Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          Wf6rSHyg4mOXIwBRoseYjx5j8rT/TIwYWiuJmXrbQRU=
Subject key identifier:   C0:3C:12:A2:C2:B3:9E:8C:A2:C3:E3:6F:D4:4E:E5:96:9B:5E:7B:42
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       0701CCF2464BCA95ED3D77949CEFBD8CDC558DFA
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33342e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:02 +0000
ROA not before:           Thu 04 Apr 2024 20:09:02 +0000
ROA not after:            Thu 03 Apr 2025 20:14:02 +0000
asID:                     28191
IP address blocks:        189.90.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:cc:f2:46:4b:ca:95:ed:3d:77:94:9c:ef:bd:8c:dc:55:8d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:02 2024 GMT
            Not After : Apr  3 20:14:02 2025 GMT
        Subject: CN=C03C12A2C2B39E8CA2C3E36FD44EE5969B5E7B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:95:3c:6b:56:9f:6a:43:2f:9f:ea:af:c8:
                    3f:be:db:5a:56:d0:60:e1:de:9c:69:46:90:ee:72:
                    42:cd:7f:2f:9b:8d:0f:84:ee:c4:d3:8d:89:61:4e:
                    2a:a4:d4:2a:7a:a4:10:3f:66:13:a6:dc:5f:95:c1:
                    cb:94:d5:28:b5:cc:fe:0d:6b:1f:02:b6:2d:16:df:
                    93:82:e2:2d:7f:d3:cd:05:b6:ec:d3:37:f1:b4:28:
                    69:a2:39:8d:60:75:7f:ad:9d:85:dc:18:dc:70:c5:
                    c2:27:13:68:d4:83:ac:54:4d:26:db:a5:7c:77:ec:
                    df:5c:ef:63:e6:2d:b9:36:8b:92:9a:5d:a7:90:d9:
                    65:db:86:32:e0:a9:58:44:54:d7:fd:2c:c5:ca:b4:
                    8c:8d:65:c7:a2:94:e9:17:7a:13:95:49:07:3f:90:
                    5f:e2:5a:6c:ef:61:89:72:b9:a3:b4:a1:ae:76:99:
                    21:21:8a:86:da:65:3d:09:77:9f:f4:7d:d2:43:77:
                    8e:dc:93:c9:c5:54:2b:7f:bf:02:f0:d5:19:a2:50:
                    21:90:1a:ee:6d:5b:df:82:bb:d7:0b:06:08:dd:a3:
                    18:26:32:49:b2:68:de:c0:37:d3:a8:26:90:a2:dc:
                    f5:3a:5b:86:87:9b:84:5e:e0:d2:56:3a:3d:e1:31:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3C:12:A2:C2:B3:9E:8C:A2:C3:E3:6F:D4:4E:E5:96:9B:5E:7B:42
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:5f:4e:51:65:db:eb:cd:a2:5d:49:d2:92:9e:4b:72:0b:
         01:bd:8a:18:01:37:0a:52:f7:cb:c5:ac:71:50:47:b5:a2:b2:
         b1:fb:98:0a:d7:a4:08:ac:01:bd:51:b1:93:ff:a8:1c:e3:f7:
         40:90:a8:91:e3:4b:23:2e:9f:c5:f1:a9:01:f0:cb:6c:bf:8a:
         92:d0:50:53:5c:9b:e5:f8:69:a5:06:ac:7a:f9:ae:d8:ce:40:
         99:63:f6:72:a0:d4:f5:5e:8e:3b:cb:b5:6c:b1:88:8c:4e:4d:
         71:f3:ec:2b:b7:37:2d:57:6a:49:a8:e9:3c:86:bf:dd:71:b7:
         6e:e0:34:b2:37:08:c0:46:e1:7f:07:b5:71:6e:ec:9f:83:64:
         26:3c:b9:f4:6c:b1:20:46:9f:f3:16:e9:13:9a:02:b5:ea:5e:
         85:ae:d2:d7:cd:68:e8:af:71:d7:7f:40:43:2d:f8:d4:56:c7:
         b2:ba:1b:c9:da:18:55:c8:8b:93:12:95:ad:a9:bd:21:3c:ca:
         7e:9e:7c:7c:9c:1d:f4:30:13:21:16:dc:eb:02:cc:b1:93:be:
         8c:b4:3d:a6:72:16:24:ee:7b:3b:f7:20:4f:fe:94:e2:2d:53:
         32:68:db:f6:c1:f8:2a:56:8b:fd:77:16:9f:83:90:4f:c5:78:
         fc:1a:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org