Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32312d3231203d3e203238313931.roa
File:                     3138392e39302e33322e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier:          Tcu0TCujHs9rBGlizX7GetVFX9CoXtX5fPUJJkHEdaM=
Subject key identifier:   AB:1C:4D:AC:56:3E:02:83:80:7A:60:0C:F1:E3:2E:B9:DA:9E:3F:57
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       495A4E289A32EF2307756C9BEB48EBE86F9F1C3D
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32312d3231203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:00 +0000
ROA not before:           Thu 04 Apr 2024 20:09:00 +0000
ROA not after:            Thu 03 Apr 2025 20:14:00 +0000
asID:                     28191
IP address blocks:        189.90.32.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5a:4e:28:9a:32:ef:23:07:75:6c:9b:eb:48:eb:e8:6f:9f:1c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:00 2024 GMT
            Not After : Apr  3 20:14:00 2025 GMT
        Subject: CN=AB1C4DAC563E0283807A600CF1E32EB9DA9E3F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:d4:34:c9:6e:18:45:1e:ce:2c:b4:28:69:
                    7a:80:31:1a:b1:c6:ad:48:46:02:36:2c:42:02:2e:
                    bd:1c:b8:35:a5:b0:bb:d2:e5:69:bd:91:4c:e3:4d:
                    43:2a:78:84:03:8a:97:41:03:c1:53:09:87:51:7c:
                    dc:47:5d:fb:4c:28:37:a3:0f:2a:44:68:7b:cf:e1:
                    ba:b6:47:7e:bb:a8:cb:72:75:bc:7f:6a:85:32:8f:
                    1e:aa:a4:4f:00:15:2b:58:53:a4:7b:f3:07:c1:9f:
                    48:51:a6:f6:8d:80:5c:3c:c6:31:d5:ae:75:1e:bc:
                    07:7b:63:b3:d0:2e:96:b1:52:9f:b5:9b:ef:92:fc:
                    0f:6b:bd:80:a8:61:82:69:7a:6a:2c:fa:dc:5f:d6:
                    be:ad:70:e8:21:73:f0:42:ff:30:cc:bc:4b:3a:ae:
                    7d:67:0f:a8:ad:6f:57:9a:ab:5c:3c:ca:d8:00:ec:
                    cd:7a:24:cb:17:28:c2:b9:30:8c:88:ab:0e:03:a6:
                    ac:bf:8a:ad:b3:f5:22:da:6f:81:f4:5f:87:e3:44:
                    7a:84:0d:7f:c0:eb:64:08:0a:e7:99:0f:1b:15:9e:
                    95:05:27:38:59:d4:4e:92:cb:01:04:57:e1:ac:a7:
                    4f:3f:9a:d2:0a:0b:6b:ea:f5:82:83:65:2c:2b:82:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:4D:AC:56:3E:02:83:80:7A:60:0C:F1:E3:2E:B9:DA:9E:3F:57
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32312d3231203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:71:64:4b:fc:04:5b:9e:f5:4f:78:e1:a1:4b:19:16:2b:
         ff:d0:ea:00:21:f2:c0:de:fc:9c:df:14:fb:44:ba:82:3c:8d:
         cf:96:6a:8d:7b:14:3d:37:06:54:80:b6:d4:cf:af:94:74:7d:
         89:b6:ef:6d:c3:d8:c0:b3:6c:59:88:9a:a8:07:c6:01:f6:ea:
         23:5e:43:83:a7:43:cf:6a:d7:6b:b0:db:46:78:8a:d1:72:8c:
         9d:0e:03:26:90:fa:d2:ce:a2:56:69:3b:6e:3a:8f:04:f7:a2:
         67:54:5e:cf:36:0d:c3:43:06:3d:df:97:5f:93:a1:f7:ac:3a:
         e7:3b:3c:e2:2a:b0:44:a5:32:27:ff:87:30:02:69:65:4c:f5:
         70:f9:64:c6:94:11:f8:61:ce:b1:7e:e6:62:31:7d:39:86:1f:
         b5:d0:24:41:cc:3c:0e:07:bb:bb:56:22:df:81:4b:c1:d3:49:
         49:d8:7f:1e:98:6e:b8:54:57:64:20:f4:8f:78:32:ed:02:e9:
         6b:57:7b:ef:d6:0f:78:2f:68:6d:7d:e6:4c:26:8a:e6:52:a6:
         0b:15:78:29:71:ec:c1:4e:a4:48:dc:b1:6c:d9:71:6d:c9:44:
         c8:41:3b:3d:56:a8:2e:2a:81:eb:88:cd:ca:ac:a9:c5:39:f8:
         98:09:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org