Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          iHS3y2OKWRCfXrtwEz1tLi7gJkyK7DH0CFrI5xSKFtQ=
Subject key identifier:   AB:16:AF:A9:EC:58:71:BC:79:F9:14:DC:2B:CD:3C:50:46:75:66:43
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       3C6C6B1C4B23B82FDB99C849B8BBA363F0884DF0
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:55 +0000
ROA not before:           Thu 04 Apr 2024 20:08:55 +0000
ROA not after:            Thu 03 Apr 2025 20:13:55 +0000
asID:                     28191
IP address blocks:        186.193.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:6b:1c:4b:23:b8:2f:db:99:c8:49:b8:bb:a3:63:f0:88:4d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:55 2024 GMT
            Not After : Apr  3 20:13:55 2025 GMT
        Subject: CN=AB16AFA9EC5871BC79F914DC2BCD3C5046756643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:02:b0:3b:f9:08:a3:cb:55:09:53:d1:be:
                    c8:05:08:36:28:eb:fa:27:4d:ab:09:24:34:28:27:
                    45:71:c2:c4:8f:35:a4:00:7d:73:d2:53:9e:5d:7c:
                    58:92:d3:b8:1f:ac:78:38:e1:55:68:96:d3:c6:24:
                    11:80:b4:4e:0d:ec:69:0c:ea:b1:cd:ec:3d:bc:34:
                    b3:d0:1c:90:de:08:5e:45:86:87:b1:99:0c:f8:6e:
                    6b:a7:77:0d:fe:f7:65:17:ec:76:c0:9f:32:b3:f9:
                    06:47:a0:52:bc:5b:09:55:b5:15:05:ef:68:80:d4:
                    38:05:aa:83:f3:db:1c:be:1b:a7:6f:fc:23:96:e3:
                    fa:8e:c6:ea:df:1e:dd:8d:7b:e1:f2:fa:2c:12:9e:
                    51:25:af:60:f8:dd:c6:89:b1:da:1e:21:a4:f6:e5:
                    64:7b:67:3e:e9:77:22:5d:47:ea:49:72:20:e9:75:
                    cf:f1:96:2b:41:e7:07:01:85:07:7a:6b:25:3d:7e:
                    55:97:10:f1:71:b4:95:ea:23:56:64:98:96:6c:6b:
                    e1:e6:7a:a0:fa:95:d7:20:11:9f:0f:30:82:7d:e1:
                    42:7c:a2:99:37:f5:f2:14:cc:17:26:1a:7e:c0:f2:
                    d1:b5:eb:d3:6c:06:46:f3:90:4a:7e:6f:c8:01:f0:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:16:AF:A9:EC:58:71:BC:79:F9:14:DC:2B:CD:3C:50:46:75:66:43
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138382e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:95:0f:ca:05:df:66:fc:9c:2e:45:e1:fc:e7:b4:bf:f0:
         38:1b:4b:0a:e7:57:98:ea:fc:59:2f:18:d9:01:9d:d2:39:f2:
         ea:9a:db:ba:40:a2:c2:4c:11:97:f8:b2:2b:a1:2f:dc:55:68:
         35:17:ff:6d:d9:e1:08:71:b0:a5:e9:56:b9:09:3c:c2:a0:0c:
         93:6f:ff:92:e0:f7:50:ab:07:81:ae:f7:a1:03:6b:d9:2f:17:
         97:6c:2e:41:c8:a6:e2:6a:e9:31:b5:c2:e3:c7:fa:81:6e:07:
         18:d0:52:a0:0c:a1:a1:78:14:39:f7:4f:61:3b:07:fb:9a:ff:
         70:f2:6a:18:6c:67:26:e0:1f:fc:b2:42:97:48:0e:08:b3:26:
         3f:79:56:0d:72:b9:08:f0:04:cd:53:3c:a0:2e:2a:7c:47:68:
         59:76:34:5b:cb:42:b3:bc:da:ae:46:86:1d:20:cf:09:15:c5:
         64:af:54:96:c0:9f:d2:a3:69:af:71:a1:07:79:a5:ba:9c:b9:
         ea:36:8e:15:64:75:c1:8f:e7:a0:bb:56:51:33:c5:9e:fb:33:
         28:90:75:8b:f9:50:02:f6:c2:1e:38:d1:de:83:cc:31:ad:d7:
         46:31:90:d1:24:e9:e1:f8:52:9c:f5:27:2d:17:fc:d9:6a:e5:
         25:65:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org