Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33322e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          pU/+Kaknmzfu0fzTmEjx7Lg7wqqTAVyczS/Oht5UkpM=
Subject key identifier:   82:41:B7:5E:7C:92:EB:20:66:22:24:41:77:0A:AA:F6:A6:5D:DB:38
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       4A7A4CE2590EE8312624B0004D088D1277C2EB35
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:00 +0000
ROA not before:           Thu 04 Apr 2024 20:09:00 +0000
ROA not after:            Thu 03 Apr 2025 20:14:00 +0000
asID:                     28191
IP address blocks:        189.90.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7a:4c:e2:59:0e:e8:31:26:24:b0:00:4d:08:8d:12:77:c2:eb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:00 2024 GMT
            Not After : Apr  3 20:14:00 2025 GMT
        Subject: CN=8241B75E7C92EB2066222441770AAAF6A65DDB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:e2:dc:d9:9d:84:13:82:77:fa:e0:4d:35:
                    fd:63:72:5f:70:ae:bc:13:77:17:bf:a7:f2:bd:b9:
                    aa:8f:ad:ca:63:64:20:5a:9c:33:61:b4:49:af:6e:
                    6d:2d:0e:32:47:d4:80:2c:1f:2c:2c:9d:7f:e9:cd:
                    f2:27:21:b3:07:e6:bd:1f:28:56:46:b6:3a:9a:42:
                    66:20:13:49:8e:19:f2:25:dd:3c:c9:53:6d:8a:7c:
                    ec:bb:c0:60:06:2c:8b:cf:e4:ff:ae:a7:83:4b:78:
                    72:cf:89:ed:0d:bc:11:91:95:4b:91:a8:85:74:90:
                    9b:33:78:3c:14:88:11:01:e8:3a:e6:d5:61:f1:8c:
                    3d:17:e1:2c:74:bc:09:32:d3:2e:81:9e:17:5e:c4:
                    6c:9b:4d:29:c1:80:c1:b8:9f:af:c2:aa:5c:df:3b:
                    f4:72:87:62:7f:ca:b5:ca:4b:a6:59:bd:92:8b:93:
                    61:4a:c7:48:4e:c4:00:bd:0d:29:5b:96:ca:95:a7:
                    ea:71:49:47:a9:b9:b3:24:af:20:08:95:7a:64:da:
                    35:b8:e9:3e:e9:e3:61:6f:17:49:71:04:8b:ad:e2:
                    8d:30:60:5b:b1:98:41:5f:a9:a6:09:a3:ef:4a:c6:
                    e2:8a:c4:0e:e1:b2:ac:ca:ef:17:17:a9:26:e5:4f:
                    1d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:41:B7:5E:7C:92:EB:20:66:22:24:41:77:0A:AA:F6:A6:5D:DB:38
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33322e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:49:78:4f:92:2c:56:1c:5f:5b:9c:ed:11:c5:5b:13:73:
         2a:74:ff:21:8f:d4:c3:f4:ff:c6:26:2e:de:cd:16:3f:89:4c:
         71:e4:c7:65:e4:d8:10:8c:67:9b:63:6e:e5:4f:59:43:3a:97:
         cb:36:2f:19:9e:91:88:6f:3f:6e:a4:5a:76:4a:74:71:7e:91:
         7b:f6:80:23:91:05:a9:a2:1a:40:67:3b:17:83:02:66:53:2b:
         fa:8a:2c:9d:f1:52:cf:0c:e8:bd:c2:d3:4c:41:8c:c7:ae:40:
         26:6d:b7:1c:94:72:6b:60:a5:96:2e:0f:d4:bb:3b:f9:c0:92:
         68:ba:9c:45:60:1a:6d:3e:ff:31:ec:1c:3e:6a:6b:ee:ca:41:
         36:f9:45:a2:1e:71:65:7b:d8:e9:23:09:42:e1:58:af:52:10:
         c1:1b:06:0d:6b:3b:97:e0:0d:24:3e:c2:76:58:5a:0e:75:82:
         e7:7b:b0:60:79:d8:82:c8:80:0c:0b:e9:c5:df:3b:a8:f0:18:
         9b:27:b6:dc:4e:55:b5:27:7c:b5:72:fa:d5:f5:96:bf:b3:69:
         b6:19:72:cf:60:de:de:f4:91:75:16:dd:da:0a:39:b7:a0:8d:
         49:0b:c5:9d:8d:4b:e2:fc:ea:65:cd:37:84:69:b1:d6:98:36:
         f2:90:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org