Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33362e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          njPzEuBdw41Wc1z9GdCZ9N6rVycT8iMb2zf+WcLrP+o=
Subject key identifier:   8F:AA:E8:40:D8:1C:59:E6:51:8E:CC:91:D7:6D:BF:2F:02:C6:69:5E
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       4AFC7437EE6C838201CE622F9156F42F7F6967E3
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        189.90.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:74:37:ee:6c:83:82:01:ce:62:2f:91:56:f4:2f:7f:69:67:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=8FAAE840D81C59E6518ECC91D76DBF2F02C6695E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:86:fc:32:00:e9:57:2b:d9:8a:64:4a:27:
                    4c:55:4e:67:80:30:59:fd:38:5c:09:69:8b:8a:a8:
                    c5:54:a1:31:55:cf:e6:f9:32:df:f3:b1:ee:75:01:
                    53:77:32:71:04:6d:0c:bd:89:64:2f:6d:34:2e:ff:
                    e5:ed:d2:d1:40:38:76:6a:21:e1:68:b4:7a:98:24:
                    bf:f8:6f:a8:7e:85:a2:b1:89:b1:b0:13:76:f0:0d:
                    e0:0d:d5:77:5c:4a:cc:fd:d3:d2:ad:b7:fc:96:43:
                    79:0f:83:30:53:17:54:76:6e:b6:2a:73:a1:fb:ad:
                    6d:14:93:71:6c:e3:07:f6:f3:92:25:bf:95:a0:3f:
                    65:6b:ab:74:0d:d9:cc:4c:05:a9:fc:b1:7e:e5:13:
                    72:24:4b:d4:64:72:dd:56:8c:9a:c0:45:ba:47:d0:
                    bd:87:a1:51:93:5d:30:35:9b:c3:54:13:76:c8:89:
                    96:ce:22:7a:03:00:ad:67:52:c5:61:23:02:d8:40:
                    fb:32:81:92:87:e2:2a:9d:0d:fc:7b:3c:53:61:8e:
                    76:92:97:25:7e:e0:5d:de:9e:d5:80:82:64:a7:11:
                    47:02:5e:a7:f5:4c:e3:ef:ac:bc:16:a7:16:2b:69:
                    7c:a4:fc:17:cb:98:20:93:6e:e7:61:b4:41:6b:f9:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:E8:40:D8:1C:59:E6:51:8E:CC:91:D7:6D:BF:2F:02:C6:69:5E
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33362e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:75:ce:73:d2:f4:6e:cc:d0:13:f6:f2:1c:b4:bc:0a:d0:f6:
         9d:12:df:ea:ae:91:ba:03:26:a1:3a:d6:17:eb:b2:ef:17:9d:
         d8:0e:69:54:cf:0e:56:7c:b8:e8:44:3b:d4:d4:2e:fd:69:fc:
         02:9a:6d:3f:06:b6:0a:df:c4:d6:47:fe:68:0c:67:70:e8:2e:
         7c:bc:d9:bd:b1:4c:e8:3b:00:24:79:6a:82:77:40:94:45:d3:
         e5:69:07:fd:c3:9c:f6:c6:f7:14:d5:e9:15:c3:64:eb:ea:a2:
         8b:46:15:f0:89:a2:52:89:55:f8:16:d5:67:f7:d3:94:1d:5c:
         8f:e4:ee:68:96:eb:73:12:1a:08:6d:fd:3e:34:72:b9:6a:2c:
         dc:3a:9b:72:8d:ef:ad:c6:1a:bc:1e:6e:c1:21:45:59:14:a1:
         66:2d:12:97:e4:67:2d:98:7b:4c:ca:38:6d:b6:6f:c8:8a:db:
         27:bc:b7:9e:b0:c6:95:23:07:33:7a:62:95:58:86:9e:c4:6c:
         ff:74:95:c2:e7:84:29:a3:c0:13:73:5c:a4:ed:b0:f0:e0:25:
         db:b6:f4:ef:6c:34:1b:6e:89:86:c0:41:c2:3f:41:76:6a:cd:
         23:7d:39:2f:87:28:00:60:60:a2:ce:a4:0d:5b:d7:71:82:cd:
         34:6b:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org