Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138342e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          12Rb2vSaLnbC+T6Jpf3LayGpjTWVSe6cDpAo8TsU1Io=
Subject key identifier:   83:96:8A:DA:71:60:7F:12:93:05:D2:C8:16:24:9B:10:97:8D:3D:80
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       29F93CFFBDB811D170192862787ED113332C98DF
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:02 +0000
ROA not before:           Thu 04 Apr 2024 20:09:02 +0000
ROA not after:            Thu 03 Apr 2025 20:14:02 +0000
asID:                     28191
IP address blocks:        186.193.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f9:3c:ff:bd:b8:11:d1:70:19:28:62:78:7e:d1:13:33:2c:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:02 2024 GMT
            Not After : Apr  3 20:14:02 2025 GMT
        Subject: CN=83968ADA71607F129305D2C816249B10978D3D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:df:88:00:a3:27:82:bd:76:5b:08:54:77:25:
                    d4:bc:ee:50:af:ba:63:03:fd:6c:5c:11:62:ed:f3:
                    f4:f7:48:1d:92:f5:a0:e0:65:dc:2f:64:6e:2d:59:
                    72:e6:7e:cd:05:60:63:72:8f:33:35:90:49:ae:3d:
                    60:41:c7:5a:d2:2b:99:09:3a:55:f3:34:7e:ef:77:
                    3f:3d:a8:60:12:f6:b1:f3:5a:4c:86:a5:29:77:39:
                    a4:38:e8:c0:e2:c7:52:a6:ce:b4:1c:94:00:03:d2:
                    e6:0b:e4:ab:07:b3:f1:04:f1:1a:75:1d:6c:6b:86:
                    cc:61:4a:d6:16:88:84:35:08:59:09:a5:d4:b3:9c:
                    4a:57:51:4c:ff:b3:f1:a2:26:67:79:77:cf:77:d7:
                    08:94:84:08:77:73:45:a4:75:85:3b:82:4a:a4:b5:
                    5a:58:e3:a9:7f:a1:32:9a:43:12:64:c0:d7:fa:d3:
                    a1:74:38:b5:dd:51:82:87:26:6e:4a:76:64:98:65:
                    b8:d0:00:ee:48:3e:00:b5:80:bf:59:1c:7a:6b:5d:
                    56:a5:44:50:94:92:d3:e4:b5:96:84:26:75:43:db:
                    e5:e9:84:9a:63:92:9c:29:fe:d9:4f:38:8e:5f:f5:
                    4b:ed:5d:ef:35:3a:a3:12:ad:61:2b:c9:b0:5f:8a:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:96:8A:DA:71:60:7F:12:93:05:D2:C8:16:24:9B:10:97:8D:3D:80
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138342e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:da:5c:95:61:f6:d9:01:8f:f4:c8:ac:4b:dd:c1:cd:44:
         fc:5f:c2:33:f0:29:72:95:33:2f:76:0a:6e:cb:ff:99:d3:da:
         23:9c:3f:08:93:a9:f0:b3:76:69:24:54:ba:ca:36:6a:dd:3d:
         b2:c6:f6:aa:93:c8:d0:c4:83:42:2c:98:cf:58:f0:f3:ca:39:
         13:61:e3:54:4a:e2:e9:8f:c0:73:09:a3:4a:a2:2a:5e:6f:b4:
         79:a5:63:d4:65:8f:28:a2:49:7d:84:ca:7e:5a:55:b4:2d:ea:
         3f:62:d9:a7:e5:de:f2:e2:f4:b5:7f:bd:af:a9:33:4f:91:cb:
         12:93:f2:ba:e7:e8:79:26:2e:ba:6f:21:3f:3c:e4:ed:b9:63:
         6a:bc:66:4f:28:4d:e1:fb:dc:36:de:8b:eb:3c:9f:f1:c0:cb:
         d0:40:06:44:ca:3b:c0:5a:f8:8a:47:1b:e8:c5:b9:0b:85:48:
         58:2e:fd:1a:3c:f5:93:fa:4a:1f:ef:cc:d9:2d:5a:4a:ba:2d:
         7b:37:4b:87:69:1e:62:a3:1a:42:e8:29:75:fa:c0:50:4f:4f:
         17:c0:69:ad:77:8f:d1:c7:27:41:85:0c:48:12:84:72:42:cd:
         54:f4:e9:0c:c7:47:7a:49:63:84:85:95:f9:ac:16:ef:c3:ee:
         c5:b7:ac:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org