Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3139302e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3139302e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          nFHiOV+iCWZdw0E6r8ncLIbGHRcfZP5NjUUuZ1SuKFA=
Subject key identifier:   7F:25:A1:6C:AA:A9:86:05:B6:CB:62:53:B1:A4:C5:2E:05:33:85:EC
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       2F73A9E96BFABA460C377B598463C2F5F9A70A81
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3139302e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:59 +0000
ROA not before:           Thu 04 Apr 2024 20:08:59 +0000
ROA not after:            Thu 03 Apr 2025 20:13:59 +0000
asID:                     28191
IP address blocks:        186.193.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:73:a9:e9:6b:fa:ba:46:0c:37:7b:59:84:63:c2:f5:f9:a7:0a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:59 2024 GMT
            Not After : Apr  3 20:13:59 2025 GMT
        Subject: CN=7F25A16CAAA98605B6CB6253B1A4C52E053385EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:45:90:6c:30:28:b5:97:7f:7f:f2:fd:0c:
                    bb:a4:3a:54:4d:84:e7:18:d5:fd:c5:04:98:9f:e6:
                    a3:a7:fc:cd:24:6e:e7:55:85:16:f0:8d:b0:43:69:
                    ad:40:02:81:c5:f4:fa:6c:bc:80:64:b9:01:d6:ae:
                    54:fe:df:62:fc:91:dd:46:01:02:c3:79:cd:11:7d:
                    04:9e:68:f0:88:3b:1b:fa:e0:fc:c0:6e:e8:c2:dd:
                    4b:62:cd:68:71:a2:49:dc:be:88:71:b2:2e:15:88:
                    fa:3f:d4:41:e7:12:05:66:d8:86:d9:20:cd:94:6b:
                    5b:6d:df:45:6d:8e:7a:e5:c6:8f:e7:47:e8:4e:a7:
                    9f:1b:47:2e:87:c6:63:a9:c5:e2:b8:9a:98:d3:ae:
                    ed:1e:78:61:c0:67:09:02:04:f5:54:fb:c6:f4:f4:
                    01:11:ee:91:d2:a9:5e:78:c0:6e:1d:e0:3f:28:27:
                    41:ea:51:b0:07:da:7a:4b:e0:0a:e9:4a:c1:4a:ba:
                    9d:28:7b:3f:1c:11:a0:43:6a:a6:04:97:88:4d:e6:
                    bd:94:6e:ef:ac:09:36:48:f7:74:a0:fe:40:fd:2c:
                    b5:8e:01:98:9a:13:7e:96:d5:d7:1f:3d:90:1e:7c:
                    98:53:e2:e9:cd:9b:c1:74:c3:7e:81:7c:4c:a3:7f:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:25:A1:6C:AA:A9:86:05:B6:CB:62:53:B1:A4:C5:2E:05:33:85:EC
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3139302e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:60:13:f8:68:91:aa:de:89:34:09:0c:9c:92:59:0a:99:9c:
         4e:27:32:54:85:4a:fd:53:cd:8c:b4:8a:57:5e:e8:48:c9:6b:
         02:0a:0d:2d:31:79:73:47:c4:d2:d5:45:b9:71:c2:9b:a3:6a:
         31:23:8e:6c:e7:32:f2:3f:70:27:c9:44:4d:ac:e7:4f:57:1d:
         18:7a:d5:2d:f7:a6:ca:91:ee:74:92:71:94:44:01:4f:f6:7e:
         8f:61:e3:88:d0:8b:6a:98:54:5d:06:f3:d3:9f:5f:6a:7b:28:
         14:69:84:98:01:64:b6:fe:ef:e4:87:84:25:9f:27:75:7b:9c:
         3b:f9:f4:65:11:66:4f:73:b4:00:80:f6:11:b0:a0:b3:d8:a1:
         a5:9c:fb:04:5c:4e:c9:74:28:89:e0:c9:29:f7:1c:fe:e2:b4:
         86:88:97:9e:2c:d2:5d:c1:18:06:7c:c4:3c:3b:fd:24:2d:a5:
         1a:58:2d:c4:90:ea:a7:63:4a:c3:5b:0b:b2:88:6d:9f:09:4d:
         83:41:42:55:b4:da:19:32:d5:af:53:90:e5:64:f0:d1:e8:14:
         8f:b1:c4:0a:d9:89:dc:88:a0:58:bc:db:c4:82:13:83:d9:15:
         e3:94:5f:86:8b:a0:b1:89:b3:a5:cc:4f:24:b1:6d:6c:59:ae:
         ba:a1:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org