Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32332d3233203d3e203238313931.roa
File:                     3138392e39302e34342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          xBWZo10AayFLZUVJIszl4I5iAp194tXjE2Y0AbdBer8=
Subject key identifier:   74:AF:EF:56:2E:FE:30:ED:47:6D:3B:55:0F:61:ED:50:39:D3:53:BF
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       247DA6F4CB62A2DABA57DA034334C450FA28BEBF
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32332d3233203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:02 +0000
ROA not before:           Thu 04 Apr 2024 20:09:02 +0000
ROA not after:            Thu 03 Apr 2025 20:14:02 +0000
asID:                     28191
IP address blocks:        189.90.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7d:a6:f4:cb:62:a2:da:ba:57:da:03:43:34:c4:50:fa:28:be:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:02 2024 GMT
            Not After : Apr  3 20:14:02 2025 GMT
        Subject: CN=74AFEF562EFE30ED476D3B550F61ED5039D353BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:ad:ad:2d:04:9d:d8:a4:09:09:28:f4:5d:
                    d7:d0:ed:e5:a5:71:4b:b1:4d:51:7a:28:67:50:a6:
                    d3:38:ef:61:76:21:f1:26:d2:64:2e:a9:8e:31:e1:
                    c0:01:d9:5b:d6:ba:9e:63:94:32:5e:f5:55:7d:f7:
                    1b:fb:0d:1c:23:3e:3c:a4:74:eb:94:64:90:85:af:
                    11:81:dc:7c:a5:26:f7:3a:e9:b1:67:4b:39:7a:7e:
                    ff:f2:0c:2d:ab:1a:64:71:a5:a1:df:df:8a:0d:4c:
                    41:8a:38:4b:3b:06:6a:04:44:ae:2a:b2:84:a1:2d:
                    52:19:ca:13:74:ce:68:89:89:39:b3:3b:89:d3:2a:
                    f1:b4:98:ab:e0:25:e6:18:95:34:88:8e:25:20:5f:
                    ed:a2:be:50:1c:01:1f:e2:93:80:40:56:44:59:c6:
                    8a:58:69:9e:f7:27:5f:3b:fb:ea:a9:d8:32:7b:dd:
                    b7:c6:d5:a6:d8:50:42:81:64:dd:04:1c:e5:1c:90:
                    89:68:bb:0a:5a:c6:1d:c5:e7:40:26:e5:ff:ad:c8:
                    f0:81:02:45:0c:33:3d:a1:61:e8:9f:93:ac:43:60:
                    68:2c:fc:6d:ea:50:ea:f1:b2:f6:62:16:2a:18:6b:
                    4b:2e:8a:21:4c:d3:79:f8:eb:75:8c:8b:b7:7a:b6:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AF:EF:56:2E:FE:30:ED:47:6D:3B:55:0F:61:ED:50:39:D3:53:BF
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:65:37:de:ca:82:67:ec:ce:bc:c4:ee:06:4e:67:77:6b:7d:
         a9:b8:1e:b3:70:b7:1d:28:98:fb:b5:81:c9:d7:20:8a:34:22:
         b4:2a:44:8c:a0:37:5f:12:f6:8a:f0:1e:a3:ed:48:0e:93:c1:
         3d:25:38:7b:92:9c:4d:51:78:0c:ad:51:e6:88:b2:ed:c0:80:
         76:0a:82:e9:23:4b:81:f9:46:4f:2c:eb:a2:7f:48:b9:9b:05:
         18:9b:61:c5:27:58:b4:07:c9:f1:51:aa:2a:0f:2a:d0:e7:12:
         4e:c9:ef:71:75:bf:86:e6:64:99:72:a7:3d:27:b8:ce:58:4a:
         24:20:cc:66:3e:d6:83:b3:1b:52:83:f1:b2:1c:2e:ad:8d:a3:
         5e:5b:7a:7b:f5:c2:c5:ab:54:17:fc:d9:6d:0a:7e:6c:61:39:
         20:34:5b:86:54:90:4b:19:79:6c:da:81:88:a4:0b:7a:3a:77:
         30:14:3e:6d:71:c2:8d:c6:2d:ed:3f:a3:43:18:d9:57:97:be:
         b9:d9:92:e7:1a:27:97:fc:6d:ae:aa:65:25:29:7f:de:c7:95:
         93:65:ff:0f:de:95:93:8d:93:98:a7:50:42:62:3f:dd:5f:82:
         da:3d:b4:fd:0d:1c:8f:36:03:a9:aa:c8:9a:9f:76:a2:3b:71:
         a9:f7:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org