Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34362e302f32342d3234203d3e203238313931.roa
File:                     3138392e39302e34362e302f32342d3234203d3e203238313931.roa (raw, json)
Hash identifier:          4osEyIe6O7D15BuZ3yO7z8RWBbRWBRn8LHN8tiz7rG8=
Subject key identifier:   77:55:C1:3E:99:52:4D:F9:19:9D:3E:2D:9B:2E:DC:19:0E:BE:F2:A4
Certificate issuer:       /CN=5895ED813553E67D4FE46FF447BF4235785A17D8
Certificate serial:       4B78FD4CA453FF9E29995F837AABAE1426AED1A2
Authority key identifier: 58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34362e302f32342d3234203d3e203238313931.roa
Signing time:             Thu 04 Apr 2024 20:14:01 +0000
ROA not before:           Thu 04 Apr 2024 20:09:01 +0000
ROA not after:            Thu 03 Apr 2025 20:14:01 +0000
asID:                     28191
IP address blocks:        189.90.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:fd:4c:a4:53:ff:9e:29:99:5f:83:7a:ab:ae:14:26:ae:d1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5895ED813553E67D4FE46FF447BF4235785A17D8
        Validity
            Not Before: Apr  4 20:09:01 2024 GMT
            Not After : Apr  3 20:14:01 2025 GMT
        Subject: CN=7755C13E99524DF9199D3E2D9B2EDC190EBEF2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:d9:0a:0c:2c:8c:57:fe:6b:07:dc:34:0a:
                    00:f4:55:31:70:88:06:8a:69:ad:a1:bb:8a:59:86:
                    0c:e1:58:cb:be:05:ba:0f:40:83:86:a4:3f:35:23:
                    96:f4:3f:5d:af:52:eb:b6:e0:92:d6:df:e2:26:ac:
                    41:15:5d:cf:eb:da:4a:0e:ef:5f:35:c5:30:b5:24:
                    a6:4e:90:9e:25:69:b2:1e:c6:a8:16:36:fb:ad:72:
                    16:82:04:be:54:e9:ad:86:56:47:39:c4:3c:89:ec:
                    05:25:c2:1a:fd:1d:4a:a0:09:41:25:b5:5a:48:68:
                    ef:0b:46:6e:59:4c:b7:b3:31:fd:8a:29:af:00:96:
                    e3:f8:8e:4a:81:61:06:81:03:aa:cb:14:2d:17:6c:
                    97:e3:d5:2c:d5:34:b6:21:a4:6d:94:bf:62:b1:fe:
                    2c:36:69:e7:5b:52:1b:be:c8:1c:00:1a:a2:3c:53:
                    e6:8c:42:87:96:7a:06:7f:8e:61:a2:07:f1:d6:15:
                    f0:79:73:07:41:90:67:67:b5:07:ac:10:51:71:22:
                    99:58:14:5c:13:13:99:c9:3b:4d:3a:2f:31:21:af:
                    54:17:e6:fb:36:c0:26:78:77:24:c7:ca:e3:00:eb:
                    6d:1b:da:c3:c5:fe:dd:62:96:d2:2d:6d:cd:c8:94:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:55:C1:3E:99:52:4D:F9:19:9D:3E:2D:9B:2E:DC:19:0E:BE:F2:A4
            X509v3 Authority Key Identifier:
                keyid:58:95:ED:81:35:53:E6:7D:4F:E4:6F:F4:47:BF:42:35:78:5A:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/5895ED813553E67D4FE46FF447BF4235785A17D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5895ED813553E67D4FE46FF447BF4235785A17D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/1/3138392e39302e34362e302f32342d3234203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:8f:3b:49:0e:47:24:6a:1a:3d:65:40:74:be:b4:e9:90:b2:
         71:b5:44:53:ee:86:17:8e:a0:d2:08:c7:08:ee:54:00:ea:4a:
         a2:e0:55:a0:86:f5:0d:f0:d4:23:8c:91:b6:6e:0e:3e:61:41:
         12:1a:08:6e:2d:6a:1d:0b:09:0f:17:6d:0d:0e:ec:62:c3:b3:
         eb:a3:e2:d6:37:e8:4d:c0:16:e9:59:75:b9:d8:7b:08:d1:62:
         ff:4f:8e:b1:f4:b3:f7:db:43:23:87:b6:5c:ce:66:b8:dd:2e:
         7b:3c:d4:d2:d0:3a:38:9f:9c:b9:6e:42:a5:8b:70:b2:69:26:
         67:c5:b9:6e:ce:60:5a:62:4a:7a:c0:8a:97:4c:ff:f1:ef:83:
         dd:2f:c0:2c:b8:65:55:9d:dd:dc:0b:cd:9c:a2:70:e7:5e:8a:
         4c:f1:f1:0c:9a:d6:43:07:2f:dc:8e:97:52:ac:c1:8e:fb:c5:
         bc:e9:2d:f7:21:4c:89:04:25:76:51:5f:a4:f6:64:38:f7:7a:
         ae:f0:09:cb:d9:d7:45:e4:5b:d9:12:80:8e:b9:d4:d6:2a:0f:
         be:37:6c:c8:fd:1f:0a:ca:47:d8:96:9e:75:1b:fc:49:48:0a:
         c5:33:71:7e:96:6b:5c:56:74:4c:1c:c0:b3:2b:cd:a0:a2:40:
         31:4d:cc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org