Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33352e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33352e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          V/VF/vkeorelyd1xOuBzV+5Wkc7p2Q+OmDX2PMaVIYI=
Subject key identifier:   17:07:D1:97:A5:A1:ED:17:70:95:FB:50:C8:44:5D:67:48:84:6D:53
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       5CC1E25FCCCFBD8666F83AD2C316F5C6EBAA4172
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33352e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:02 +0000
ROA not before:           Thu 04 Apr 2024 20:09:02 +0000
ROA not after:            Thu 03 Apr 2025 20:14:02 +0000
asID:                     28191
IP address blocks:        189.90.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:e2:5f:cc:cf:bd:86:66:f8:3a:d2:c3:16:f5:c6:eb:aa:41:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:02 2024 GMT
            Not After : Apr  3 20:14:02 2025 GMT
        Subject: CN=1707D197A5A1ED177095FB50C8445D6748846D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:d5:e1:d3:53:f3:0e:97:3a:60:19:8a:ab:
                    1a:f9:9f:10:58:4d:e5:b2:fe:2a:a3:8b:ea:42:7f:
                    b2:db:68:25:4a:77:cd:31:31:b5:ef:41:d7:8c:c7:
                    7a:1f:8a:20:3b:45:36:1d:2b:35:d9:84:d2:2d:bc:
                    bb:8f:61:7d:3c:45:ff:aa:9a:cc:3a:ef:fd:4a:82:
                    95:80:96:ec:a3:55:a5:7d:cc:d3:ae:cc:e1:f2:96:
                    fe:a3:dd:7c:9e:77:7c:17:fd:69:25:c2:90:7a:2b:
                    d2:3d:f7:ea:c7:bd:86:0e:6b:66:6e:ca:0d:58:8a:
                    d7:8f:d2:c0:94:3d:10:ee:b8:b9:77:17:f1:14:27:
                    a4:9f:40:1f:df:a4:05:a2:56:33:37:59:f5:69:5a:
                    b3:c1:9a:08:e4:b5:20:93:e8:b4:93:cb:95:44:3c:
                    03:65:a1:1b:72:e6:ab:7e:45:9c:24:46:dc:86:71:
                    dd:ef:a5:3c:0e:83:93:8e:78:0b:c4:b0:60:94:f6:
                    58:1a:80:b7:b9:fd:91:b4:4d:08:65:d4:8c:47:01:
                    e6:43:20:c2:75:87:1c:2f:e9:b2:22:7d:24:5e:6e:
                    f4:1c:ad:34:fc:73:63:fe:9d:4b:ef:7e:4a:9c:66:
                    88:5a:39:e4:da:23:38:d9:d4:34:42:8b:02:40:f3:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:07:D1:97:A5:A1:ED:17:70:95:FB:50:C8:44:5D:67:48:84:6D:53
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33352e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:08:2f:61:b4:8f:0b:1a:6f:7c:ea:0a:0f:c2:98:c3:b1:
         54:b1:28:c8:53:e8:7b:60:53:41:48:24:14:66:06:95:ef:b8:
         42:67:92:15:38:69:ef:92:cb:f8:8c:8c:0a:3e:00:ab:bf:56:
         1e:c7:fb:c9:1f:f4:e9:38:10:e6:f9:31:bd:a3:74:69:95:be:
         2b:33:02:dd:ab:5f:37:c4:99:1e:c0:25:41:0f:37:50:73:42:
         ff:13:0c:48:15:b2:61:98:bf:35:10:df:35:3c:d2:c9:88:4a:
         eb:44:00:5c:57:a3:a0:0e:71:84:4c:ed:f5:51:f0:f7:9a:dd:
         6e:37:ce:2f:1b:5e:71:a5:5f:a1:5f:2d:e1:c0:5c:89:8a:d8:
         dd:20:13:e8:ad:cc:90:57:f9:26:9c:b6:29:71:26:e3:14:ce:
         02:d8:1b:a0:59:5c:e6:4c:b2:3d:af:90:45:c8:38:d4:ab:4a:
         b4:e0:be:1a:23:54:ee:47:9e:f1:b8:96:d3:75:58:c8:ee:e8:
         2a:2e:5d:f7:49:5d:a8:e5:62:57:96:58:99:91:87:8c:79:2f:
         9f:d7:8d:cd:ae:e7:0a:61:43:22:ab:7d:14:3f:8a:cc:f0:7d:
         fd:98:75:6b:23:18:b2:dc:78:b1:e4:03:3f:e6:55:1c:58:2d:
         7d:ec:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org