Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34332e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34332e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          RFtqoFzGGba8ZmYxyBmqi9sJheuWTwKh4ebxESwDrVg=
Subject key identifier:   6E:DB:66:92:33:DA:19:04:ED:4A:F9:36:82:87:61:54:F5:F8:7A:21
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       0C82A10CF33507DE4B6F79158CA21B630DDA40AA
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34332e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:00 +0000
ROA not before:           Thu 04 Apr 2024 20:09:00 +0000
ROA not after:            Thu 03 Apr 2025 20:14:00 +0000
asID:                     28191
IP address blocks:        189.90.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:82:a1:0c:f3:35:07:de:4b:6f:79:15:8c:a2:1b:63:0d:da:40:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:00 2024 GMT
            Not After : Apr  3 20:14:00 2025 GMT
        Subject: CN=6EDB669233DA1904ED4AF93682876154F5F87A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:ec:ca:50:66:e5:0d:93:6f:61:f8:f8:ba:
                    03:6d:85:4d:f4:5b:0c:c5:74:45:5c:9c:41:cd:35:
                    04:4b:ce:fd:86:e1:74:cd:a4:70:c7:3e:c5:b5:cd:
                    73:77:39:ae:9a:d0:ae:7d:f2:66:97:de:4a:23:aa:
                    36:f3:42:bc:70:f9:0d:33:c6:ff:4e:cc:4e:dd:59:
                    71:2f:9f:0e:cc:a2:3b:85:fd:8a:49:41:31:20:c5:
                    c0:d7:78:ee:fb:59:fc:da:50:34:87:de:b5:c4:21:
                    94:26:cd:35:53:db:79:57:a8:6c:2d:73:29:c7:c1:
                    a2:cb:3f:08:85:4e:d8:ec:82:2f:80:aa:1b:e3:cf:
                    c7:87:0c:9b:63:69:5d:5e:85:e6:cd:cd:a5:28:4b:
                    74:df:46:80:ec:85:8a:08:48:41:ef:68:68:a0:2f:
                    e0:a8:32:43:a7:d5:17:09:3d:57:ff:68:76:11:d1:
                    7d:65:54:7b:b9:83:99:08:9d:ee:16:a7:51:f8:4d:
                    19:e3:5c:d3:7a:f5:e0:3f:03:d9:ff:7f:f4:8e:ba:
                    85:e3:33:0c:17:74:41:42:0d:c7:30:69:38:73:34:
                    96:03:47:b5:68:44:dd:5a:ab:56:be:17:b7:83:e5:
                    6e:97:73:86:39:e7:07:67:87:2a:68:df:73:59:8b:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DB:66:92:33:DA:19:04:ED:4A:F9:36:82:87:61:54:F5:F8:7A:21
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34332e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:97:08:e7:fe:06:5a:d0:fd:c4:50:0d:8a:93:78:f5:aa:
         1c:80:6f:33:20:76:c6:7b:e8:8e:1d:35:29:d0:b9:ea:c4:1a:
         15:77:a5:34:ae:be:b9:8e:87:3f:4b:d5:25:2c:e3:db:de:ef:
         7c:a2:ea:d1:74:0f:9b:85:8c:c5:84:7a:2d:19:18:ba:11:4f:
         c5:af:fb:06:fd:b8:b6:91:8a:92:d6:70:10:7d:fa:3e:9f:27:
         33:90:44:02:64:f1:df:4a:f4:96:11:ae:e4:ee:14:7d:2e:53:
         47:71:fb:6e:52:f3:88:43:cf:c9:99:c6:02:47:b4:f4:eb:92:
         c7:af:8c:17:45:95:14:a8:52:69:c3:7d:52:e1:e6:17:c5:bd:
         aa:97:cc:9a:b2:3a:18:aa:d8:58:4d:4c:ca:79:94:8c:d7:91:
         7d:e0:35:dc:bd:32:ea:59:4c:ea:ff:2e:92:05:7c:0d:71:a2:
         af:de:fd:18:60:43:c5:9b:3e:b5:fa:1d:5d:f3:c8:6c:8e:a9:
         42:0d:57:1f:e1:5b:96:9c:91:32:c6:17:c1:88:56:65:9c:d2:
         5c:bc:78:7c:8c:04:9e:d1:de:32:68:95:05:20:5e:9f:d9:2f:
         04:6d:70:a0:0d:3e:80:13:e1:23:5c:24:7b:d1:b8:7d:49:c2:
         35:64:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org