Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e34302e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          S987RQb7E5b9ghZCjG7VO+0zsC8moEmxZTElwFCfwfw=
Subject key identifier:   9E:FF:DD:3C:92:F9:95:8F:D0:38:55:B0:8C:02:A8:C7:EF:F1:43:3A
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       1F9C99B1AC18E9FD24A2FF231C09DB688E5FA047
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:03 +0000
ROA not before:           Thu 04 Apr 2024 20:09:03 +0000
ROA not after:            Thu 03 Apr 2025 20:14:03 +0000
asID:                     28191
IP address blocks:        189.90.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:99:b1:ac:18:e9:fd:24:a2:ff:23:1c:09:db:68:8e:5f:a0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:03 2024 GMT
            Not After : Apr  3 20:14:03 2025 GMT
        Subject: CN=9EFFDD3C92F9958FD03855B08C02A8C7EFF1433A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:28:b2:f7:57:57:3b:51:51:47:4c:65:73:
                    dd:24:ca:24:f1:50:bc:09:bb:84:78:40:23:24:ac:
                    36:d7:ac:ce:ac:01:2c:56:55:50:b0:b1:ee:50:3c:
                    7f:d9:08:ae:61:6b:62:3d:99:50:96:34:73:75:59:
                    b5:bf:26:fd:ca:d1:ad:b0:45:db:6d:45:11:4c:ff:
                    1d:d2:af:2c:24:56:9f:4c:35:76:f9:e1:da:73:d0:
                    d1:a7:9e:22:24:6f:d6:01:f4:cd:af:23:ff:4c:62:
                    91:36:0a:9d:95:e8:3d:a3:72:a6:44:1f:7d:9a:64:
                    c7:1d:a3:bf:c8:57:4a:3f:7e:55:c9:2c:4f:e8:31:
                    8e:77:e2:35:90:ea:9f:e8:0f:9a:24:e8:92:ea:59:
                    b6:26:3c:73:76:2c:a9:f8:85:c7:38:e8:c2:75:df:
                    00:9a:78:d0:10:44:e0:80:9b:d8:9c:17:fe:5f:c1:
                    52:9e:12:5a:e7:9a:c6:40:6e:d1:ef:d5:70:b4:ea:
                    29:eb:82:22:b1:a7:e7:b3:df:cc:ed:01:be:91:3d:
                    93:41:c8:8b:72:3d:40:fb:bf:61:b3:38:5f:b4:13:
                    18:14:cd:ff:a6:6a:d2:c3:a3:2c:77:20:ce:e9:01:
                    50:7f:ea:ff:c6:6f:d2:4c:1a:80:59:4d:c3:1c:02:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FF:DD:3C:92:F9:95:8F:D0:38:55:B0:8C:02:A8:C7:EF:F1:43:3A
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:44:47:50:41:65:46:d6:1c:06:45:42:f5:e7:e9:d0:49:dc:
         f4:a5:a0:7f:8d:eb:dc:39:5c:71:37:a6:79:6d:6f:e5:88:eb:
         5e:d0:dd:6e:ed:2b:18:fd:e0:61:c1:85:6a:9e:39:e1:53:79:
         6e:6a:5d:ff:9d:17:a6:62:0a:df:68:b5:a3:40:74:26:0f:2e:
         05:25:7d:e3:38:d0:c8:58:ce:a4:e2:4d:32:a8:86:24:5b:48:
         b8:4d:dc:3a:0b:c8:2d:f9:c4:9e:00:b0:55:25:ca:78:96:0a:
         a3:6e:52:5d:28:31:a0:2a:4c:00:29:9c:ab:9f:ef:4c:38:7b:
         87:e4:f5:6a:cf:c8:8e:12:c2:9a:60:48:5d:3b:ba:28:7f:e7:
         54:31:7b:d5:27:e6:55:4c:46:a6:0a:47:2b:eb:05:00:3c:6a:
         49:fa:62:17:08:b6:15:2c:5f:19:b5:5a:df:0a:f4:ac:4c:11:
         d2:1a:b7:8d:20:2d:d6:7c:ce:fc:61:8e:8b:c3:02:a7:a5:08:
         1a:0d:f7:30:98:bb:9b:0c:41:14:10:92:13:40:9e:a6:95:62:
         69:ba:71:99:94:2c:18:f9:9d:05:0f:4d:0d:12:d4:0e:f2:ae:
         3e:4f:1f:53:02:51:df:0f:b0:e6:8f:4d:1f:b2:c9:c0:7a:5e:
         b9:c5:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org