Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          QeQfjwzam0OmH8fRVTCvlscdrGIXDetdCNGRLnJKW6U=
Subject key identifier:   AB:1E:AD:43:3F:8F:67:40:62:00:1E:D0:0E:0A:EA:46:2A:74:3F:F9
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       4B58E0D33E4FC4E84592DB2A2EE693E799E2B571
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        186.193.186.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:58:e0:d3:3e:4f:c4:e8:45:92:db:2a:2e:e6:93:e7:99:e2:b5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=AB1EAD433F8F674062001ED00E0AEA462A743FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:d3:09:ee:61:01:28:e7:40:3d:d4:ed:ee:
                    26:8f:03:65:ee:2d:7b:72:c6:f9:54:c1:7c:e6:7d:
                    2c:dc:65:ef:6c:7f:53:68:28:f9:7c:8f:78:ce:3d:
                    97:97:00:15:fb:0c:20:02:34:53:87:8b:de:c6:ec:
                    56:02:e1:eb:39:0e:fe:db:e4:b9:1a:a5:7d:27:25:
                    4f:2d:2e:e4:3f:71:30:42:57:f4:04:f8:ad:54:94:
                    ba:4a:40:1f:cf:d2:de:07:60:1d:5b:30:a2:9b:0a:
                    4b:01:ea:8b:d5:8a:a1:d8:5a:ee:35:63:94:09:b9:
                    cb:d3:ec:e4:23:51:ad:80:74:b1:8f:b8:35:bd:e4:
                    07:5a:c4:44:35:46:30:ba:03:0e:19:d0:08:c2:18:
                    67:d1:86:32:06:0c:3d:54:78:bd:30:c3:9d:da:5c:
                    4b:5e:7b:1a:01:86:4c:61:01:a7:f3:f7:a0:3a:fb:
                    b9:52:b0:c2:15:0a:fb:48:2f:da:dd:3d:c9:14:f4:
                    49:a1:aa:fb:18:61:cb:79:e6:f4:21:5d:60:f2:b0:
                    8b:a6:df:f2:90:4e:28:6c:b2:ea:dd:fd:05:2a:ae:
                    64:55:4a:ff:78:ec:be:fc:aa:34:c3:b8:05:ab:e7:
                    2e:03:31:8a:0b:1c:63:52:c1:44:1a:a0:fe:f6:fc:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1E:AD:43:3F:8F:67:40:62:00:1E:D0:0E:0A:EA:46:2A:74:3F:F9
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138362e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:fc:d1:2b:4d:59:a5:b8:f8:14:cd:6e:88:fe:ae:93:e5:
         03:5c:40:29:3a:e3:cd:29:a9:b4:71:0b:34:a8:79:78:2f:ac:
         10:b6:8b:5b:fe:4e:54:7c:99:27:a1:24:ec:00:6e:68:f2:ec:
         06:f9:8a:06:07:8d:ec:a2:f5:42:fa:88:37:1b:81:43:68:23:
         79:33:c9:c9:02:37:e0:c8:e7:22:a6:6e:63:e4:a2:5a:d3:ac:
         6c:10:6b:a5:c8:25:bf:ea:d1:6f:f1:a3:fc:78:3e:11:b3:79:
         8f:b8:16:ef:dd:b2:d9:f4:95:4d:62:fd:55:70:eb:92:3e:2c:
         04:60:80:68:bb:24:ee:55:dc:a6:e8:b2:1c:92:d5:17:02:d7:
         f2:b9:31:01:5b:f6:1e:3b:fa:c8:1a:e6:c0:eb:c7:2a:a1:e0:
         a7:94:0f:d3:5e:af:fd:0c:b2:82:ed:8a:6b:0d:9f:1b:c5:01:
         a6:54:26:27:56:1d:e7:66:90:c3:b9:24:a8:42:35:b9:bc:9b:
         7d:f7:b6:ed:29:5c:77:66:23:ef:15:04:3c:85:d1:a4:d4:59:
         e8:9a:8a:fb:f6:e0:29:33:c7:9a:9f:64:ee:3f:b1:6f:c6:f5:
         f9:4d:aa:46:27:63:8b:51:b9:06:a0:3e:90:ad:ec:1f:7c:0f:
         4a:bb:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org