41:05:8d:65:6a:64:61:3a:6c:4d:e9:e5:89:
                    16:2e:ee:4e:56:5e:2e:21:b3:b7:20:e0:8c:29:50:
                    98:dd:da:64:fd:f2:51:74:19:75:53:aa:31:c8:b0:
                    ef:41:04:93:d8:2f:1d:26:ee:fb:c8:1e:3e:3e:a6:
                    57:dc:4f:10:e1:c7:a6:00:f0:1b:24:08:da:8b:c2:
                    f9:c1:96:ca:69:45:70:57:58:29:2a:38:0b:6a:8c:
                    cf:7f:0c:f4:98:60:50:21:28:6d:e4:d8:cd:38:0f:
                    63:0a:20:2b:dc:0d:79:89:d9:94:59:ac:23:34:31:
                    14:a1:34:c1:eb:b5:0d:0c:b3:81:07:34:75:02:2d:
                    fc:43:26:fd:87:6e:39:8f:75:3e:5d:e7:75:c6:0d:
                    fb:7b:d1:80:43:53:00:8a:1a:d6:a3:ae:35:eb:72:
                    a0:86:18:3d:b8:64:0d:f3:5c:af:a5:ba:21:23:a8:
                    71:e6:4f:57:d3:2c:f6:3a:ca:41:b7:3d:26:66:93:
                    2a:fc:70:ef:28:7a:da:c9:90:31:c9:a7:7e:6c:da:
                    4c:f1:8c:c6:10:ac:15:c0:4a:8c:c6:b7:69:9f:f1:
                    6b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:45:AE:BE:D5:3B:14:4B:0B:4D:50:02:16:CC:3D:4C:0B:D1:A8:8F
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138302e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:d2:49:f7:38:fa:ca:5b:ae:36:21:97:12:89:a4:31:c4:
         1b:de:51:d5:67:6e:cb:16:03:6b:15:2d:c9:14:78:7a:17:dc:
         54:8e:58:fa:a2:99:4e:ee:f5:50:ae:91:15:fe:fd:2a:5e:13:
         bc:6b:84:b8:8d:fa:11:6a:09:cd:87:6b:6e:b9:9c:e9:6c:1d:
         eb:8b:6f:48:f5:11:28:1a:70:5d:23:1d:75:f5:d7:a8:a1:b9:
         6e:40:41:80:ee:52:b0:74:1f:74:95:6d:b5:25:d6:cc:6e:71:
         e7:dc:25:c1:ab:94:36:9e:d3:55:8b:7c:15:a8:70:27:5b:7a:
         bb:da:1b:ec:c6:02:d6:24:ce:84:0a:ce:d1:5d:29:a4:fe:49:
         00:fd:c4:a5:d4:78:0a:61:7e:0f:82:4f:09:3b:98:17:a2:d6:
         0b:ef:0e:ba:39:08:b3:8b:42:4d:ec:69:20:87:c7:05:a4:40:
         44:2d:b8:72:8d:30:e6:e3:8b:62:3b:d5:d2:bd:4e:48:7e:92:
         f1:93:48:06:c1:83:b8:06:8e:0f:f7:ec:24:b8:c0:7d:77:17:
         8e:d5:cd:fd:bc:1c:76:76:eb:a9:f8:57:06:45:5d:71:52:bd:
         87:3f:bc:84:0e:ca:81:d1:9f:d4:99:00:2c:fa:6b:04:93:c4:
         e1:23:1b:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYmMq8iEMosw21HnPPSKfd3FnCfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg5NUVEODEzNTUzRTY3RDRGRTQ2RkY0NDdCRjQyMzU3
ODVBMTdEODAeFw0yNDA0MDQyMDA5MDFaFw0yNTA0MDMyMDE0MDFaMDMxMTAvBgNV
BAMTKEFDNDVBRUJFRDUzQjE0NEIwQjRENTAwMjE2Q0MzRDRDMEJEMUE4OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y1h0J8Vvpbtl6zaoUxtDW6nb
nlGhtuT/WHZ2+IQXQQWNZWpkYTpsTenliRYu7k5WXi4hs7cg4IwpUJjd2mT98lF0
GXVTqjHIsO9BBJPYLx0m7vvIHj4+plfcTxDhx6YA8BskCNqLwvnBlsppRXBXWCkq
OAtqjM9/DPSYYFAhKG3k2M04D2MKICvcDXmJ2ZRZrCM0MRShNMHrtQ0Ms4EHNHUC
LfxDJv2HbjmPdT5d53XGDft70YBDUwCKGtajrjXrcqCGGD24ZA3zXK+luiEjqHHm
T1fTLPY6ykG3PSZmkyr8cO8oetrJkDHJp35s2kzxjMYQrBXASozGt2mf8WufAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrEWuvtU7FEsLTVACFsw9TAvRqI8wHwYDVR0j
BBgwFoAUWJXtgTVT5n1P5G/0R79CNXhaF9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMS81ODk1RUQ4MTM1NTNFNjdENEZFNDZGRjQ0N0JGNDIzNTc4NUExN0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4OTVFRDgxMzU1M0U2N0Q0
RkU0NkZGNDQ3QkY0MjM1Nzg1QTE3RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzEv
MzEzODM2MmUzMTM5MzMyZTMxMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wbQwDQYJKoZIhvcNAQELBQADggEBAByP0kn3
OPrKW642IZcSiaQxxBveUdVnbssWA2sVLckUeHoX3FSOWPqimU7u9VCukRX+/Spe
E7xrhLiN+hFqCc2Ha265nOlsHeuLb0j1ESgacF0jHXX116ihuW5AQYDuUrB0H3SV
bbUl1sxucefcJcGrlDae01WLfBWocCdbervaG+zGAtYkzoQKztFdKaT+SQD9xKXU
eAphfg+CTwk7mBei1gvvDro5CLOLQk3saSCHxwWkQEQtuHKNMObji2I71dK9Tkh+
kvGTSAbBg7gGjg/37CS4wH13F47Vzf28HHZ266n4VwZFXXFSvYc/vIQOyoHRn9SZ
ACz6awSTxOEjG3E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org