Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
File:                     3138392e39302e34302e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier:          +r733ncJSq45CnO84tzx0W9+U+Zr+e2eCeS2wPq6Srk=
Subject key identifier:   8F:1C:89:22:EB:9C:DA:45:30:10:3C:7E:79:70:F6:2A:DC:DE:FD:6E
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       72DC9D17B6BBABE7D7063664C4918E58AD1FB51F
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:57 +0000
ROA not before:           Thu 04 Apr 2024 20:08:57 +0000
ROA not after:            Thu 03 Apr 2025 20:13:57 +0000
asID:                     28191
IP address blocks:        189.90.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dc:9d:17:b6:bb:ab:e7:d7:06:36:64:c4:91:8e:58:ad:1f:b5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:57 2024 GMT
            Not After : Apr  3 20:13:57 2025 GMT
        Subject: CN=8F1C8922EB9CDA4530103C7E7970F62ADCDEFD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:08:cc:77:14:c9:56:24:4e:ad:ef:05:52:e1:
                    e2:91:b2:c4:5f:80:11:c3:8d:81:ad:55:ed:4e:d5:
                    ac:da:f0:58:8a:e6:4f:9e:9b:ef:08:ed:da:b9:13:
                    92:c2:47:59:a7:a3:83:16:ef:ba:82:9d:ab:dc:18:
                    88:de:2e:6e:60:e2:d3:4f:f1:ae:b1:ab:ec:2d:01:
                    4c:8a:0b:83:a1:cd:5f:ce:91:04:7a:18:c5:64:b0:
                    63:d2:a3:85:cc:6e:f1:05:df:25:f0:b7:2b:e8:11:
                    96:9a:be:55:7c:3f:23:9c:f4:22:16:06:5a:9d:92:
                    ca:91:e1:4a:32:90:28:89:67:0b:0f:53:07:a4:d3:
                    fd:f0:ec:ba:c8:f0:e0:7b:67:2e:9a:82:e1:e5:99:
                    85:e5:a7:d7:6f:a7:1f:cb:75:f8:68:5e:e6:23:ed:
                    32:2e:e4:bf:b0:06:08:bb:4a:29:53:c6:f3:f2:8a:
                    cb:01:56:a1:b2:8a:28:80:21:b5:2b:49:c1:b4:5a:
                    05:bd:20:ff:e2:43:0e:bd:fe:bc:e3:24:4b:8c:96:
                    39:f5:fa:00:f6:bd:67:1b:a0:4b:13:66:e5:bb:10:
                    bf:9b:5d:48:b6:70:d5:04:18:00:8b:9f:2a:9b:7b:
                    92:b2:c0:11:d9:4b:15:29:7d:fe:aa:dd:ff:67:12:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:89:22:EB:9C:DA:45:30:10:3C:7E:79:70:F6:2A:DC:DE:FD:6E
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32312d3231203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:23:98:09:c5:40:e1:26:53:68:f0:fd:1f:9d:9c:02:da:a5:
         ba:83:c9:b6:b6:c6:35:2f:01:b5:36:c9:ae:78:55:c1:dc:a8:
         18:2d:54:02:28:1c:39:ac:0c:4d:af:0c:3f:51:2e:ea:6f:74:
         a2:0a:03:4e:db:6a:5d:bc:ec:2a:3a:55:e1:33:1e:40:6b:52:
         b5:ef:9e:7f:e2:8f:4e:c9:9c:68:07:79:5a:2b:cb:3a:a5:0b:
         c9:cb:92:e4:3a:ab:9e:95:73:22:f4:7c:3b:e4:01:b8:2b:fc:
         2d:9a:a6:98:fc:6b:dc:92:04:94:b0:ab:86:81:90:da:bf:c8:
         13:5d:24:a5:d4:b5:c0:28:35:ef:a4:6b:f2:62:49:37:5d:66:
         c1:61:71:c5:71:e1:8f:87:5b:de:be:82:51:c1:a6:84:c3:1c:
         02:27:d0:15:17:08:f2:ff:93:35:f0:81:44:fc:34:83:c3:3d:
         d5:b9:e2:ff:35:3a:22:d6:03:c5:8e:71:49:23:91:f3:33:33:
         6c:d9:ab:09:93:65:29:0e:ac:c9:48:3d:2b:64:b5:4c:fe:74:
         eb:81:60:d9:50:56:ac:f7:23:38:6d:c4:d3:48:7e:9f:dc:4e:
         a2:bf:f6:00:5a:bf:38:03:77:60:3a:38:ca:fd:37:dd:77:fa:
         fa:3d:e3:42
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUctydF7a7q+fXBjZkxJGOWK0ftR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg5NUVEODEzNTUzRTY3RDRGRTQ2RkY0NDdCRjQyMzU3
ODVBMTdEODAeFw0yNDA0MDQyMDA4NTdaFw0yNTA0MDMyMDEzNTdaMDMxMTAvBgNV
BAMTKDhGMUM4OTIyRUI5Q0RBNDUzMDEwM0M3RTc5NzBGNjJBRENERUZENkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCMx3FMlWJE6t7wVS4eKRssRf
gBHDjYGtVe1O1aza8FiK5k+em+8I7dq5E5LCR1mno4MW77qCnavcGIjeLm5g4tNP
8a6xq+wtAUyKC4OhzV/OkQR6GMVksGPSo4XMbvEF3yXwtyvoEZaavlV8PyOc9CIW
BlqdksqR4UoykCiJZwsPUwek0/3w7LrI8OB7Zy6aguHlmYXlp9dvpx/LdfhoXuYj
7TIu5L+wBgi7SilTxvPyissBVqGyiiiAIbUrScG0WgW9IP/iQw69/rzjJEuMljn1
+gD2vWcboEsTZuW7EL+bXUi2cNUEGACLnyqbe5KywBHZSxUpff6q3f9nEscdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUjxyJIuuc2kUwEDx+eXD2Ktze/W4wHwYDVR0j
BBgwFoAUWJXtgTVT5n1P5G/0R79CNXhaF9gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMS81ODk1RUQ4MTM1NTNFNjdENEZFNDZGRjQ0N0JGNDIzNTc4NUExN0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4OTVFRDgxMzU1M0U2N0Q0
RkU0NkZGNDQ3QkY0MjM1Nzg1QTE3RDguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzEv
MzEzODM5MmUzOTMwMmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA71aKDANBgkqhkiG9w0BAQsFAAOCAQEATyOYCcVA4SZT
aPD9H52cAtqluoPJtrbGNS8BtTbJrnhVwdyoGC1UAigcOawMTa8MP1Eu6m90ogoD
TttqXbzsKjpV4TMeQGtSte+ef+KPTsmcaAd5WivLOqULycuS5DqrnpVzIvR8O+QB
uCv8LZqmmPxr3JIElLCrhoGQ2r/IE10kpdS1wCg176Rr8mJJN11mwWFxxXHhj4db
3r6CUcGmhMMcAifQFRcI8v+TNfCBRPw0g8M91bni/zU6ItYDxY5xSSOR8zMzbNmr
CZNlKQ6syUg9K2S1TP5064Fg2VBWrPcjOG3E00h+n9xOor/2AFq/OAN3YDo4yv03
3Xf6+j3jQg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org