Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137372e38392e3234382e302f32312d3231203d3e203238323230.roa
File:                     3137372e38392e3234382e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          ADUiycwjF0vZhI8uYmQNLKbldcOV+I3PulLUed6JxMo=
Subject key identifier:   A4:78:85:59:03:2D:66:47:DF:01:EF:BE:9B:11:3C:0E:F5:67:14:E8
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       289102E8E32F6DA92D3B9D8C499F49C56BF5C7AA
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137372e38392e3234382e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:19 +0000
ROA not before:           Mon 08 Apr 2024 20:00:19 +0000
ROA not after:            Mon 07 Apr 2025 20:05:19 +0000
asID:                     28220
IP address blocks:        177.89.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:91:02:e8:e3:2f:6d:a9:2d:3b:9d:8c:49:9f:49:c5:6b:f5:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:19 2024 GMT
            Not After : Apr  7 20:05:19 2025 GMT
        Subject: CN=A4788559032D6647DF01EFBE9B113C0EF56714E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:96:a2:fe:37:60:dd:7c:84:32:4f:83:6a:
                    2a:1c:4d:2b:56:db:6b:e8:58:40:09:9e:77:04:e0:
                    a0:64:05:83:6e:21:dc:c2:04:57:7c:76:b5:72:50:
                    6e:fd:a7:cb:83:63:6c:bd:2e:38:b0:06:af:51:61:
                    c3:15:df:66:a4:67:db:5d:02:d6:13:38:81:8d:f3:
                    22:94:a9:c4:2c:ef:0a:1c:f5:19:03:da:55:ca:48:
                    3e:e4:ad:18:de:a1:15:3d:82:cd:f4:e5:63:cc:a8:
                    7e:39:fa:85:25:fa:6a:3f:10:ef:87:f2:5f:a7:bb:
                    ad:23:78:db:93:b4:db:60:e5:d8:d6:0d:21:64:b6:
                    f5:8e:b6:78:a7:4f:9c:d4:fd:9a:8a:a8:f4:f6:05:
                    68:25:a5:a3:46:f8:83:fc:93:66:06:39:51:83:e5:
                    eb:15:7c:c4:43:11:5a:64:82:7e:76:c6:eb:1c:ac:
                    32:3b:35:85:41:3d:d5:aa:22:3c:d8:d3:dc:6e:40:
                    ca:42:3b:86:b0:11:96:ea:4c:2c:26:6b:fc:8d:13:
                    f4:2a:a9:45:52:ca:fa:08:d1:4d:9f:68:f4:75:76:
                    df:84:f6:45:f2:37:4f:ba:70:cb:4d:7e:13:57:f3:
                    7a:58:d3:52:35:90:31:d4:97:96:e5:ed:bb:2b:0d:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:85:59:03:2D:66:47:DF:01:EF:BE:9B:11:3C:0E:F5:67:14:E8
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137372e38392e3234382e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.89.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:73:4f:1f:b6:1b:88:57:31:04:98:f0:0b:84:e2:98:e5:98:
         c5:c1:58:75:69:91:05:86:e8:cb:27:84:bc:cb:36:0b:ca:14:
         25:38:b8:b9:3c:77:94:b2:07:7e:c9:a2:6d:52:6a:8d:ee:b2:
         df:da:bd:9d:93:94:1b:db:86:5d:aa:fe:ff:de:be:fd:89:89:
         98:64:e9:94:c7:61:f9:f3:05:fa:26:fd:02:64:e7:93:21:79:
         3d:5a:99:f4:9a:1e:52:08:46:e5:b3:c1:7f:d7:e3:60:c2:f2:
         a6:29:67:f1:94:5f:a6:30:09:fa:6c:66:af:e8:1b:37:89:6c:
         0c:64:c2:b9:07:47:2f:bf:41:91:bd:79:d5:6c:3b:a5:77:5c:
         44:2b:62:03:c1:66:d7:6a:3a:88:c8:9c:f1:fd:b8:ec:79:bc:
         23:2e:f6:d0:d9:5c:db:1f:4d:e4:70:46:2f:74:1b:32:ff:eb:
         27:87:01:aa:b1:71:1e:a1:81:53:7a:34:f2:8d:2b:0e:71:8c:
         e3:7b:97:08:7f:2a:d5:90:f4:7a:0e:45:0b:f9:77:60:a6:b3:
         44:70:25:35:cb:3b:13:ad:48:71:df:ab:89:8c:99:b7:d5:2b:
         37:b4:33:ac:1f:f6:fe:05:b7:ac:d1:39:68:e9:21:8b:9a:4f:
         04:9d:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org