Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          WPX6SsJv4ExztruPdWFpfM+PWQsKcoDv4oIdYWVFLiU=
Subject key identifier:   CE:15:03:E8:0B:72:90:E4:FE:84:8D:C8:E8:86:6A:D2:B2:14:23:9D
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       69241890599A831E8251E7487F7DDABBA9DE7519
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:02 +0000
ROA not before:           Thu 04 Apr 2024 20:09:02 +0000
ROA not after:            Thu 03 Apr 2025 20:14:02 +0000
asID:                     28191
IP address blocks:        186.193.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:18:90:59:9a:83:1e:82:51:e7:48:7f:7d:da:bb:a9:de:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:02 2024 GMT
            Not After : Apr  3 20:14:02 2025 GMT
        Subject: CN=CE1503E80B7290E4FE848DC8E8866AD2B214239D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:47:8d:e4:5f:a0:62:e1:9e:80:b8:cc:c2:
                    d8:b4:b5:27:26:ff:c8:8b:96:e6:7f:0c:fc:00:68:
                    5f:7d:fb:0f:71:c7:77:7c:b4:3a:59:b2:38:e3:d1:
                    40:67:e0:69:e0:d3:d7:b4:84:33:d4:28:26:26:b6:
                    15:44:3b:b5:72:77:8a:44:47:be:af:d3:9f:6d:6c:
                    c9:4a:a4:b1:65:a8:a6:e0:4e:db:f6:8b:8b:02:c9:
                    ee:55:25:75:6e:27:91:6a:88:f1:83:93:c2:0c:b7:
                    20:07:21:bc:a2:0f:67:67:cc:97:d1:83:00:23:b6:
                    ff:5a:a8:f0:5a:8a:23:2d:a1:11:7f:69:bf:d4:37:
                    44:75:1c:de:e8:ef:ef:a8:e0:ee:2e:98:4e:32:1f:
                    e9:27:a6:ce:3a:e0:fc:41:0d:0d:2b:7d:74:91:ca:
                    61:62:c3:89:c6:20:dc:ba:ba:4f:b6:26:ae:3a:b4:
                    e4:1c:29:13:ea:33:fb:c8:7a:63:47:f0:d6:59:c5:
                    ae:55:02:b2:05:4e:03:16:41:1b:3e:cb:13:57:da:
                    f5:07:9c:aa:52:8b:68:1f:38:5a:d3:71:9a:28:ee:
                    73:95:29:11:31:bd:f8:fb:35:3a:03:46:9b:1b:69:
                    f2:01:a9:d5:95:00:2d:61:9c:1d:0c:85:ea:3d:b1:
                    18:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:15:03:E8:0B:72:90:E4:FE:84:8D:C8:E8:86:6A:D2:B2:14:23:9D
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:c1:be:42:09:b4:6b:2f:86:33:85:ac:48:5b:df:f7:f8:
         98:89:2e:c3:5f:ad:52:b8:92:3e:f1:1e:6f:d2:b2:fe:2d:47:
         7b:78:08:04:32:00:e3:b0:6a:55:03:0b:12:ec:fb:90:83:83:
         72:9e:94:7c:9a:f9:39:4a:85:b3:df:4f:00:2c:00:1b:c0:68:
         f4:77:01:6c:a8:b7:41:b4:51:68:d0:45:56:b0:91:24:89:b9:
         47:14:28:20:24:6a:17:9f:b0:c0:13:f8:7a:f7:89:4f:e5:ea:
         e5:56:0c:e0:9c:eb:c3:9e:3e:ab:55:aa:57:e6:f9:3a:b2:38:
         c7:00:c2:0f:9d:b3:fc:08:3a:3d:b7:3f:3c:63:c4:e8:5b:7b:
         78:14:47:b6:af:f9:fa:f4:9e:b3:0c:3d:15:e1:9a:e1:60:5a:
         ff:6d:69:bf:a0:9d:7d:c7:7e:9e:1b:2d:ac:42:35:76:9b:df:
         85:83:ec:83:ed:a2:55:7f:85:47:fa:a8:0a:54:d7:28:92:91:
         43:e6:33:84:65:18:1e:62:18:b3:71:7b:d6:3e:e1:1d:ac:28:
         d0:46:44:c9:d6:7b:bd:2f:af:46:8d:92:c3:cd:35:a8:ff:b5:
         1d:e4:ab:38:84:7a:87:42:30:a4:1a:21:8d:f9:ac:c0:9a:80:
         3d:4b:12:51
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaSQYkFmagx6CUedIf33au6nedRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg5NUVEODEzNTUzRTY3RDRGRTQ2RkY0NDdCRjQyMzU3
ODVBMTdEODAeFw0yNDA0MDQyMDA5MDJaFw0yNTA0MDMyMDE0MDJaMDMxMTAvBgNV
BAMTKENFMTUwM0U4MEI3MjkwRTRGRTg0OERDOEU4ODY2QUQyQjIxNDIzOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEUeN5F+gYuGegLjMwti0tScm
/8iLluZ/DPwAaF99+w9xx3d8tDpZsjjj0UBn4Gng09e0hDPUKCYmthVEO7Vyd4pE
R76v059tbMlKpLFlqKbgTtv2i4sCye5VJXVuJ5FqiPGDk8IMtyAHIbyiD2dnzJfR
gwAjtv9aqPBaiiMtoRF/ab/UN0R1HN7o7++o4O4umE4yH+knps464PxBDQ0rfXSR
ymFiw4nGINy6uk+2Jq46tOQcKRPqM/vIemNH8NZZxa5VArIFTgMWQRs+yxNX2vUH
nKpSi2gfOFrTcZoo7nOVKRExvfj7NToDRpsbafIBqdWVAC1hnB0Mheo9sRiFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzhUD6AtykOT+hI3I6IZq0rIUI50wHwYDVR0j
BBgwFoAUWJXtgTVT5n1P5G/0R79CNXhaF9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMS81ODk1RUQ4MTM1NTNFNjdENEZFNDZGRjQ0N0JGNDIzNTc4NUExN0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4OTVFRDgxMzU1M0U2N0Q0
RkU0NkZGNDQ3QkY0MjM1Nzg1QTE3RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzEv
MzEzODM2MmUzMTM5MzMyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6wbYwDQYJKoZIhvcNAQELBQADggEBAA37wb5C
CbRrL4YzhaxIW9/3+JiJLsNfrVK4kj7xHm/Ssv4tR3t4CAQyAOOwalUDCxLs+5CD
g3KelHya+TlKhbPfTwAsABvAaPR3AWyot0G0UWjQRVawkSSJuUcUKCAkahefsMAT
+Hr3iU/l6uVWDOCc68OePqtVqlfm+TqyOMcAwg+ds/wIOj23PzxjxOhbe3gUR7av
+fr0nrMMPRXhmuFgWv9tab+gnX3Hfp4bLaxCNXab34WD7IPtolV/hUf6qApU1yiS
kUPmM4RlGB5iGLNxe9Y+4R2sKNBGRMnWe70vr0aNksPNNaj/tR3kqziEeodCMKQa
IY35rMCagD1LElE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org