Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34302e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          xjo8O51ImLJfcSQGRHGFRIS2WWPInT8R0S6nc09llSc=
Subject key identifier:   AC:4B:BE:64:A0:82:2E:7B:13:53:E5:A2:CD:E9:12:23:3F:C8:64:60
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       47FF7481A11A06D562ADA57A85FE7868946332FF
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        189.90.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ff:74:81:a1:1a:06:d5:62:ad:a5:7a:85:fe:78:68:94:63:32:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=AC4BBE64A0822E7B1353E5A2CDE912233FC86460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:a8:63:07:8d:ce:54:42:11:fa:1a:6a:85:
                    3f:91:ee:b1:28:92:e9:ff:ab:6a:b3:c7:3a:e7:ee:
                    e6:fb:ba:26:b2:b4:1c:15:e2:a7:36:2c:d0:0a:63:
                    6d:73:a4:f4:0d:16:d0:00:c1:6c:3a:63:87:df:07:
                    ed:ba:a7:a6:ae:e9:80:e0:33:94:ec:73:18:65:f7:
                    b7:d8:c7:e7:1d:ad:11:49:71:40:83:a0:de:05:aa:
                    0f:68:c8:46:e7:9a:b7:86:fd:89:71:92:24:88:c2:
                    a9:8a:af:8c:cd:3c:5f:f4:67:c7:6c:8c:ba:e3:3c:
                    a4:17:a6:17:dd:c6:43:51:9c:62:62:29:75:fc:33:
                    d6:a2:f3:29:87:32:54:a1:41:9a:e4:66:2c:ef:a5:
                    be:7d:8a:66:7e:b0:7c:fb:cb:7a:34:d3:75:49:d9:
                    ef:75:b3:19:5b:a8:e1:a2:2a:06:9b:79:35:3a:8a:
                    b9:68:f7:3c:fb:b3:b8:28:2d:6c:10:10:1b:d9:11:
                    70:70:2e:69:86:3c:28:82:6f:b2:bd:42:cf:5f:12:
                    0d:35:10:e0:a4:a1:f9:59:82:16:57:35:79:45:60:
                    70:8a:28:5c:46:eb:0e:c5:27:a6:91:9c:7e:f9:78:
                    a5:17:99:46:74:fb:64:27:cf:cf:31:70:5a:5f:d8:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4B:BE:64:A0:82:2E:7B:13:53:E5:A2:CD:E9:12:23:3F:C8:64:60
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34302e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:08:c9:8f:e5:ed:b7:fe:47:8f:d7:72:17:4e:f2:1a:95:d3:
         16:ba:9a:45:a8:c3:51:65:9e:22:00:bf:d0:f8:56:4f:10:c0:
         ac:57:d2:41:c4:86:99:50:55:8b:1c:8d:96:af:67:d8:e6:4c:
         5b:50:9a:94:da:a5:2c:8d:b5:30:ea:d2:58:3d:ba:5c:63:67:
         fc:fd:3c:b8:d7:3f:10:37:32:c9:be:6e:c8:a1:b7:de:5d:57:
         90:9f:0a:2f:92:a9:76:17:63:34:1a:23:16:70:f6:32:d7:43:
         7a:6b:fd:7f:dc:74:9f:b0:18:b8:a0:ad:35:04:48:50:ab:ee:
         43:b7:07:fd:ed:0b:a0:33:f5:7c:9f:44:62:55:32:96:86:42:
         24:ee:a8:a8:ae:d8:9c:28:16:40:5c:79:16:11:93:4f:a8:32:
         f9:20:77:58:a2:08:ac:e5:0b:da:55:36:39:99:ae:9e:e6:bd:
         ce:03:05:da:67:b6:a4:c6:9a:77:a2:0a:02:36:82:90:9d:7a:
         47:30:a7:7f:07:8d:c4:c7:2a:1b:87:18:ab:62:22:77:ee:13:
         40:d2:8e:06:44:15:bf:d8:b7:5e:8d:57:b6:84:c5:be:4d:f7:
         96:2b:73:01:f3:e4:a3:64:e0:45:a4:60:52:ea:43:82:d0:82:
         05:73:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org