Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33372e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e33372e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          K+NH2wiKAcy6X9tzIr5eGC6Lb4ict9Zfo74LiYIkL9w=
Subject key identifier:   44:38:B4:47:04:CE:49:8F:8B:DE:6B:09:50:72:5C:52:37:D5:22:0B
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       7E74824C495B713CE2E86FD7F36A0089FE69BE1F
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33372e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:59 +0000
ROA not before:           Thu 04 Apr 2024 20:08:59 +0000
ROA not after:            Thu 03 Apr 2025 20:13:59 +0000
asID:                     28191
IP address blocks:        189.90.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:74:82:4c:49:5b:71:3c:e2:e8:6f:d7:f3:6a:00:89:fe:69:be:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:59 2024 GMT
            Not After : Apr  3 20:13:59 2025 GMT
        Subject: CN=4438B44704CE498F8BDE6B0950725C5237D5220B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:88:e7:5f:7e:8d:c1:e7:3f:55:68:4a:36:
                    51:b2:b7:d8:52:ae:de:f1:44:24:92:34:50:85:31:
                    d8:09:71:25:84:f5:39:b0:6e:0b:7e:20:51:88:5a:
                    fa:2d:12:2c:8c:bd:67:ec:be:10:68:07:2e:6d:49:
                    aa:3a:c5:86:89:ea:07:fb:4c:e4:16:fe:cd:9a:b7:
                    64:8e:23:28:08:c9:9d:c5:d4:23:8d:a1:0c:2d:f7:
                    c9:15:23:3c:0d:64:f3:64:dd:ae:cb:3b:49:61:0f:
                    a3:fa:e1:96:e7:a1:33:c4:c3:ea:92:51:ca:00:9e:
                    7a:6c:59:1d:f1:a6:a1:11:ae:6f:24:cf:21:e2:ff:
                    b6:21:84:d7:6e:a2:64:90:5d:50:8c:66:c3:6e:6b:
                    25:3b:bd:e4:42:bb:c7:4a:92:a8:09:8f:f1:26:ca:
                    07:6a:7e:87:5c:b3:00:d3:fb:37:00:57:3b:9a:53:
                    d7:d5:50:7d:b6:e4:40:16:cc:e5:73:ee:0b:a4:aa:
                    92:e2:25:8a:a8:84:e6:cf:03:23:3d:6f:fe:99:12:
                    4d:b1:f2:de:fa:b4:8f:30:85:44:9f:a5:5f:19:33:
                    ae:b2:81:c9:14:20:b3:a7:7f:e3:30:18:f4:c3:1d:
                    94:9a:9e:56:11:b5:b5:1f:a9:ba:61:67:1b:cf:09:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:38:B4:47:04:CE:49:8F:8B:DE:6B:09:50:72:5C:52:37:D5:22:0B
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33372e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:26:90:01:d3:39:aa:7e:f4:ed:e5:98:17:1d:48:be:12:
         52:ef:aa:ca:df:69:6c:f6:8d:fb:d3:7d:2e:4f:f4:99:64:55:
         6a:aa:f7:dc:a5:c5:3c:9c:d4:94:21:e6:74:4f:ad:f5:dc:97:
         a6:89:e0:64:ee:14:13:e1:65:3a:96:8d:13:dd:ff:8c:65:87:
         fc:27:48:f3:14:45:da:23:ca:0f:07:e3:cc:1a:0f:fa:cb:b6:
         2a:42:7f:f5:be:c1:da:fd:84:47:d2:af:2f:da:60:c0:e1:54:
         19:e4:5f:a9:c4:e4:c4:cc:bc:7d:58:38:29:8b:86:10:fd:fc:
         ee:4d:97:8d:ef:2a:a0:bc:04:71:35:d5:23:6a:ca:79:96:ca:
         a3:c8:b4:eb:10:02:66:69:55:0f:ef:9c:52:a4:65:7e:49:10:
         86:cc:02:95:0d:1e:67:0b:46:07:13:50:18:ed:0f:60:70:5c:
         5a:a6:79:c7:a1:93:fd:58:37:e2:b3:1b:44:12:25:f6:d8:3c:
         a5:d0:d5:1b:f6:3d:65:20:eb:46:2c:bd:2e:a0:e1:c5:07:9b:
         c7:f7:da:fa:61:fd:31:8e:6d:2d:b9:54:45:f4:b9:25:1e:38:
         df:11:df:cb:9b:d0:1d:6a:7e:1d:79:0a:58:5e:f5:0d:b8:46:
         4a:e3:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org