Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34342e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          Er29wr4l0PJsovNi9q98BeWovBR/ON/aLVl/0S6InzU=
Subject key identifier:   56:8A:A9:DA:24:0D:89:1A:A2:6B:65:08:5A:23:5F:5B:FE:AB:60:38
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       6E3BA1FE6873C9416728962E2BDFCA77CB0D01A9
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        189.90.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3b:a1:fe:68:73:c9:41:67:28:96:2e:2b:df:ca:77:cb:0d:01:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=568AA9DA240D891AA26B65085A235F5BFEAB6038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:07:37:cb:6e:93:91:4d:d3:09:24:63:98:
                    2a:3e:49:f6:5e:74:44:61:3d:c6:53:ea:03:9b:94:
                    df:bd:01:8a:be:da:bd:0c:15:e8:02:96:2b:69:4a:
                    26:18:03:36:87:5a:c5:2c:e1:57:39:76:b6:05:3a:
                    46:e9:21:54:0d:79:59:32:c1:01:44:43:43:74:b4:
                    df:5d:57:e2:dd:2b:04:71:ec:a7:e4:1d:9f:bb:3a:
                    1c:4d:94:6c:54:88:c2:08:47:17:e5:07:cd:6d:28:
                    08:e5:83:1d:6e:00:98:e8:50:1d:12:95:6f:24:df:
                    78:5f:41:1c:a7:81:52:4c:23:d7:0b:d4:72:4c:35:
                    20:bc:c8:15:f5:6d:c9:63:d7:1a:ab:49:74:28:ec:
                    0b:47:76:59:d5:f8:fe:c3:4d:3f:03:10:8d:85:fd:
                    35:26:d7:d5:61:a5:49:85:28:b6:9f:cf:5e:d7:da:
                    fd:90:f7:e4:66:a1:96:3e:2d:12:86:f6:35:65:44:
                    5d:d9:d0:d7:fb:4f:d7:7a:74:d4:b8:9e:5d:ff:58:
                    21:11:d3:f5:d8:35:67:fe:1e:61:4e:72:5b:1b:d3:
                    bd:9d:4c:85:fe:9a:26:a8:32:2b:fb:28:90:5e:ad:
                    62:04:1c:60:cc:04:1b:f2:00:e7:99:11:49:c1:24:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8A:A9:DA:24:0D:89:1A:A2:6B:65:08:5A:23:5F:5B:FE:AB:60:38
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34342e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:27:0c:e2:3c:10:6e:88:3f:37:07:4e:5d:69:96:ef:8b:e8:
         ce:e6:e7:62:98:d7:c6:6e:1c:35:e5:75:0b:a2:95:b2:26:6a:
         4f:71:8a:b3:0d:e0:9b:58:bf:fc:da:9f:d6:4f:73:76:0d:42:
         30:14:91:29:ec:d7:fe:89:c6:4b:d5:71:6e:71:b0:8d:6f:c0:
         5f:a8:51:9b:a0:95:e6:34:32:fa:58:98:0c:c8:99:bf:90:21:
         64:f4:40:b7:7f:6c:16:c1:29:aa:90:e7:16:5b:e8:ed:0e:01:
         2b:99:21:21:93:1b:30:1f:25:66:27:fa:8b:c0:71:93:aa:ed:
         5e:4e:7b:a6:80:c3:b3:9b:63:d9:4f:18:70:75:fa:d9:b3:5a:
         c0:90:5e:40:e0:04:d4:ea:a2:c8:a3:72:e2:05:83:76:54:0d:
         59:13:ae:5a:a0:55:78:8f:41:e0:66:a4:4a:65:49:26:0d:f9:
         be:d3:d6:1e:e1:b5:d9:03:d8:c9:7e:26:9b:e5:00:f4:87:71:
         4a:3c:49:da:3e:3f:37:7a:d1:78:33:82:eb:30:49:30:cf:49:
         f8:05:60:31:89:e9:92:30:21:dc:cc:1a:a3:fb:f7:21:e7:ba:
         13:41:a7:e7:3a:68:0b:87:16:25:65:03:19:cd:e1:10:7c:1a:
         dc:d1:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org