Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32302d3230203d3e203238313931.roa
File:                     3138392e39302e33322e302f32302d3230203d3e203238313931.roa (raw, json)
Hash identifier:          MPZPWarl8gUnSKy+qn+7hoogv9JyL4FMn1mojtYhJr8=
Subject key identifier:   DF:6C:A8:76:A5:BA:B2:D4:FF:E2:66:1F:A1:01:F7:99:AF:AE:10:E0
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       1B90A865B506E1C3B44A11D6CC8C0A315F0FBF13
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32302d3230203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        189.90.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:90:a8:65:b5:06:e1:c3:b4:4a:11:d6:cc:8c:0a:31:5f:0f:bf:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=DF6CA876A5BAB2D4FFE2661FA101F799AFAE10E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fb:d7:1e:3d:c7:84:d2:15:e9:03:0c:61:a7:
                    77:c5:a3:b6:36:10:c6:f9:9d:31:25:cf:81:d1:bc:
                    56:1b:4f:98:74:3d:12:d7:4d:1b:61:2f:ca:98:e8:
                    08:88:58:d4:80:cc:04:13:20:6a:f6:2c:ec:ee:0a:
                    70:95:54:94:60:da:f7:6b:8c:e4:46:2d:95:f7:2e:
                    a1:c4:c6:1a:af:0a:4e:e3:56:10:32:f7:13:0b:3c:
                    6e:a3:0e:ff:22:ca:e4:8d:fd:b8:ea:1e:f3:0a:31:
                    41:20:21:ea:8c:8f:8b:e8:a8:e4:f4:cf:e2:90:67:
                    5b:30:aa:f1:c3:90:ee:dd:06:ed:78:dc:0e:90:59:
                    53:3e:8d:55:ca:b3:b4:0e:4e:0e:39:9f:ea:e0:63:
                    68:1f:c1:97:57:9a:53:45:90:39:8c:ce:99:e1:ab:
                    fa:4b:57:f8:80:c3:7a:73:1b:14:f1:dc:92:fe:64:
                    e3:b4:68:04:64:9d:17:4b:77:1b:28:1c:4a:96:32:
                    71:72:ba:be:ec:e8:4b:14:e9:82:ed:46:d2:5b:74:
                    78:22:53:75:68:4e:3e:63:44:34:a4:31:38:44:ae:
                    05:1a:8d:c6:a8:8a:5c:b5:e0:77:20:73:fc:c4:eb:
                    5a:0d:be:05:c0:b1:d0:8e:59:6c:c4:cd:9a:9c:d8:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6C:A8:76:A5:BA:B2:D4:FF:E2:66:1F:A1:01:F7:99:AF:AE:10:E0
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32302d3230203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:05:e0:ae:ae:0c:5f:4e:6d:ae:f1:3e:eb:0d:68:29:1f:
         d7:38:ab:6a:97:7a:aa:92:c9:3d:73:12:97:cb:51:90:dd:21:
         5f:a7:25:c7:ef:2d:30:e2:c5:aa:8d:ff:9f:49:7a:e6:f4:5d:
         58:28:8b:d1:13:86:58:ba:f2:7a:b4:9b:a7:58:df:89:67:72:
         51:b9:c9:81:ca:ad:80:35:6c:d5:9e:99:e0:ee:67:22:0a:49:
         cd:b1:d9:f9:68:88:34:d1:8f:15:f5:78:7d:45:b4:58:31:83:
         5e:12:87:0b:b4:97:f2:e5:57:1b:39:e6:c4:0c:8e:e2:5d:ee:
         0a:ab:c6:11:df:4c:69:bd:1c:42:58:82:1a:c7:9c:a6:af:13:
         8e:52:8c:d6:d7:26:50:bc:1f:26:87:2f:07:18:a0:b7:b4:d7:
         2a:6c:28:a3:df:47:f7:56:1c:50:4c:ed:72:d8:46:bf:df:24:
         44:82:9d:9c:6f:71:9b:a5:85:90:1e:fa:c4:e8:4c:61:de:1d:
         83:df:b5:15:68:bb:20:3c:07:bb:63:5d:52:d5:2d:bf:21:47:
         bb:52:12:72:f2:13:f3:a0:e2:53:02:52:bd:ed:2d:f5:f3:07:
         72:da:88:a2:fa:38:c7:ef:35:89:99:a4:e2:20:11:2a:ee:ca:
         b8:cd:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org