Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3139312e302f32342d3234203d3e203238313931.roa
File:                     3138362e3139332e3139312e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          a3SKMF/n5eExDfXFR+dWgU9ozDLj+dNFO8sdCR91LnU=
Subject key identifier:   A3:8E:59:52:68:B9:14:1A:14:5D:39:57:EB:99:41:FB:52:7F:98:D3
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       3D4E4473DCF6567B8677BC2A74E50160FC6149B3
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3139312e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:58 +0000
ROA not before:           Thu 04 Apr 2024 20:08:58 +0000
ROA not after:            Thu 03 Apr 2025 20:13:58 +0000
asID:                     28191
IP address blocks:        186.193.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4e:44:73:dc:f6:56:7b:86:77:bc:2a:74:e5:01:60:fc:61:49:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:58 2024 GMT
            Not After : Apr  3 20:13:58 2025 GMT
        Subject: CN=A38E595268B9141A145D3957EB9941FB527F98D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:b5:89:26:05:a8:61:07:d3:34:d2:d2:5d:
                    4a:d4:d2:c2:b8:9b:94:1e:b8:0b:40:34:99:cd:c0:
                    12:ce:39:17:78:57:06:b9:e5:c5:d4:40:fe:56:30:
                    43:e0:28:3a:9e:50:82:88:2c:8f:53:a7:a4:cb:4e:
                    b5:99:f4:04:36:cc:87:22:01:79:09:dd:48:17:81:
                    9b:dd:fa:96:3e:fe:be:26:5f:ca:63:60:73:8e:99:
                    6f:ef:27:aa:3d:05:cd:a9:e2:96:5c:c6:68:21:29:
                    39:28:00:a0:cc:72:e4:a4:29:1e:a2:33:10:72:da:
                    5d:d5:71:9f:cf:b1:5c:7e:bb:7e:dc:5f:3a:57:a6:
                    d3:ef:c0:c0:6e:3c:87:4a:e5:1d:78:10:0e:5a:bf:
                    a8:90:36:4e:ff:f0:58:05:5d:5e:d3:97:50:d6:48:
                    98:83:40:e5:6c:81:04:53:01:91:f3:f6:ca:da:8c:
                    01:c5:4a:e0:3b:17:2a:66:4e:42:79:15:0c:55:45:
                    e3:5f:07:97:86:a4:4d:68:97:45:09:da:1c:8e:c4:
                    3e:58:a3:36:69:18:19:19:89:29:61:ce:14:f0:d9:
                    d0:0b:a4:34:46:b2:45:c1:d0:19:da:7f:8c:21:57:
                    c6:92:54:d4:d0:10:96:c8:4e:fd:d9:69:03:e7:83:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8E:59:52:68:B9:14:1A:14:5D:39:57:EB:99:41:FB:52:7F:98:D3
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138362e3139332e3139312e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:4e:66:00:2b:1e:04:96:20:2f:43:5b:e8:4c:66:1f:68:
         fa:44:ab:f4:9e:b7:37:62:b6:4a:85:d2:ec:12:ce:c5:bd:ba:
         eb:b3:74:f1:94:e3:aa:af:ec:ef:41:c8:3a:ec:2d:38:4c:34:
         b8:01:48:34:2d:46:ae:b1:d1:7e:e0:b0:52:16:13:74:e3:7f:
         5e:82:b8:2e:e6:51:bd:cc:65:09:fa:2f:c8:ad:d0:f8:99:ff:
         61:4e:eb:46:1d:15:a3:90:10:02:86:6e:59:a8:4c:c9:cf:73:
         63:8f:9d:46:b1:d6:58:6f:2d:57:e8:b2:26:cb:22:36:bc:2f:
         b7:c9:ca:ba:74:86:c4:b6:9b:4c:a1:f1:a4:f8:de:1c:ee:74:
         e1:6e:6c:82:d1:96:74:db:b0:06:42:d2:af:69:0c:07:bc:f1:
         3a:51:0e:fc:c2:10:21:d4:f8:41:68:84:e5:a6:11:75:a5:5b:
         7d:63:d3:50:50:7c:c5:b0:24:65:d8:18:bd:a5:ce:25:f2:c7:
         e5:17:d2:22:51:19:c2:45:ac:be:22:f6:cd:74:c6:0a:47:01:
         fe:f3:73:b1:d1:4a:d8:e9:1d:2b:bd:e8:77:aa:72:51:f4:35:
         46:e1:52:30:62:0a:7f:76:09:02:2d:96:fd:d1:22:dd:1e:2e:
         20:92:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org