Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
File:                     3138362e3139322e31362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          jZh+uLNDUGx57h4DqdTfQjefX7H9CV+iAp8DDfbIQek=
Subject key identifier:   DB:9C:70:68:C5:6B:62:1D:93:F9:F2:33:61:F2:F1:DA:4F:BF:BF:4E
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       38F07703497FC9ADCA6B43583CBA04CA4B03649D
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:28 +0000
ROA not before:           Mon 08 Apr 2024 20:00:28 +0000
ROA not after:            Mon 07 Apr 2025 20:05:28 +0000
asID:                     28220
IP address blocks:        186.192.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f0:77:03:49:7f:c9:ad:ca:6b:43:58:3c:ba:04:ca:4b:03:64:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:28 2024 GMT
            Not After : Apr  7 20:05:28 2025 GMT
        Subject: CN=DB9C7068C56B621D93F9F23361F2F1DA4FBFBF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:89:26:18:1c:6b:f5:f4:78:65:87:26:7e:34:
                    d2:3f:d1:2c:b4:9e:24:9c:2c:40:de:91:4a:af:46:
                    a2:21:66:66:3f:7b:de:86:c8:1b:60:78:01:72:43:
                    5d:40:e5:4a:9e:dd:ef:f5:58:9d:e9:6e:a2:59:0b:
                    d2:24:85:15:22:45:bc:ff:cb:7a:39:f5:9c:68:59:
                    ce:60:0c:1a:8e:af:25:01:95:51:f8:c1:0d:3b:50:
                    c9:15:9d:1b:aa:67:e0:5b:ca:d3:13:f0:cc:eb:34:
                    00:02:b2:dc:86:5e:e3:06:08:07:c1:22:89:33:fd:
                    6d:72:b7:01:50:a0:34:d5:46:42:ea:8a:5b:df:98:
                    85:3c:f9:3b:73:83:aa:a8:8c:02:0b:67:b0:9c:c8:
                    32:82:d2:3e:91:42:d2:d7:eb:3b:28:a3:bd:78:48:
                    35:82:2c:69:34:df:17:65:52:14:ae:63:ea:7c:dd:
                    ac:2f:37:b6:3e:0b:fd:7a:5c:cc:b9:a4:8c:61:16:
                    57:4b:f2:1c:04:a0:22:5b:54:5c:00:85:f2:cf:4f:
                    1b:92:56:2c:8e:e3:a8:28:e9:4e:4a:94:c0:e5:df:
                    da:24:38:f9:e9:92:eb:81:13:21:04:b2:fc:23:07:
                    d4:d6:dc:fd:44:5d:d8:61:a8:bc:ff:98:ed:bd:65:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:70:68:C5:6B:62:1D:93:F9:F2:33:61:F2:F1:DA:4F:BF:BF:4E
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:fc:70:77:88:08:08:d1:ba:4a:d6:8e:02:44:12:11:6e:72:
         67:71:f2:9b:6b:c3:f6:7e:84:7a:af:13:25:5b:e6:a6:75:b8:
         f6:25:b6:50:14:9d:05:d3:c1:db:1e:5e:49:ac:ce:2c:57:a9:
         8b:bf:99:6b:f6:0a:64:c1:75:ad:b0:5e:55:fb:4a:f8:a7:66:
         bc:21:4d:f4:59:53:87:67:08:be:79:86:b9:eb:ca:d9:17:a9:
         e5:d9:46:16:36:ce:22:80:76:ea:99:5e:0f:a7:93:7b:26:03:
         de:b6:17:2c:0e:2e:9f:80:67:dd:d7:52:4c:50:9d:d2:d2:69:
         1e:cd:54:e2:2a:17:e9:48:fd:c2:eb:95:cc:f4:9f:14:0d:4c:
         97:f8:af:0a:e7:29:d7:8c:db:90:93:65:3d:1d:36:ab:6f:ef:
         43:65:55:ab:79:0d:3b:5c:8a:e8:c7:b6:b8:bf:76:5b:4b:d4:
         5f:be:d4:35:24:90:0c:7d:3e:09:2a:95:b9:d2:7a:98:2c:4e:
         98:db:0a:57:f2:6b:69:26:75:f4:60:42:a6:97:7c:e7:f4:53:
         8b:c6:6a:90:e4:4a:e5:26:bb:13:72:73:54:77:79:89:c5:d7:
         50:17:b3:e3:26:6b:97:2e:f4:77:dd:38:90:aa:c2:55:9b:de:
         d0:a7:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org