Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32322d3232203d3e203238313931.roa
File:                     3138392e39302e33322e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier:          j79OaDc4W5NKYavt9NaxCqt2PI/SuSCTnkyxshyf/qY=
Subject key identifier:   19:AF:F6:96:2B:DC:26:2E:E5:00:17:0B:AD:C8:13:BF:9B:BE:09:AF
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       6781A140977895FB9AD8D74857864C45497262DA
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32322d3232203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        189.90.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:81:a1:40:97:78:95:fb:9a:d8:d7:48:57:86:4c:45:49:72:62:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=19AFF6962BDC262EE500170BADC813BF9BBE09AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:6e:80:ed:58:b8:98:cf:1e:4d:95:ee:1d:
                    bb:14:45:ca:a3:d3:27:b7:49:49:2e:09:6d:9f:cb:
                    9b:c8:4a:5f:9d:21:28:d9:19:4f:e8:89:9b:05:d9:
                    98:6f:fd:f8:d3:5a:56:10:1b:fa:74:ab:78:c5:36:
                    b6:f4:83:15:f9:9c:7f:8a:fa:30:39:43:7a:5e:0a:
                    bb:bc:47:fc:44:98:b0:2f:62:4a:b0:bf:81:20:56:
                    b6:7a:a8:01:7f:65:11:be:1f:0c:b4:26:b1:c0:ef:
                    f9:96:41:78:bd:64:a5:f0:28:35:bb:44:91:a4:c6:
                    32:80:1c:63:90:66:a7:ee:ca:d7:6e:75:57:20:73:
                    3d:bd:87:98:48:ed:05:ca:9e:72:3a:fc:5e:09:91:
                    90:69:9f:cf:e5:b2:c8:1d:6e:7a:0d:52:73:03:49:
                    19:a5:4b:63:03:85:7c:06:18:c7:cb:67:33:c8:e9:
                    59:cd:d6:5d:17:56:2a:c4:64:31:2e:0b:a2:61:75:
                    16:15:ff:53:9b:35:3f:88:c0:a3:09:7d:c1:01:d7:
                    c1:df:00:00:31:c7:82:cf:e8:74:91:84:c1:1c:ac:
                    e5:44:32:25:68:5e:51:79:21:85:bb:8b:d7:6f:06:
                    eb:37:73:1d:f2:0a:88:78:df:c3:be:65:cf:8c:93:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:F6:96:2B:DC:26:2E:E5:00:17:0B:AD:C8:13:BF:9B:BE:09:AF
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32322d3232203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:cf:8c:c5:12:bf:da:2a:cb:eb:e1:8a:07:fa:26:9b:cd:02:
         03:4a:b9:79:da:91:a2:c3:cc:79:2f:f6:a1:53:8c:a1:f0:30:
         bc:99:3b:7c:9f:55:e6:41:d6:22:98:68:8f:0e:60:4f:96:e2:
         bb:97:78:d8:e8:27:d3:6d:06:56:06:dc:84:8b:c2:5f:ce:a8:
         8f:8f:86:b8:7f:bb:35:74:8c:4c:29:7e:f4:4e:75:13:d1:1f:
         14:c5:da:a9:95:0a:af:f2:79:f2:7e:69:e2:08:15:cd:02:49:
         2e:4e:a1:72:35:9e:e6:1e:9d:93:59:1e:35:95:eb:69:f4:f8:
         2e:c5:8e:a3:e6:42:bf:e9:7a:99:0c:48:dd:28:a2:38:54:72:
         c1:3f:21:38:ad:fe:5c:f4:47:ff:c9:90:b1:d0:93:9a:d0:e1:
         ca:9c:1f:3e:8b:dc:95:00:08:df:6d:63:66:f4:b3:56:29:9c:
         d2:02:67:ad:b9:76:a3:d4:7b:ee:92:5e:ec:3c:79:ef:b5:b4:
         7f:39:44:a0:83:14:cc:61:d3:50:d3:ed:ca:a8:e6:8e:3b:15:
         e0:96:7b:bb:61:1a:bf:fa:01:84:f0:09:6e:7f:96:cd:4b:72:
         32:10:07:42:e5:41:3b:59:d9:ad:46:45:ac:21:8b:be:e9:75:
         f9:e1:7d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org