Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          p5e/PupRTx1cLrJCiI+V8cwBfJEu1GtBf2XN/48lpVA=
Subject key identifier:   32:24:BB:9C:CF:15:BA:35:72:2E:4D:0E:72:1C:C4:CD:65:CE:38:3E
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       482D054288BFB3AB5F197C8A3ECE83CB9E528BD2
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:20 +0000
ROA not before:           Mon 08 Apr 2024 20:00:20 +0000
ROA not after:            Mon 07 Apr 2025 20:05:20 +0000
asID:                     28220
IP address blocks:        186.208.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2d:05:42:88:bf:b3:ab:5f:19:7c:8a:3e:ce:83:cb:9e:52:8b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:20 2024 GMT
            Not After : Apr  7 20:05:20 2025 GMT
        Subject: CN=3224BB9CCF15BA35722E4D0E721CC4CD65CE383E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:f1:62:07:33:36:e0:f1:93:52:86:8a:6a:
                    be:36:fb:be:84:e2:dd:42:1b:9b:6f:19:78:49:91:
                    a2:41:26:05:bf:83:50:c1:9c:14:be:56:8d:ae:c1:
                    e3:3d:5b:e5:17:73:7c:f7:62:32:c6:18:6d:48:6d:
                    c5:3c:ba:c3:2a:36:af:3f:cd:da:01:32:00:73:ef:
                    26:51:d7:f9:94:6a:c5:3c:e9:86:9f:06:33:84:1b:
                    b0:a5:0b:cc:c1:14:ee:96:47:47:7d:f0:f3:12:ea:
                    70:15:fe:34:1c:0f:f8:83:62:2a:9a:84:a2:f9:03:
                    a1:d1:f5:32:07:e1:f2:40:09:ac:f5:fe:48:71:3a:
                    b2:d6:e1:c5:52:56:84:c4:78:6e:a2:01:8b:13:4e:
                    14:e3:de:df:96:e4:df:1f:00:68:1f:15:2f:13:62:
                    11:47:27:a5:bf:9b:b9:39:bf:8e:c8:30:85:e5:eb:
                    5b:d8:4c:b1:d6:11:9c:5f:5d:63:4f:ce:00:8a:97:
                    4a:3b:aa:68:06:c2:e0:0a:4b:51:af:38:fb:15:84:
                    76:2c:94:68:1e:55:a7:88:e8:fb:fe:10:01:84:6f:
                    ec:6d:73:5f:12:fb:d4:ee:f1:53:ec:e7:d7:b8:cb:
                    ae:8f:27:4c:95:cf:49:97:98:fa:e3:16:8a:d9:12:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:BB:9C:CF:15:BA:35:72:2E:4D:0E:72:1C:C4:CD:65:CE:38:3E
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5d:e0:1b:ff:ad:62:80:67:d9:1b:79:7f:51:bb:7b:0f:3f:
         6c:90:4a:d5:e4:82:48:bd:09:58:b0:9b:09:ab:56:e6:d4:6c:
         3f:d6:8a:6e:29:e8:f5:7f:d0:c1:9e:16:48:76:89:96:14:88:
         d8:20:05:c8:d0:b8:1f:94:94:a5:d8:f5:a1:2f:d8:06:5c:28:
         b0:30:aa:ca:4e:fa:e2:c4:58:84:3d:d4:f3:7c:3c:7e:6c:7d:
         9c:c4:ff:70:b3:87:80:2b:3e:e4:e5:01:7f:61:dc:ce:9f:2a:
         15:2d:c4:2a:99:ba:e9:70:f9:51:f5:57:3c:64:d6:b0:07:ec:
         e1:85:76:a4:60:67:b6:57:99:3a:36:0f:c6:3c:6e:e4:75:15:
         3d:49:f9:ff:d6:9f:00:25:87:0c:f8:e5:47:ec:fe:3e:92:aa:
         c9:17:5d:b7:d0:b8:91:96:c0:8a:91:a8:99:39:ff:79:b8:6b:
         27:8d:e5:c5:d4:00:64:f8:18:0b:6e:a6:fb:e9:93:df:9f:6f:
         d7:79:44:2d:92:28:0f:62:de:7e:65:37:e3:a1:23:22:fe:aa:
         ed:60:c4:62:cc:45:7d:34:2d:8c:84:84:a8:76:9b:14:d6:f3:
         9a:ea:df:61:a6:58:50:ec:b5:0b:00:5b:a5:1e:fd:58:c2:b9:
         8a:cc:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org