Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          s2RMe0kKzMbm7c9GM87SHCCpWXvblPAk+uQKWtIPswI=
Subject key identifier:   3A:08:D4:0B:16:00:1B:2D:39:39:9E:4B:1F:18:67:03:AE:E9:1B:AD
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       4F246094B7F03511987BEE2F0CF4037A42703CF6
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:57 +0000
ROA not before:           Thu 04 Apr 2024 20:08:57 +0000
ROA not after:            Thu 03 Apr 2025 20:13:57 +0000
asID:                     28191
IP address blocks:        186.193.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:24:60:94:b7:f0:35:11:98:7b:ee:2f:0c:f4:03:7a:42:70:3c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:57 2024 GMT
            Not After : Apr  3 20:13:57 2025 GMT
        Subject: CN=3A08D40B16001B2D39399E4B1F186703AEE91BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:61:89:ff:f9:12:60:cb:c3:9c:d3:c3:22:
                    92:16:91:83:32:13:08:24:8e:3a:f8:45:af:5b:48:
                    ef:e3:d9:92:ba:ad:3e:f4:a9:11:b5:fc:50:09:21:
                    1c:c6:b8:59:f0:b2:85:de:c2:56:aa:2e:d1:33:1a:
                    30:f3:91:53:b2:25:ea:99:9f:80:8d:c7:cf:bf:59:
                    0d:44:ef:16:bf:6b:46:e7:d9:9e:b3:a0:84:3a:56:
                    74:ec:57:69:85:d6:e7:ee:11:32:a3:4a:b5:ee:f0:
                    62:e4:02:82:21:71:9b:e0:b7:a6:05:46:4e:a0:06:
                    7e:a2:f5:53:2f:ad:43:56:b5:e2:b7:ca:61:0d:0d:
                    f7:4d:45:76:ac:12:0c:ef:01:5a:70:8c:cd:5a:8c:
                    07:7d:9a:88:ea:bd:4b:a0:5f:3e:31:83:42:23:7f:
                    65:d1:ae:58:43:1b:ba:d6:11:d6:29:ab:2a:f5:4b:
                    ef:eb:61:5a:29:e1:b1:07:7f:b3:53:d0:1f:b8:09:
                    ef:53:6d:c6:f3:6f:9d:3a:8f:5b:4f:68:73:55:aa:
                    69:ff:a9:df:71:96:88:ad:82:d2:e1:38:b8:a8:2b:
                    be:f7:fa:db:f7:2e:b0:2b:27:e5:44:d0:2d:a3:3c:
                    ed:1e:95:a2:f2:86:07:9c:cb:f3:14:eb:07:a0:09:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:D4:0B:16:00:1B:2D:39:39:9E:4B:1F:18:67:03:AE:E9:1B:AD
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:ba:07:76:4d:70:15:e6:07:4b:02:57:3c:7b:8a:be:c1:
         de:35:6d:fb:45:b5:3c:0c:22:33:10:36:d1:93:78:54:3f:72:
         77:35:7b:9f:d4:80:f1:0d:b2:50:4c:9d:46:30:03:14:d6:63:
         75:0c:ae:cc:3f:f8:8f:91:e6:37:03:e9:ee:e5:ba:6b:20:a3:
         74:b4:ce:de:42:4b:2f:5f:a7:e0:52:8c:c2:a5:05:f5:bc:27:
         21:17:13:16:30:ef:9b:6c:4e:e3:13:e3:66:8c:e9:06:4b:74:
         5c:7f:4c:b7:17:c3:f6:f4:51:bf:56:93:71:b1:4a:ca:ff:70:
         a6:f7:b6:7e:20:0a:86:95:2b:78:33:fa:82:a8:d5:6f:44:64:
         35:e4:24:25:ea:bd:a0:57:9a:1c:fa:1f:24:e5:3e:c2:8f:ae:
         9b:39:1a:b7:e9:ca:80:29:45:fd:1c:61:1e:f8:3c:49:6d:7c:
         25:fd:4d:27:eb:bc:b6:71:cd:39:4c:5d:8b:b5:4b:fc:ef:62:
         ac:88:a7:37:11:35:cc:18:6a:66:fb:67:d2:d0:6c:5d:d3:a1:
         09:53:96:76:db:35:85:25:9d:67:73:e0:f1:6f:f2:bd:7c:52:
         13:fa:66:f9:15:1f:ba:13:23:48:7b:14:21:1e:26:5c:b4:f5:
         e8:ad:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org