Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32322d3232203d3e203238313931.roa
File:                     3138392e39302e34342e302f32322d3232203d3e203238313931.roa (raw, json)
Hash identifier:          7GBvwaCwVpeWZQcTkmPUqjtJHrS4ca/zcRldSgivnj0=
Subject key identifier:   F2:EF:38:E1:1C:10:14:8E:8A:E1:53:C8:FB:9A:F6:CF:89:91:C6:5A
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       0C213226CE3B3BC2CF08FA2E6A0F00267C38EB65
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32322d3232203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:57 +0000
ROA not before:           Thu 04 Apr 2024 20:08:57 +0000
ROA not after:            Thu 03 Apr 2025 20:13:57 +0000
asID:                     28191
IP address blocks:        189.90.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:21:32:26:ce:3b:3b:c2:cf:08:fa:2e:6a:0f:00:26:7c:38:eb:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:57 2024 GMT
            Not After : Apr  3 20:13:57 2025 GMT
        Subject: CN=F2EF38E11C10148E8AE153C8FB9AF6CF8991C65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:68:bc:83:8f:a1:88:fa:f7:08:34:d5:c0:
                    31:c5:01:f3:a0:9d:b4:b2:e6:d9:89:f4:82:c0:56:
                    a3:13:3e:ca:59:dc:f0:2d:1b:6d:7a:79:ea:e1:cc:
                    a0:00:1e:2b:48:75:98:43:12:f1:cc:d2:d9:81:e0:
                    1b:02:d7:a3:dc:a9:81:13:56:b4:30:e8:39:c3:64:
                    88:c6:9f:72:13:9d:76:56:ad:22:e9:34:f1:68:9c:
                    86:ea:43:01:1f:8b:43:ee:a8:95:11:49:a5:97:90:
                    2c:8a:79:19:33:20:cd:b3:7d:e9:5e:40:3b:52:bf:
                    7a:40:7e:59:07:68:bd:a7:57:b2:fb:0f:9f:84:aa:
                    97:73:f8:d1:02:34:99:a2:c2:3d:23:5b:15:99:7d:
                    79:00:07:61:61:79:93:ac:2c:8a:06:2a:07:a9:52:
                    48:59:58:02:36:96:c1:44:60:e2:f7:1b:3c:8e:c5:
                    74:09:0d:cf:56:c1:d2:9b:e7:60:62:d8:81:68:94:
                    ec:e0:96:5b:0c:1e:80:28:4a:22:e0:03:20:dc:b2:
                    4b:0e:be:89:18:12:e9:ae:f3:56:64:d8:06:be:e9:
                    87:30:93:f7:30:75:6c:ad:7c:e0:a7:b0:4d:cc:2f:
                    50:83:7b:8a:90:6c:3e:33:ef:21:9f:c0:53:59:78:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EF:38:E1:1C:10:14:8E:8A:E1:53:C8:FB:9A:F6:CF:89:91:C6:5A
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32322d3232203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:88:1e:8b:97:51:e8:00:50:96:ce:07:1f:72:b0:e4:b7:e4:
         74:50:c5:fd:e6:9b:48:d8:41:5d:17:8e:48:05:d7:4c:d8:74:
         ea:de:1f:4d:b8:16:2e:6f:0d:d0:8a:53:2d:2c:e7:36:cf:fe:
         4b:88:cc:b4:15:1f:ef:3e:c1:28:81:9a:41:d0:2c:1e:a6:8c:
         12:23:c5:cb:b2:e9:8d:e1:eb:e4:a2:81:1a:09:c9:3f:f4:5c:
         11:7c:17:0c:34:01:38:73:91:47:ff:90:0a:cd:1d:bb:be:fa:
         0d:16:48:4e:4a:01:70:5e:4e:43:c1:df:6e:e7:70:af:c6:f6:
         d0:3b:b7:7c:de:f9:28:f1:9a:9e:79:0f:a4:d2:7e:60:5f:38:
         56:e1:71:c9:8f:fb:54:d3:da:22:7d:db:10:e2:17:9e:13:11:
         47:15:b7:03:c8:e5:99:5d:48:40:cf:14:20:87:3f:c6:2c:1d:
         a0:91:ac:12:4c:dd:2f:d6:56:05:bf:ca:12:02:e8:56:fd:89:
         6a:c4:04:0d:23:05:a3:3e:40:ff:41:44:97:f8:47:69:85:cf:
         a5:33:ce:27:d9:87:40:30:38:ac:84:9b:0f:c9:70:d9:ac:73:
         96:24:1d:e8:3b:6a:7b:18:c7:4e:36:a8:e3:0c:b9:f5:72:f4:
         e7:c5:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org