Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa
File:                     3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier:          06z32nhCDau7AOh/lp39GsqGywRvK4/yiOrtJxLUnio=
Subject key identifier:   43:36:CE:BC:E2:9F:68:28:99:43:A0:12:C3:64:06:AC:E1:7E:36:92
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       36CBCD9DAC4DC7CBD46756A9AB995BC1EBFD4BCE
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        186.193.184.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cb:cd:9d:ac:4d:c7:cb:d4:67:56:a9:ab:99:5b:c1:eb:fd:4b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=4336CEBCE29F68289943A012C36406ACE17E3692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:bb:67:cf:6a:4b:7c:30:4e:c0:f5:9b:bc:
                    d7:08:94:a0:3a:75:b6:fe:e3:4e:db:60:33:02:90:
                    c9:cd:3d:19:3e:0c:de:51:b5:7b:d8:72:8e:61:83:
                    94:36:e9:d8:a5:1c:bb:7f:fe:0e:d7:27:e9:11:6b:
                    03:d1:0d:92:b9:d0:4f:ab:b6:66:3f:3f:09:bb:03:
                    a2:3d:dd:6e:75:84:92:e1:45:83:9e:15:c7:f4:d8:
                    bd:e2:51:7b:20:84:85:04:60:eb:78:57:8a:ac:be:
                    db:b9:e0:12:a6:93:4b:1b:71:22:28:fe:01:12:45:
                    f3:a6:e9:a3:58:b2:c8:a6:c6:c6:50:52:4d:45:b5:
                    3c:17:de:4b:af:11:e6:07:35:96:17:dd:d9:94:ee:
                    36:b4:f6:3b:b6:f0:e6:e8:9a:d7:b8:c9:39:8c:c9:
                    87:43:5c:38:16:d7:42:93:d1:2f:ff:f1:a3:0b:e9:
                    cd:00:b8:83:0d:ed:08:03:fb:28:26:0e:e7:71:e0:
                    63:58:91:09:f1:23:f4:6e:27:62:12:bc:e4:d4:8d:
                    4e:84:60:8c:2a:58:11:66:28:50:5f:b2:9c:34:6d:
                    97:87:81:2e:b7:a5:81:a3:c2:8d:d3:08:fd:36:c1:
                    10:af:c5:09:10:af:2a:d6:31:85:c5:72:ab:39:0b:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:36:CE:BC:E2:9F:68:28:99:43:A0:12:C3:64:06:AC:E1:7E:36:92
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32312d3231203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:5c:77:7f:8d:ff:03:6e:b3:3e:69:13:90:e0:a8:1f:ad:
         44:53:16:3d:b9:59:a0:0c:ea:43:8a:c0:27:b9:82:41:fb:4b:
         4e:56:e6:44:d4:53:0f:82:c5:e0:1d:32:0e:8e:70:d3:40:48:
         7b:e2:4d:90:0d:a8:8c:56:38:3e:84:ac:fb:9a:cb:ab:16:cd:
         54:1d:ba:4a:21:ca:29:7a:6f:4b:8b:ff:3f:50:44:a3:f2:fa:
         ec:9d:3d:af:db:bd:6b:bb:45:58:35:cc:5f:bb:57:53:13:70:
         12:16:77:eb:d2:c3:f6:fe:a8:6b:a3:10:3d:c1:d6:4a:5d:88:
         3e:1f:4c:aa:3b:49:86:db:22:8a:72:43:1c:25:3b:73:3a:cb:
         ce:0d:d5:78:99:71:ce:42:87:6f:76:ff:3c:14:29:ad:4f:9a:
         05:3c:09:bb:a7:68:c3:53:93:f3:8d:8b:e0:35:31:4c:db:94:
         d9:32:fb:61:ed:c1:18:28:bd:0d:57:a4:44:92:1a:8d:23:27:
         af:f0:8b:a1:de:d1:b1:4a:77:e9:3c:43:71:24:60:5d:d7:e2:
         b6:69:90:6b:4a:06:99:a0:58:fd:36:2c:54:0b:64:1c:d7:0b:
         33:d5:f5:a0:ac:1e:00:d4:04:4e:4b:f7:86:aa:43:c1:8b:19:
         98:17:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org