Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33332e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33332e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          BeQxLTH34OVdPO6QZOykQAPPgb+dVWxshLpMsOs1L6I=
Subject key identifier:   45:B6:A6:A5:C5:C4:FF:D3:E7:F7:36:DA:32:A1:37:0F:C2:54:C9:64
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       73D902641E73EEDCD27484C96267174FB1111468
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33332e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:00 +0000
ROA not before:           Thu 04 Apr 2024 20:09:00 +0000
ROA not after:            Thu 03 Apr 2025 20:14:00 +0000
asID:                     28191
IP address blocks:        189.90.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d9:02:64:1e:73:ee:dc:d2:74:84:c9:62:67:17:4f:b1:11:14:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:00 2024 GMT
            Not After : Apr  3 20:14:00 2025 GMT
        Subject: CN=45B6A6A5C5C4FFD3E7F736DA32A1370FC254C964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:7f:39:75:2d:0a:8f:10:c8:f0:32:ec:64:
                    fa:21:d7:3e:c1:3f:9c:79:30:4c:1f:35:53:ac:43:
                    1a:53:0a:71:4a:1d:6e:54:9d:32:95:7b:e6:ff:73:
                    82:c9:14:10:9a:86:8d:02:17:ff:be:65:a0:00:bc:
                    b8:40:27:18:1d:6f:f0:59:da:df:bd:cd:9f:3f:5a:
                    b3:8a:70:8a:4c:00:e1:23:23:c2:c8:e4:71:8e:58:
                    d9:37:ee:91:c3:88:dc:bc:fd:25:13:42:48:98:c6:
                    7f:a7:9e:7b:9b:8d:e7:4e:4c:e9:55:09:08:16:9e:
                    60:c5:d0:c4:fa:3f:df:17:91:b1:ff:f3:05:60:67:
                    e3:33:94:33:6c:65:89:88:3a:52:61:0d:8c:73:32:
                    58:67:86:02:7d:29:be:e9:d5:82:08:4b:4c:5a:bb:
                    f9:31:f2:5a:a8:26:db:cf:73:d8:40:7b:05:2b:f4:
                    c9:b9:40:9f:f6:f5:da:d9:20:c4:2d:08:52:ad:1f:
                    23:0e:47:36:73:c0:49:f7:37:cf:88:ef:da:82:01:
                    ab:27:2d:51:19:12:60:14:c9:3d:3f:c0:fd:9b:15:
                    8f:73:ba:2f:25:6b:bd:33:cf:d5:09:e4:64:81:77:
                    71:cf:e8:ee:1a:50:f9:57:43:2f:0f:f3:fd:4c:39:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:A6:A5:C5:C4:FF:D3:E7:F7:36:DA:32:A1:37:0F:C2:54:C9:64
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33332e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:38:37:d0:97:1d:72:30:0a:f4:71:e4:90:57:76:da:53:8c:
         29:80:8f:42:b3:e2:95:0c:c8:f6:2b:3b:a1:e4:84:78:94:51:
         b9:28:e4:6d:9f:c9:a1:c2:93:bd:02:39:12:15:89:7e:a2:fc:
         26:7f:ee:a3:1e:ed:e3:45:61:f2:8b:cc:af:64:cd:bc:f4:41:
         2d:6d:f3:0d:d3:b0:dc:df:25:c5:94:28:bc:af:7a:f6:42:9c:
         32:2d:7e:0a:e1:1d:5c:29:aa:38:73:1c:25:52:34:41:4e:12:
         be:d2:e8:6c:07:67:a5:12:78:24:17:73:46:85:32:02:e9:13:
         6e:c4:7c:31:0a:6e:c4:44:e6:81:a6:ff:d8:73:cf:93:b6:91:
         5f:2c:7e:6f:8b:b6:1f:21:24:73:b9:84:65:ca:1e:b8:80:76:
         39:2e:a9:99:d9:49:80:c2:cf:44:10:ed:33:4d:41:ef:a4:21:
         1c:4b:4d:92:8d:d3:95:9d:6d:c8:93:68:00:34:b8:95:a2:a5:
         e1:a3:ad:69:80:bc:56:04:16:ab:9f:0f:b0:ac:90:82:a4:39:
         b0:1e:28:4d:77:4d:b3:54:a0:60:4b:56:d4:aa:d4:30:cb:ff:
         32:0c:43:ee:cf:06:93:b5:1f:c6:e5:c8:ae:1c:d5:4a:73:37:
         d0:6e:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org