Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa
File:                     3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          6qdOrFjevHm86il/JRleios5TmbtpyFL3TwwxRzJ4Ig=
Subject key identifier:   CC:C7:DE:26:C8:10:4F:F6:1C:D0:1D:53:96:74:48:A9:99:6E:15:28
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       599C2441111B389CC8F37F0179C94AEFDF7A3CF4
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:24 +0000
ROA not before:           Mon 08 Apr 2024 20:00:24 +0000
ROA not after:            Mon 07 Apr 2025 20:05:24 +0000
asID:                     28220
IP address blocks:        179.190.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9c:24:41:11:1b:38:9c:c8:f3:7f:01:79:c9:4a:ef:df:7a:3c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:24 2024 GMT
            Not After : Apr  7 20:05:24 2025 GMT
        Subject: CN=CCC7DE26C8104FF61CD01D53967448A9996E1528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:e2:0e:1a:f3:1e:b3:9e:38:a9:60:7c:21:
                    53:86:17:9f:b2:4f:6a:28:93:6a:dc:6d:81:14:7f:
                    a3:36:1e:00:e6:0a:61:a9:5c:74:3d:42:f1:74:72:
                    57:fd:0d:0b:79:2b:00:4f:0d:90:5d:93:55:31:81:
                    0b:ae:34:5e:74:d9:99:94:66:cb:11:b1:6d:8e:b5:
                    b3:d5:d0:83:c7:ce:82:09:31:98:90:56:da:21:4b:
                    25:ea:a2:9f:21:83:29:b0:28:1f:b5:1f:1f:15:80:
                    b8:75:2f:fe:dc:aa:b1:d3:06:1f:cb:50:e5:02:bf:
                    06:aa:48:fa:1d:45:88:b7:9d:af:83:a3:05:df:84:
                    20:a8:59:1d:c6:82:69:b5:74:27:1c:5e:1c:f5:c1:
                    21:a5:2c:e7:cd:06:e7:23:a1:d0:92:46:c9:2e:8b:
                    e7:0c:64:5a:b9:a7:9c:10:60:96:48:6d:ac:bb:d9:
                    68:32:89:76:0a:a4:69:11:0e:90:c9:f0:a6:9f:ce:
                    0c:f3:20:e5:2f:68:db:db:77:6e:83:5b:17:ee:cc:
                    51:06:95:bc:0b:d5:b6:ef:b9:a0:2f:64:09:43:0c:
                    06:46:60:17:f6:19:51:70:42:81:e3:66:e6:3c:40:
                    0f:05:77:a2:df:db:7f:0b:82:fd:fd:fc:37:ba:fd:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:DE:26:C8:10:4F:F6:1C:D0:1D:53:96:74:48:A9:99:6E:15:28
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:5d:4e:49:62:fd:0f:c5:70:6e:e8:98:72:25:72:62:4a:
         94:bf:dd:d4:e6:bd:a9:14:28:0c:5e:45:c5:85:38:31:64:2c:
         62:d7:f8:ab:a2:29:af:8a:01:8e:b7:08:39:eb:af:f8:d0:b6:
         27:da:e8:41:5a:09:66:ad:0c:15:dc:12:90:1c:38:38:d9:f3:
         99:ca:30:53:cb:10:5d:c6:7b:b1:b6:56:4c:15:97:6e:16:9e:
         ae:13:eb:38:35:8a:be:bc:fd:a8:30:77:c9:4b:53:4a:56:cc:
         17:4e:39:83:be:ab:e5:4b:47:ac:57:f7:9a:52:11:36:41:cb:
         43:95:f3:05:c7:b5:b6:8d:52:28:4c:06:58:5c:fc:c9:dd:4d:
         22:b0:00:ab:fe:3a:ac:61:e7:0f:e0:ca:f6:b3:8f:8c:9e:72:
         a1:be:83:12:15:11:59:62:fc:5f:64:4b:b1:70:ff:de:69:09:
         1d:46:17:33:40:c8:51:f5:f5:e9:15:c0:9f:8a:62:80:48:9a:
         1e:c5:f8:a3:e7:f0:2c:17:60:4e:e2:ff:ca:c7:37:d1:9e:9a:
         65:6a:7c:d2:18:cd:75:12:1c:db:f8:82:a2:fe:e8:3c:e5:42:
         5a:cc:48:20:8c:4f:8d:d3:f1:6f:c5:ac:b4:3b:b3:5d:7d:22:
         49:62:f7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org