Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa
File:                     3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          mAlfAc9jm5t1w1ajPkSoxZCwc3grGKF7lgAAFGDOjBQ=
Subject key identifier:   B7:C3:2D:C3:B1:72:73:23:39:CC:5F:D5:97:A2:8C:85:61:66:70:6E
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       7069DB5D5C556188522030C8162AFCE30BB117A1
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:26 +0000
ROA not before:           Mon 08 Apr 2024 20:00:26 +0000
ROA not after:            Mon 07 Apr 2025 20:05:26 +0000
asID:                     28220
IP address blocks:        186.208.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:69:db:5d:5c:55:61:88:52:20:30:c8:16:2a:fc:e3:0b:b1:17:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:26 2024 GMT
            Not After : Apr  7 20:05:26 2025 GMT
        Subject: CN=B7C32DC3B172732339CC5FD597A28C856166706E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:01:7c:99:b3:7c:fe:a6:4f:bc:14:f2:50:
                    35:8b:50:29:12:e1:e0:b3:15:42:68:7e:82:c2:3c:
                    90:be:4b:8a:46:d1:a2:a4:87:8a:1c:80:75:27:c0:
                    70:07:38:bd:e9:d1:ba:ec:b0:eb:c4:9e:dd:26:76:
                    6a:a6:61:61:2a:32:05:1e:3c:85:4e:f9:0a:02:46:
                    d7:c0:4d:82:13:3f:10:87:53:9d:e2:b8:53:7c:a9:
                    dd:35:48:3b:89:18:6a:32:75:29:7c:28:cb:e2:de:
                    e5:74:67:19:e1:80:b7:49:41:c6:a0:06:66:69:b6:
                    0b:0e:56:db:a3:27:9e:94:c0:58:88:2d:14:59:c9:
                    a3:d6:2b:37:4d:81:42:ce:00:55:d5:1e:a5:c6:e5:
                    a5:ae:10:be:7f:ea:7d:ac:e4:66:be:06:bb:66:8a:
                    6b:7b:2f:69:26:85:88:32:1d:2b:a8:cd:5a:2a:06:
                    31:41:40:5f:b2:74:b7:08:66:eb:43:48:93:bc:b9:
                    98:74:13:22:19:73:d4:ab:0a:3e:bd:99:33:ff:c8:
                    65:47:7c:09:fe:cb:77:25:c7:d5:5a:e6:d9:e3:03:
                    19:f7:c1:7f:9b:d9:9a:0e:96:a2:ca:eb:8a:71:9f:
                    02:1d:0e:4f:d9:01:23:c8:11:93:8b:f4:bb:eb:f6:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C3:2D:C3:B1:72:73:23:39:CC:5F:D5:97:A2:8C:85:61:66:70:6E
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:9a:bb:b7:13:d2:37:55:ab:4c:2c:1d:9a:ae:33:5a:ba:
         fe:c4:1a:f5:0f:15:07:9a:29:75:11:06:94:ba:56:4a:58:75:
         b7:25:56:7d:bd:b1:40:eb:ca:0e:a9:44:9f:76:21:6d:17:fa:
         23:58:8b:c7:d7:6e:21:5c:54:7e:77:ac:cc:ac:ca:d0:26:c2:
         fe:b7:ce:8b:0c:32:9a:e5:a2:df:16:d8:ae:d0:dd:72:a3:58:
         f0:22:23:e5:63:07:f4:30:12:52:f2:0a:34:36:ce:1c:ef:42:
         80:19:90:06:65:80:ce:37:bd:96:ef:e9:e3:c1:a5:f3:1c:be:
         4d:58:5f:7c:16:9a:16:27:3e:93:b2:6b:73:1f:e1:2e:53:64:
         d8:5b:5b:04:4e:e6:d0:ed:4d:e8:ab:a2:a7:22:65:fa:90:f0:
         38:60:f4:18:c2:51:d3:09:0f:41:07:3e:4a:7b:8c:69:c1:a5:
         5c:94:af:48:8e:9c:e1:c8:de:41:d6:6d:91:f8:3f:a8:39:e6:
         4c:4d:d9:45:5e:7b:8a:77:f4:d7:b4:03:7e:2c:f4:1a:ea:0b:
         b6:c3:64:d7:0a:01:5c:cb:60:dc:77:17:fe:f0:af:62:35:43:
         17:96:4b:d2:88:49:93:a8:50:71:e0:40:69:be:17:85:46:4a:
         50:ad:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org