Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139332e39362e302f32312d3231203d3e203238323230.roa
File:                     3138362e3139332e39362e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          Lnft55WrtI6fokMk+5cmjpAYBFIGp3Yi5gYRmlqBeb8=
Subject key identifier:   75:DC:FE:63:8C:5C:E1:C0:6A:5C:AF:5F:59:3D:EF:F1:89:F3:06:EF
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       583194346D6C6A27D434DE1CF42072EADA08FAC8
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139332e39362e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:30 +0000
ROA not before:           Mon 08 Apr 2024 20:00:30 +0000
ROA not after:            Mon 07 Apr 2025 20:05:30 +0000
asID:                     28220
IP address blocks:        186.193.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:31:94:34:6d:6c:6a:27:d4:34:de:1c:f4:20:72:ea:da:08:fa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:30 2024 GMT
            Not After : Apr  7 20:05:30 2025 GMT
        Subject: CN=75DCFE638C5CE1C06A5CAF5F593DEFF189F306EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:15:8e:4c:3f:59:88:e5:fd:df:81:f9:22:
                    0b:52:9a:dd:d0:50:22:66:c6:07:1d:85:15:39:f9:
                    ef:21:dc:a7:3d:4c:bd:f2:9e:66:dd:df:c1:a2:04:
                    07:ad:ca:0a:81:99:80:61:32:aa:06:db:d2:13:07:
                    d0:fa:68:28:19:17:56:f9:6e:cb:12:8a:b0:60:cd:
                    47:14:d1:da:14:e2:f9:ff:d6:32:60:99:1b:c0:a3:
                    68:53:4e:9a:bd:43:90:be:6d:33:05:79:03:cd:5c:
                    e3:ba:8f:2f:9a:53:00:50:d1:45:28:f8:f2:6d:21:
                    f6:1a:ef:0a:43:0c:a7:a0:a0:f4:ef:a2:48:b9:13:
                    64:77:74:d4:a2:24:3a:6a:f6:74:da:a1:11:15:4c:
                    bb:72:19:3d:b5:00:9b:84:54:25:66:84:65:10:08:
                    8f:69:6a:8f:a8:e7:af:9f:eb:a9:41:c5:a2:f5:e9:
                    7e:a5:71:02:dc:28:fc:56:3e:2a:5d:2f:62:78:cd:
                    8b:c2:a9:e7:32:ee:52:60:24:a0:a9:87:07:83:f2:
                    d2:12:b5:0e:e7:df:e6:88:68:19:02:25:73:33:41:
                    ee:9b:06:00:78:36:d1:e8:f5:b7:97:31:c2:d6:ea:
                    1a:d0:92:30:18:ce:63:e3:60:4a:1a:cc:ae:1b:e6:
                    f2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DC:FE:63:8C:5C:E1:C0:6A:5C:AF:5F:59:3D:EF:F1:89:F3:06:EF
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3139332e39362e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:f5:07:db:6d:3f:62:15:2e:cb:ff:0a:c6:63:22:c0:0d:
         99:53:60:0b:c1:37:3a:9d:5d:8d:5f:56:36:4e:14:77:7a:a1:
         c3:84:52:58:4c:a0:62:7a:43:68:c0:ad:d4:52:b7:ca:d0:b1:
         fa:19:5a:0a:05:b7:51:1c:ce:64:ec:43:43:9a:72:65:e3:e3:
         05:48:38:6b:9e:e4:0e:4e:b6:56:7a:22:77:dc:8a:e6:35:5f:
         50:36:c1:40:d9:03:1d:a9:cc:bd:dc:af:f1:1a:32:15:33:3a:
         b0:4a:7a:99:c4:57:f0:00:6e:1d:b2:00:cc:9c:75:99:4c:8e:
         3f:b1:ae:73:e5:3c:83:0b:79:03:3d:d7:9e:1e:ce:ed:03:c8:
         66:d4:e2:91:b7:92:e7:f3:ef:be:01:16:75:ba:c4:15:1c:ba:
         f6:99:2e:d8:93:f7:ba:5c:ab:16:81:8f:80:2e:99:aa:eb:1d:
         3c:6d:31:b2:8c:61:02:81:ab:bb:e5:e8:5d:0b:6b:7c:c9:01:
         e6:3b:f3:2b:c4:7f:cf:1d:5f:77:05:ff:b8:6f:72:38:b5:88:
         6d:70:70:d4:07:f0:0f:46:2b:49:96:4d:73:59:64:b8:71:15:
         09:54:1b:30:6e:94:a9:fb:b7:52:06:4a:d4:c6:64:9c:94:5e:
         a4:3d:64:15
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWDGUNG1saifUNN4c9CBy6toI+sgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMzBaFw0yNTA0MDcyMDA1MzBaMDMxMTAvBgNV
BAMTKDc1RENGRTYzOEM1Q0UxQzA2QTVDQUY1RjU5M0RFRkYxODlGMzA2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sBWOTD9ZiOX934H5IgtSmt3Q
UCJmxgcdhRU5+e8h3Kc9TL3ynmbd38GiBAetygqBmYBhMqoG29ITB9D6aCgZF1b5
bssSirBgzUcU0doU4vn/1jJgmRvAo2hTTpq9Q5C+bTMFeQPNXOO6jy+aUwBQ0UUo
+PJtIfYa7wpDDKegoPTvoki5E2R3dNSiJDpq9nTaoREVTLtyGT21AJuEVCVmhGUQ
CI9pao+o56+f66lBxaL16X6lcQLcKPxWPipdL2J4zYvCqecy7lJgJKCphweD8tIS
tQ7n3+aIaBkCJXMzQe6bBgB4NtHo9beXMcLW6hrQkjAYzmPjYEoazK4b5vLDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUddz+Y4xc4cBqXK9fWT3v8YnzBu8wHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM2MmUzMTM5MzMyZTM5MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDusFgMA0GCSqGSIb3DQEBCwUAA4IBAQBU1vUH220/
YhUuy/8KxmMiwA2ZU2ALwTc6nV2NX1Y2ThR3eqHDhFJYTKBiekNowK3UUrfK0LH6
GVoKBbdRHM5k7ENDmnJl4+MFSDhrnuQOTrZWeiJ33IrmNV9QNsFA2QMdqcy93K/x
GjIVMzqwSnqZxFfwAG4dsgDMnHWZTI4/sa5z5TyDC3kDPdeeHs7tA8hm1OKRt5Ln
8+++ARZ1usQVHLr2mS7Yk/e6XKsWgY+ALpmq6x08bTGyjGECgau75ehdC2t8yQHm
O/MrxH/PHV93Bf+4b3I4tYhtcHDUB/APRitJlk1zWWS4cRUJVBswbpSp+7dSBkrU
xmSclF6kPWQV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org