Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          Y6aYvXq2pJ8/3D9V1ENSIQPXMO+e9dbpUQ1onkMdXiY=
Subject key identifier:   3C:35:E5:F2:96:36:70:8C:21:51:A1:9A:A0:A4:E7:E9:66:73:80:78
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       2BEFE3AAE84D38DA8C6C91D9533B860AE8D3CA8C
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:03 +0000
ROA not before:           Thu 04 Apr 2024 20:09:03 +0000
ROA not after:            Thu 03 Apr 2025 20:14:03 +0000
asID:                     28191
IP address blocks:        189.90.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:e3:aa:e8:4d:38:da:8c:6c:91:d9:53:3b:86:0a:e8:d3:ca:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:03 2024 GMT
            Not After : Apr  3 20:14:03 2025 GMT
        Subject: CN=3C35E5F29636708C2151A19AA0A4E7E966738078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:9d:fc:41:fc:c8:f9:a8:5a:78:0f:e3:be:
                    4b:1a:4e:76:a6:9c:72:3a:6c:52:ae:04:2f:c1:e4:
                    7c:09:6c:a3:fd:f5:50:9b:29:40:48:5a:c9:5a:3a:
                    a4:6c:19:93:a4:70:e3:40:40:1a:ab:01:f2:f5:90:
                    42:ba:67:d6:7f:66:2c:40:9c:e9:91:5f:13:7d:68:
                    6f:0f:20:95:3c:ef:a6:72:8b:4d:35:ff:13:93:a0:
                    e7:71:53:2b:d5:96:20:83:d6:3c:02:81:b4:65:41:
                    b3:ab:85:c3:e4:6f:3e:b3:9e:73:65:2a:3f:64:27:
                    4f:a2:39:0d:95:e1:51:bd:3d:65:cf:21:44:4e:6d:
                    2d:1d:fc:0f:d3:af:7e:96:fc:3d:3e:46:6d:55:67:
                    ed:8d:63:f9:df:18:b6:22:83:e5:9f:3b:36:09:cc:
                    a1:9d:91:5e:30:87:96:ad:60:e5:ae:74:84:bd:48:
                    d3:be:de:ce:c5:7d:f3:b4:f2:04:4c:6e:5e:03:c7:
                    39:ca:70:98:bc:3c:4b:a8:80:92:21:eb:86:f8:02:
                    fa:9d:32:20:0a:2c:d9:cb:ad:fa:8c:75:40:a7:fd:
                    c3:06:a4:42:a3:b0:09:50:16:66:d2:84:62:4a:a6:
                    0e:20:98:7a:75:ec:a8:c9:6e:96:92:93:1b:5f:c9:
                    9d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:E5:F2:96:36:70:8C:21:51:A1:9A:A0:A4:E7:E9:66:73:80:78
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:84:55:58:8c:28:67:63:1c:75:e7:cb:96:f5:72:a5:d1:e5:
         9a:e2:33:f4:b0:89:97:a3:31:90:6f:cf:9f:04:74:aa:1a:03:
         44:ef:c2:38:04:49:cd:fe:09:e9:30:46:1f:ee:6c:eb:d1:02:
         64:40:41:4a:0b:67:ad:5b:89:7a:1b:c5:03:ce:38:5b:97:e8:
         9e:13:77:74:ff:dd:38:6a:a8:b4:2f:df:af:ea:6a:7e:10:f4:
         7f:08:cd:a4:10:a6:e6:c1:2a:c0:b8:a8:33:b3:fb:11:10:60:
         d9:5e:15:11:e6:3b:14:08:6f:71:2e:7a:32:a8:df:c1:9c:7a:
         52:e5:99:2e:a7:25:7e:6f:12:8d:0a:b8:f8:a7:57:00:c1:70:
         1a:1b:d3:b0:e1:4e:a9:c0:1b:da:ff:2d:0e:c8:e5:7b:b0:86:
         e1:8f:29:23:c6:42:f3:a6:29:aa:8c:e6:58:18:45:77:32:e0:
         8f:18:2a:08:96:c2:a4:3f:60:34:46:08:d9:84:52:d5:bb:d9:
         c2:08:45:50:54:df:92:73:b7:4e:72:81:0d:fa:16:39:55:72:
         2c:e4:96:91:ef:b2:c0:a0:d4:20:87:f7:34:36:c5:a4:cb:d4:
         23:16:69:d4:04:bd:77:61:f7:8a:77:f3:e6:80:0d:e9:bb:e0:
         7e:d3:ad:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org