Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          qKgsjMWHNk5cY/WW5EOY+AhUNLvdtbrdgCgCbbrZruQ=
Subject key identifier:   B1:69:6F:3C:38:8C:BE:06:F6:F3:D6:CF:A7:CE:DF:B0:C3:F0:54:AC
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       3D2AA0AE28F6BC4756711A347B62AEDAC0002E1C
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:57 +0000
ROA not before:           Thu 04 Apr 2024 20:08:57 +0000
ROA not after:            Thu 03 Apr 2025 20:13:57 +0000
asID:                     28191
IP address blocks:        186.193.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2a:a0:ae:28:f6:bc:47:56:71:1a:34:7b:62:ae:da:c0:00:2e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:57 2024 GMT
            Not After : Apr  3 20:13:57 2025 GMT
        Subject: CN=B1696F3C388CBE06F6F3D6CFA7CEDFB0C3F054AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:6e:29:61:8d:af:7c:76:7d:9b:36:e1:f6:
                    32:cc:d4:50:07:a3:68:37:46:8a:1d:09:79:67:59:
                    0d:06:b6:0c:09:56:9e:6d:db:9f:66:c4:bf:3e:2c:
                    cc:1a:22:ab:3e:f6:02:95:62:77:19:7a:7f:28:39:
                    cf:32:23:0b:c6:c8:c6:d1:24:7a:08:f5:6e:91:cd:
                    db:86:26:85:f2:24:0d:7a:26:c3:e7:d3:e7:63:f7:
                    b3:8e:8d:92:31:1e:fc:2a:ec:6a:63:9a:18:4c:1d:
                    4b:86:e8:ef:83:c2:37:65:bb:4b:ad:31:d1:d1:07:
                    2f:59:48:f4:ba:00:dd:c4:a1:23:44:f7:91:a2:8b:
                    e8:44:c1:7c:ed:00:29:4c:7d:ed:e5:c5:b2:a4:1b:
                    09:61:f0:c3:26:c5:64:5a:32:49:ec:84:fe:2a:1f:
                    3f:fd:54:7c:0b:34:4f:ef:32:2a:3e:7f:fc:71:9c:
                    85:e4:67:4c:dd:d9:73:51:fa:d8:0b:2e:c9:92:e2:
                    8b:c3:88:e6:c0:91:b3:97:14:5f:3a:de:4d:7e:a1:
                    d9:cf:b3:f6:e7:5c:c9:66:66:4b:47:c3:0f:4b:3a:
                    43:37:ef:e6:4e:77:57:d4:22:75:0a:61:6e:f5:cf:
                    e8:dd:b6:72:3c:89:90:21:4e:06:de:fc:44:29:ae:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:6F:3C:38:8C:BE:06:F6:F3:D6:CF:A7:CE:DF:B0:C3:F0:54:AC
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:a8:95:67:80:bb:9b:10:8d:75:05:f5:e7:7d:d0:67:f3:c6:
         9d:77:7e:18:e5:d7:0e:cd:93:c8:b9:d3:76:39:37:6f:0c:53:
         3f:bd:50:2c:95:f2:b0:5b:b0:71:76:63:0b:6a:bd:c5:30:0d:
         17:15:a3:2c:a6:8e:86:35:19:4b:fb:36:16:b6:51:29:18:35:
         ce:8e:0a:9d:4d:ba:1b:cb:5f:2b:28:89:e3:a8:fa:6c:ca:a9:
         df:e8:0a:7e:3e:ac:b5:60:b4:71:88:cc:21:c0:bb:23:a0:2e:
         59:73:1f:ce:8c:48:4f:1e:a2:47:24:7f:0b:68:31:f8:2c:6b:
         88:1a:3c:13:13:1c:42:92:e6:ab:e8:52:4f:f4:db:80:c3:79:
         62:d1:d3:85:45:87:9a:b1:85:34:b3:e9:89:b2:53:59:21:49:
         b7:2d:e5:31:f5:b2:27:3b:d4:20:df:b6:90:76:4d:16:e4:b0:
         6e:3d:8a:c1:28:3a:2e:27:ab:b6:66:0c:72:0c:6e:91:32:e8:
         72:e0:2f:47:7e:63:e8:26:5d:95:b8:bc:0d:36:4b:1a:30:87:
         9e:7c:1d:fc:7c:1d:9c:ed:37:92:d4:16:0a:35:d7:b9:79:db:
         15:8c:c1:d3:be:81:be:89:e8:4c:26:70:54:d2:58:cc:75:d4:
         4a:f0:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org