Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e39362e3139322e302f32312d3231203d3e203238323230.roa
File:                     3137392e39362e3139322e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          cy2PoHzDdzVk4AOSgb9bCGBSEJOafJ61Snp3pJnW7zA=
Subject key identifier:   6D:85:30:28:32:54:0B:5F:6E:0A:13:E0:DD:1C:1A:E7:6E:68:B2:17
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       624541973ECEB81B993F8CCB0476FA084CDED47F
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e39362e3139322e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:21 +0000
ROA not before:           Mon 08 Apr 2024 20:00:21 +0000
ROA not after:            Mon 07 Apr 2025 20:05:21 +0000
asID:                     28220
IP address blocks:        179.96.192.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:45:41:97:3e:ce:b8:1b:99:3f:8c:cb:04:76:fa:08:4c:de:d4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:21 2024 GMT
            Not After : Apr  7 20:05:21 2025 GMT
        Subject: CN=6D85302832540B5F6E0A13E0DD1C1AE76E68B217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:aa:f3:34:be:8e:e7:64:7c:2f:4f:06:85:
                    ec:8e:ae:84:42:61:00:e5:fb:91:b6:80:fc:e6:22:
                    7a:97:ba:d1:27:9d:73:5f:d6:98:9e:8a:6d:27:2a:
                    b4:ff:39:6b:82:5d:bf:99:d8:82:52:58:b1:29:19:
                    6f:68:59:de:29:90:45:66:61:c6:f2:2f:35:29:18:
                    f1:4e:1c:e5:2f:4c:25:16:a7:9e:0a:f4:6d:d7:e1:
                    f0:7f:dd:5b:be:e4:59:15:60:1d:fe:e7:c0:3b:e1:
                    03:c1:85:7f:61:84:bd:a0:9b:8f:31:5b:06:dc:37:
                    fa:bd:51:af:dd:e6:e1:a6:56:da:a1:bb:db:f4:22:
                    28:fd:06:26:71:80:d0:96:79:bf:43:e3:f4:56:a1:
                    6c:8d:14:e0:3d:c4:a2:e6:c7:e3:46:3c:5a:63:96:
                    93:e4:b8:ec:b5:ae:7a:59:f7:5e:c2:0d:4c:49:f3:
                    d8:06:ae:1c:30:30:10:d5:e4:9b:2c:13:c9:a0:5b:
                    e8:60:74:e9:13:3e:cd:a2:88:95:ae:ef:2f:df:46:
                    a8:ea:a5:f4:a8:fa:6c:21:7c:6f:36:2a:dc:f1:76:
                    08:18:d3:25:93:81:4b:f8:d7:b9:fe:af:b3:a2:a8:
                    eb:93:2d:8a:10:97:a7:47:36:64:97:ab:aa:bc:09:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:85:30:28:32:54:0B:5F:6E:0A:13:E0:DD:1C:1A:E7:6E:68:B2:17
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3137392e39362e3139322e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:b9:09:07:21:bd:3a:b7:a7:56:3b:91:72:89:8c:b2:2b:72:
         bd:e0:a8:99:c3:ad:e4:40:de:4b:cc:56:dc:0a:0b:54:d5:70:
         74:db:48:c4:7e:52:1a:e9:15:17:86:c4:1e:c7:55:b4:d5:06:
         b6:b1:f5:e7:35:e8:5f:2f:34:1f:04:ed:6e:74:f1:6b:19:3d:
         9f:b2:cd:72:e3:46:e7:82:70:95:d0:4c:21:2c:c7:38:93:df:
         1e:dd:31:77:da:bf:1d:ed:c7:32:a0:f1:1c:3c:95:94:40:18:
         7c:fc:f3:58:e2:8d:8c:a0:47:f7:44:3c:84:cd:c9:be:ac:9e:
         0a:de:de:19:1c:a8:01:52:ea:dd:9d:8d:15:c2:8a:bf:1a:5b:
         43:92:07:d1:ba:8a:bc:c0:dd:55:2d:be:6d:76:44:42:cd:8a:
         40:8c:29:34:b0:75:f9:37:3c:5c:9f:72:6e:f4:59:4b:68:96:
         a6:f6:1e:53:20:ec:6e:d2:a8:da:23:59:3d:05:52:80:4a:41:
         f9:bf:f5:72:88:ed:1e:e7:64:77:ac:0c:7e:22:ac:7b:46:31:
         af:d2:06:ae:da:46:a0:ff:82:bd:02:35:ca:22:10:b0:00:ac:
         8d:45:92:25:f1:ed:d2:74:56:71:ef:1d:0c:1b:aa:08:31:12:
         33:d5:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:10 2025 by rpki-client