Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          VmZVyE3dbkREaZvNnay//rePzzdyua47/yhSiBOGOmA=
Subject key identifier:   AF:84:AB:07:72:15:1A:3E:6F:B8:D8:B7:9B:70:E4:EA:97:49:AF:99
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       1E68AAC0688C2AA22FEF87DD4835C19349432B5F
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:59 +0000
ROA not before:           Thu 04 Apr 2024 20:08:59 +0000
ROA not after:            Thu 03 Apr 2025 20:13:59 +0000
asID:                     28191
IP address blocks:        186.193.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:68:aa:c0:68:8c:2a:a2:2f:ef:87:dd:48:35:c1:93:49:43:2b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:59 2024 GMT
            Not After : Apr  3 20:13:59 2025 GMT
        Subject: CN=AF84AB0772151A3E6FB8D8B79B70E4EA9749AF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:c7:5f:0c:cf:20:9a:04:b1:c9:89:d0:20:
                    15:9f:22:8f:11:8d:aa:74:dc:4e:fc:2a:80:04:be:
                    7f:41:ce:d1:ac:f7:dc:d4:22:12:e8:d5:3e:52:a1:
                    14:47:cb:c8:fd:7a:07:66:2e:0c:47:f6:05:fe:a0:
                    01:75:03:8e:e3:54:8f:29:d8:ec:cd:49:fb:f9:3f:
                    32:7a:ee:60:23:53:d0:c3:c2:12:ef:60:b5:52:a7:
                    6c:ca:5f:74:22:8c:80:4b:4b:5f:bb:86:c5:84:d4:
                    c6:97:13:54:66:6c:45:0a:03:34:67:77:33:b2:6d:
                    a7:5e:88:9b:6b:ab:6c:83:2e:ae:7b:70:30:10:b2:
                    93:ab:98:b2:87:e6:76:a2:fe:c7:70:cd:f2:09:86:
                    00:e5:2a:8c:59:78:1d:13:44:87:d0:d4:0f:9b:f5:
                    93:bb:f6:9b:e6:de:78:a9:c7:22:8d:c5:53:87:d5:
                    f8:93:5f:e2:67:21:7c:35:7c:41:7c:d0:ad:58:8f:
                    2b:56:d4:51:a5:fc:b7:55:fd:c5:b7:45:0a:73:94:
                    cf:ce:a4:db:31:18:1d:33:aa:67:83:69:33:f3:b9:
                    a6:62:6b:37:2f:32:13:e6:b3:e4:3b:5c:d4:89:6a:
                    63:e6:75:e4:be:1e:35:74:c3:85:c7:d9:9d:ce:a1:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:AB:07:72:15:1A:3E:6F:B8:D8:B7:9B:70:E4:EA:97:49:AF:99
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3138392e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:b5:37:cd:47:98:75:6c:57:ce:31:62:bc:3a:25:0c:e0:
         7b:4f:92:6b:e2:4e:98:33:7e:a0:92:31:8f:f6:23:b0:1e:78:
         0b:33:a4:38:94:40:22:1f:a5:91:28:7a:d1:c4:11:34:c2:80:
         f2:2f:f1:5f:9a:f1:a6:82:d3:ef:c3:67:ac:6e:7c:84:69:2e:
         ad:a5:26:41:e5:3f:4a:94:37:fe:46:53:4a:7c:ed:7a:a3:2e:
         ab:83:8e:d4:d1:c4:fc:4b:3b:7a:53:3c:06:d4:8e:7c:09:15:
         46:a2:82:51:bc:01:4b:96:4f:3a:e6:bc:73:25:c1:3e:0f:b4:
         bf:99:ab:2c:a7:0b:2a:40:08:7d:53:ae:47:9d:84:a6:fc:76:
         e0:e3:89:a4:4b:dd:95:e4:93:45:14:c5:c7:48:fa:3a:c2:52:
         37:60:05:06:2a:2f:e4:6c:ae:f1:29:6c:e2:38:da:38:81:15:
         62:e3:f4:fa:d2:ea:07:6f:4c:b9:43:03:9e:3c:2d:75:30:9b:
         a7:07:ca:c3:27:a5:d9:6f:f9:f4:ef:68:5e:7f:55:3d:29:fb:
         b5:8c:69:5f:b7:7d:d1:cb:28:0b:76:a8:09:25:ed:39:59:14:
         e0:e4:9e:69:d2:1a:2f:d9:8a:3b:63:dc:39:01:6d:20:64:63:
         97:24:ca:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHmiqwGiMKqIv74fdSDXBk0lDK18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg5NUVEODEzNTUzRTY3RDRGRTQ2RkY0NDdCRjQyMzU3
ODVBMTdEODAeFw0yNDA0MDQyMDA4NTlaFw0yNTA0MDMyMDEzNTlaMDMxMTAvBgNV
BAMTKEFGODRBQjA3NzIxNTFBM0U2RkI4RDhCNzlCNzBFNEVBOTc0OUFGOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiMdfDM8gmgSxyYnQIBWfIo8R
jap03E78KoAEvn9BztGs99zUIhLo1T5SoRRHy8j9egdmLgxH9gX+oAF1A47jVI8p
2OzNSfv5PzJ67mAjU9DDwhLvYLVSp2zKX3QijIBLS1+7hsWE1MaXE1RmbEUKAzRn
dzOybadeiJtrq2yDLq57cDAQspOrmLKH5nai/sdwzfIJhgDlKoxZeB0TRIfQ1A+b
9ZO79pvm3nipxyKNxVOH1fiTX+JnIXw1fEF80K1YjytW1FGl/LdV/cW3RQpzlM/O
pNsxGB0zqmeDaTPzuaZiazcvMhPms+Q7XNSJamPmdeS+HjV0w4XH2Z3OoaSTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr4SrB3IVGj5vuNi3m3Dk6pdJr5kwHwYDVR0j
BBgwFoAUWJXtgTVT5n1P5G/0R79CNXhaF9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMS81ODk1RUQ4MTM1NTNFNjdENEZFNDZGRjQ0N0JGNDIzNTc4NUExN0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4OTVFRDgxMzU1M0U2N0Q0
RkU0NkZGNDQ3QkY0MjM1Nzg1QTE3RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzEv
MzEzODM2MmUzMTM5MzMyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6wb0wDQYJKoZIhvcNAQELBQADggEBAA8otTfN
R5h1bFfOMWK8OiUM4HtPkmviTpgzfqCSMY/2I7AeeAszpDiUQCIfpZEoetHEETTC
gPIv8V+a8aaC0+/DZ6xufIRpLq2lJkHlP0qUN/5GU0p87XqjLquDjtTRxPxLO3pT
PAbUjnwJFUaiglG8AUuWTzrmvHMlwT4PtL+ZqyynCypACH1TrkedhKb8duDjiaRL
3ZXkk0UUxcdI+jrCUjdgBQYqL+RsrvEpbOI42jiBFWLj9PrS6gdvTLlDA548LXUw
m6cHysMnpdlv+fTvaF5/VT0p+7WMaV+3fdHLKAt2qAkl7TlZFODknmnSGi/Zijtj
3DkBbSBkY5ckyp8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org