Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          OeNf4RbQw95J2pqH9OFZWJUvw10tTMjhqCVMCZQHoGk=
Subject key identifier:   8A:1F:98:8B:06:91:FE:F5:71:62:94:71:79:72:09:65:0B:64:7D:16
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       1BA2CFE67DFD815ACF5C1609853D088F989A1D5A
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:27 +0000
ROA not before:           Mon 08 Apr 2024 20:00:27 +0000
ROA not after:            Mon 07 Apr 2025 20:05:27 +0000
asID:                     28220
IP address blocks:        186.208.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a2:cf:e6:7d:fd:81:5a:cf:5c:16:09:85:3d:08:8f:98:9a:1d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:27 2024 GMT
            Not After : Apr  7 20:05:27 2025 GMT
        Subject: CN=8A1F988B0691FEF571629471797209650B647D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:65:5f:31:90:07:e1:63:3e:84:4f:18:df:
                    44:d1:02:39:4a:c0:fc:a3:41:9c:1e:6a:45:ca:b7:
                    92:89:c2:45:d2:3d:43:d3:bf:a1:16:69:53:24:c1:
                    66:f5:87:8c:d8:b3:fc:2c:06:f6:98:12:df:a8:35:
                    b9:e1:8f:9c:e0:8c:63:90:ef:3b:b6:56:62:b0:a7:
                    79:7a:97:0b:cc:32:46:38:bb:3e:5c:92:d5:78:c7:
                    f4:08:bf:a0:56:bc:8d:10:0c:23:76:e4:13:a7:bf:
                    d7:6c:89:b1:3b:d7:62:58:b6:0e:d2:92:b0:35:04:
                    b4:a9:57:7e:ac:1b:83:55:a2:32:e5:a2:ec:ed:e2:
                    7b:24:aa:87:82:25:5e:95:47:8f:e2:f6:ba:9e:30:
                    0f:e8:c1:d8:24:be:9f:b4:c4:b0:11:ea:5a:02:2a:
                    33:56:16:7b:a5:39:48:55:d7:43:07:91:c2:2a:30:
                    e9:e3:67:ed:f2:66:26:c2:d4:4f:ce:c2:48:0b:41:
                    84:3f:c7:ac:32:13:d7:7a:0e:15:50:be:e9:0b:71:
                    f6:54:2a:65:6d:33:02:22:7f:b1:5a:ce:9e:f0:d4:
                    4d:9e:31:80:8c:49:08:62:be:8d:d8:05:be:0c:b2:
                    77:62:1c:83:26:ed:f1:e8:cb:bf:7d:e5:d8:87:62:
                    d7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:98:8B:06:91:FE:F5:71:62:94:71:79:72:09:65:0B:64:7D:16
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:2f:12:25:99:a4:d0:83:64:c7:2f:00:ab:d4:4c:08:52:
         21:aa:25:16:fa:3a:c1:8e:ba:62:9c:ba:de:d5:35:a8:e0:d5:
         fe:c4:ee:09:2d:b6:68:b4:a8:57:f9:58:1f:69:7a:83:bb:21:
         d7:8f:ab:96:92:43:3c:30:38:63:81:82:af:ba:48:fe:a4:40:
         c9:83:d5:c2:aa:74:02:40:6b:97:eb:98:07:62:2b:c0:6e:5c:
         94:33:9d:fa:aa:53:4a:f2:2d:c2:3f:65:6e:f0:6c:f1:83:55:
         3c:26:ff:2c:24:3c:eb:36:b1:da:e4:89:b2:a8:9a:af:40:e5:
         d4:38:a1:72:80:c4:19:bb:41:38:c5:91:09:e6:b3:d6:74:36:
         09:ec:68:82:38:6d:7b:82:6f:f5:47:12:97:bc:4b:72:fb:ae:
         54:28:a6:65:8d:94:75:20:62:e5:67:8f:34:7c:53:f1:e0:70:
         8c:f2:9e:8f:41:19:bd:3c:51:11:af:97:c2:e2:fe:a2:52:8d:
         ff:b0:5b:f4:34:ce:66:d2:b4:d6:b8:a7:e3:60:a3:7e:b0:62:
         4b:ad:45:45:1e:a7:65:d8:4a:68:61:73:b5:e7:d3:db:ae:6e:
         d8:7f:57:81:f6:d8:89:fa:4e:c3:d1:95:d6:d1:35:6f:0c:ce:
         69:95:19:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG6LP5n39gVrPXBYJhT0Ij5iaHVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjdaFw0yNTA0MDcyMDA1MjdaMDMxMTAvBgNV
BAMTKDhBMUY5ODhCMDY5MUZFRjU3MTYyOTQ3MTc5NzIwOTY1MEI2NDdEMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPWVfMZAH4WM+hE8Y30TRAjlK
wPyjQZweakXKt5KJwkXSPUPTv6EWaVMkwWb1h4zYs/wsBvaYEt+oNbnhj5zgjGOQ
7zu2VmKwp3l6lwvMMkY4uz5cktV4x/QIv6BWvI0QDCN25BOnv9dsibE712JYtg7S
krA1BLSpV36sG4NVojLlouzt4nskqoeCJV6VR4/i9rqeMA/owdgkvp+0xLAR6loC
KjNWFnulOUhV10MHkcIqMOnjZ+3yZibC1E/OwkgLQYQ/x6wyE9d6DhVQvukLcfZU
KmVtMwIif7Fazp7w1E2eMYCMSQhivo3YBb4MsndiHIMm7fHoy7995diHYtfHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUih+YiwaR/vVxYpRxeXIJZQtkfRYwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM2MmUzMjMwMzgyZTMyMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60NMwDQYJKoZIhvcNAQELBQADggEBAHSyLxIl
maTQg2THLwCr1EwIUiGqJRb6OsGOumKcut7VNajg1f7E7gkttmi0qFf5WB9peoO7
IdePq5aSQzwwOGOBgq+6SP6kQMmD1cKqdAJAa5frmAdiK8BuXJQznfqqU0ryLcI/
ZW7wbPGDVTwm/ywkPOs2sdrkibKomq9A5dQ4oXKAxBm7QTjFkQnms9Z0NgnsaII4
bXuCb/VHEpe8S3L7rlQopmWNlHUgYuVnjzR8U/HgcIzyno9BGb08URGvl8Li/qJS
jf+wW/Q0zmbStNa4p+Ngo36wYkutRUUep2XYSmhhc7Xn09uubth/V4H22In6TsPR
ldbRNW8MzmmVGbs=
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:53 2025 by rpki-client