Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa
File:                     3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          10ksLowEdvaPAQzeh72BmbiR5pD6RHpdhgex+zBN0qs=
Subject key identifier:   B9:DD:04:ED:78:DB:67:7C:78:C9:C4:3C:1E:C4:8E:42:8E:7A:87:38
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       5A4AF5BBEEE08777F1F157FFA544D4637DBF4E75
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:17 +0000
ROA not before:           Mon 08 Apr 2024 20:00:17 +0000
ROA not after:            Mon 07 Apr 2025 20:05:17 +0000
asID:                     28220
IP address blocks:        186.193.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4a:f5:bb:ee:e0:87:77:f1:f1:57:ff:a5:44:d4:63:7d:bf:4e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:17 2024 GMT
            Not After : Apr  7 20:05:17 2025 GMT
        Subject: CN=B9DD04ED78DB677C78C9C43C1EC48E428E7A8738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:1c:93:fa:47:e3:ba:b2:36:59:67:85:5c:
                    36:36:50:79:5b:d1:52:38:e6:8a:5b:e2:e0:60:64:
                    a9:fd:68:61:b3:0f:ea:14:3b:2c:de:af:fb:22:7c:
                    fe:30:7e:8d:1c:75:5d:9c:2a:0b:49:2d:e1:f7:8f:
                    0a:3a:2f:05:78:4f:c9:7a:07:e9:c3:1b:52:e7:28:
                    04:e5:03:f2:36:fe:e0:9b:b8:87:0c:fb:9f:ba:70:
                    3c:4f:d4:12:d6:3a:1f:0e:a6:15:21:90:8c:91:9c:
                    6f:a4:54:4b:c9:82:42:fa:ba:2b:e5:b6:fa:5c:f3:
                    2b:a6:21:ba:08:ea:bb:b3:ad:a5:af:c3:4c:d5:32:
                    17:a7:47:6f:82:2e:b0:ba:2a:82:13:fb:7c:8a:4b:
                    23:55:9c:70:54:2e:09:b6:ee:de:65:ec:ce:b0:69:
                    98:20:4a:de:6a:ed:01:a1:e5:b9:9e:29:a7:39:71:
                    3b:2f:19:d7:d5:3a:c4:88:11:76:a5:ce:1f:ba:71:
                    3c:88:ca:c7:02:e9:05:ba:9a:7c:f5:79:ed:9a:3d:
                    49:7c:69:51:ee:d3:f6:50:94:97:0d:93:35:00:a4:
                    60:3e:cd:bb:f1:8f:a1:fb:a5:ef:1e:2f:d9:aa:fe:
                    2c:ee:9a:22:a7:bd:5a:38:28:92:1f:74:de:28:48:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DD:04:ED:78:DB:67:7C:78:C9:C4:3C:1E:C4:8E:42:8E:7A:87:38
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:38:0d:f7:b9:23:80:e3:d5:88:94:c6:63:ee:d8:b1:d2:
         de:2b:50:7f:02:66:e0:8b:d5:cd:7e:a3:97:9a:61:d6:1b:2b:
         81:a9:a2:d2:83:17:7c:f8:a5:54:a4:7f:38:4c:fd:4b:e0:59:
         24:d1:16:4b:8a:41:b2:c2:07:bb:f9:59:a4:02:b5:d4:16:f6:
         57:ce:f0:bf:b4:c5:8a:f7:45:e8:4d:04:d7:57:8e:bd:04:ae:
         b0:ce:61:a3:10:0a:ad:1b:89:fc:64:08:58:94:47:d0:3c:ce:
         6f:38:62:ef:ab:84:ec:a7:4e:28:25:92:3e:04:5d:cc:7b:b6:
         c2:83:23:5c:18:48:f7:f2:dc:b3:5b:06:96:73:b0:21:f2:4a:
         ee:c8:70:1f:69:c0:5a:2b:83:6a:1f:bf:16:13:f4:1f:a6:c8:
         76:3b:6b:cc:45:74:eb:4c:3d:a3:54:30:24:16:82:2f:73:1a:
         ab:ac:74:0c:f0:f7:35:79:ee:5d:72:6c:ba:c7:da:45:61:81:
         11:19:47:98:ba:a1:bd:02:84:1a:73:61:d2:b8:fb:3f:24:5f:
         a0:ee:98:1a:bf:53:ac:01:d3:03:d3:96:cf:6b:b7:7e:76:58:
         d6:ad:3a:d0:69:a8:86:16:eb:dd:48:55:0c:7f:6f:74:c4:bb:
         7c:84:16:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org