Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33382e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e33382e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          ZlUua8Iz6ix1sfVyUzXX1P7MP5GMGuIOzjyD6PR+hWQ=
Subject key identifier:   BE:98:B5:B3:9D:83:9A:53:03:76:BB:CB:B6:55:CC:DE:99:DD:FE:A5
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       4A0FA1A72EF20A36ED4FADE27786836E54E69B07
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33382e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:58 +0000
ROA not before:           Thu 04 Apr 2024 20:08:58 +0000
ROA not after:            Thu 03 Apr 2025 20:13:58 +0000
asID:                     28191
IP address blocks:        189.90.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0f:a1:a7:2e:f2:0a:36:ed:4f:ad:e2:77:86:83:6e:54:e6:9b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:58 2024 GMT
            Not After : Apr  3 20:13:58 2025 GMT
        Subject: CN=BE98B5B39D839A530376BBCBB655CCDE99DDFEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:7a:4d:b4:7d:3c:89:10:f9:73:0a:84:cf:
                    22:53:c5:f3:f9:49:56:9d:91:2a:08:ff:e1:c7:4f:
                    0b:ce:94:0f:df:1e:91:cb:19:29:7f:30:78:88:be:
                    1f:a7:25:37:20:1c:e6:ef:d3:e2:38:01:d4:43:8b:
                    a7:2b:9a:05:c4:de:92:bc:6c:75:95:e8:f1:f4:71:
                    1e:d2:09:00:80:53:b4:43:13:7d:ce:99:0d:21:1d:
                    bc:01:ba:6e:3d:5e:58:e0:9b:5d:46:4f:84:46:38:
                    bc:ae:08:ae:88:ef:d8:1c:4e:c0:81:24:3a:49:9d:
                    55:eb:8c:b7:fe:5d:b8:ea:14:7e:b2:60:22:69:2f:
                    42:d6:ff:4b:a2:8e:18:87:db:b4:67:ad:55:64:e1:
                    4d:c0:fb:82:c1:d7:d0:61:96:74:99:df:a8:ad:aa:
                    b4:84:2a:c1:34:09:d8:dc:e3:d1:3d:bb:a0:3c:28:
                    94:ad:e3:4c:6e:ab:c6:61:5a:1e:62:bb:75:21:85:
                    e1:97:a7:e3:94:d0:e9:49:47:7d:e7:5b:6d:96:9b:
                    be:6f:6d:cd:7c:9d:d0:34:1e:a2:9d:97:23:cf:87:
                    f4:c1:29:b1:0b:32:b3:9a:af:5e:99:3e:21:2c:a2:
                    22:dd:8e:6e:6b:d0:3a:f3:e9:ba:7e:65:ce:d4:42:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:98:B5:B3:9D:83:9A:53:03:76:BB:CB:B6:55:CC:DE:99:DD:FE:A5
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e33382e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:91:4b:09:f9:c0:1f:3c:b8:35:d4:81:86:3a:c7:4e:02:25:
         68:1e:16:30:fb:53:a8:48:47:97:62:80:38:1b:6e:f1:2d:f6:
         34:f1:c1:09:4e:20:c1:4e:62:7c:ac:a0:85:6c:52:55:8b:58:
         71:df:a6:55:80:d8:31:02:d9:1e:5d:39:7f:fd:b4:88:8e:4d:
         c4:d5:b5:3c:a0:ba:d3:8d:a0:99:16:02:a4:52:b5:9e:e1:d2:
         a4:87:46:09:0c:72:1a:6e:45:5d:51:bd:86:ac:49:33:63:4b:
         24:ee:bb:96:a4:e5:53:f5:0d:bf:6b:39:ee:6d:b7:7b:ce:2f:
         92:c5:de:8e:80:7c:da:97:f3:da:d6:4a:31:5f:91:e9:bb:e0:
         7a:c1:ce:a0:f6:8b:03:5e:e6:24:20:b0:98:c6:ef:3d:eb:a0:
         04:2a:a7:69:b6:99:10:df:e9:59:84:a4:f6:0a:dd:3b:5a:02:
         0e:86:9d:a5:3e:b1:ad:c3:09:21:64:4e:df:71:23:5a:c7:97:
         cd:7d:2f:a3:c5:6a:de:e4:a1:80:b4:42:71:b6:06:63:59:38:
         f5:c9:a9:23:bb:86:7e:f5:16:dc:36:ce:92:24:16:80:71:76:
         fb:52:c0:e6:a1:db:7e:b5:44:4d:f0:f7:53:5a:97:e9:9d:26:
         5e:92:13:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org