Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34352e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34352e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          3Rv1eh7jJ31mSKjYSQ8G4EKtO5f0tI9TCAGsfzc5NGQ=
Subject key identifier:   E8:EB:71:DF:28:C2:85:EE:E9:3E:9C:B8:9F:B3:FE:B3:B1:B3:28:94
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       1707D2427A287C12AC3B646A9D8F0CE5B67390F6
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34352e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:13:59 +0000
ROA not before:           Thu 04 Apr 2024 20:08:59 +0000
ROA not after:            Thu 03 Apr 2025 20:13:59 +0000
asID:                     28191
IP address blocks:        189.90.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:07:d2:42:7a:28:7c:12:ac:3b:64:6a:9d:8f:0c:e5:b6:73:90:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:08:59 2024 GMT
            Not After : Apr  3 20:13:59 2025 GMT
        Subject: CN=E8EB71DF28C285EEE93E9CB89FB3FEB3B1B32894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c0:eb:b3:b3:cf:7e:88:5c:a7:ba:d6:34:cf:
                    9b:87:66:d2:e4:b6:93:6c:ad:08:86:f7:eb:18:c2:
                    b2:a7:82:7c:70:33:c2:4e:f3:9b:5f:95:42:37:f8:
                    a4:f5:cd:a5:3e:cd:3d:d4:74:c9:5f:2d:1d:13:11:
                    7f:20:1a:0f:2c:94:63:5e:88:32:0b:42:59:f7:58:
                    da:cb:f1:90:5d:41:0c:77:18:93:f9:07:69:2c:a7:
                    de:57:94:9b:f0:96:8a:82:9a:47:80:4d:7e:33:af:
                    f4:35:67:16:6b:af:04:b2:a1:e3:3f:93:f6:ab:34:
                    38:2b:c6:80:3b:c6:c4:ec:4d:4b:89:20:2b:80:34:
                    51:29:e0:f3:3a:b4:82:27:b2:ef:26:20:4c:e2:48:
                    4e:78:3f:81:e8:e7:03:8e:4e:57:98:ff:40:27:34:
                    2f:34:ec:a4:34:c6:cd:f7:bf:16:f9:47:3c:d2:ba:
                    96:77:6c:e5:86:cc:5a:9e:62:26:a1:37:8c:e6:92:
                    b8:6d:3f:3c:11:a1:0c:7c:e2:0b:50:1f:a0:02:d3:
                    65:35:5f:1a:05:a7:7a:61:08:96:28:01:9a:8b:a8:
                    32:6a:d3:bd:df:84:a1:f5:98:dd:ba:e7:b4:25:1e:
                    de:b5:91:ea:69:21:e2:43:78:78:15:62:6b:4d:1c:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EB:71:DF:28:C2:85:EE:E9:3E:9C:B8:9F:B3:FE:B3:B1:B3:28:94
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34352e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:32:23:d1:e6:d2:71:41:b3:a6:5e:1d:f0:a9:db:98:6d:bd:
         f7:5a:f4:d4:02:68:26:a8:3e:32:c0:19:85:99:76:c5:cf:69:
         2d:89:86:ba:86:07:21:22:0a:3c:5e:84:9a:91:43:1f:79:f7:
         e1:65:57:35:ea:5b:23:d3:3f:6c:a2:7e:51:cc:fe:60:1c:02:
         39:0c:bd:5a:54:35:b4:e8:ba:c8:28:15:60:53:3a:ca:59:0f:
         71:3c:16:63:b8:e9:06:22:ba:fa:cd:38:91:a7:d6:5e:22:5f:
         b6:94:93:7a:7e:41:97:04:8f:0e:20:ab:17:fc:8b:0c:6c:92:
         1d:8b:c0:1a:1e:b3:07:8d:43:6c:6e:c0:da:b8:77:95:12:e4:
         25:77:a5:22:75:a7:54:4a:8a:62:a8:9a:9f:53:f5:18:c3:0b:
         ab:24:dc:7a:36:19:0c:24:c6:fc:e0:f8:c7:6e:5b:42:09:5e:
         02:96:d1:54:2e:98:e0:4f:de:b8:f2:9b:29:59:9d:b1:2e:1e:
         73:c7:68:5d:1d:32:ff:c2:06:28:2d:c5:44:d1:da:c8:6d:2b:
         2f:c0:54:d4:86:fe:12:95:7d:50:6c:29:43:ed:61:45:dc:70:
         63:21:97:27:24:d1:91:a9:ee:5d:93:c2:0a:54:03:5c:ac:cf:
         a7:da:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org