Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231342e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3231342e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          8AFtOYq/UjCoVXWFTDx5hNXehPuXUKP1ilm/cA19gi0=
Subject key identifier:   85:68:0B:6B:0F:67:0A:D3:C8:92:F5:F1:4A:78:51:02:B4:57:9E:34
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       77455906D9466171D5D7C36432123900AD14FD6B
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231342e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:29 +0000
ROA not before:           Mon 08 Apr 2024 20:00:29 +0000
ROA not after:            Mon 07 Apr 2025 20:05:29 +0000
asID:                     28220
IP address blocks:        186.208.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:45:59:06:d9:46:61:71:d5:d7:c3:64:32:12:39:00:ad:14:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:29 2024 GMT
            Not After : Apr  7 20:05:29 2025 GMT
        Subject: CN=85680B6B0F670AD3C892F5F14A785102B4579E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:45:fe:d1:cf:3f:25:af:98:33:22:b5:b2:
                    12:85:4a:12:31:c3:46:b0:58:96:a3:44:4e:19:44:
                    4d:e0:23:d3:7d:02:ec:57:30:59:c2:1b:a8:76:55:
                    18:6e:ad:57:81:87:0c:2e:85:b8:4d:db:69:b9:f6:
                    2e:c6:00:d2:41:24:d2:1e:06:2e:ae:00:4a:b5:bd:
                    e4:d3:41:e8:6d:cb:6c:96:83:28:6e:6e:49:b3:74:
                    ed:cd:74:2d:83:b3:c7:aa:04:0b:dd:b8:a3:28:ed:
                    cc:b8:69:4b:39:6b:ff:37:73:41:55:5c:df:7c:0d:
                    a2:f2:ce:2e:0c:d3:c1:07:69:fa:ef:90:9a:da:7b:
                    db:a0:6e:7f:e3:31:34:45:9b:fe:09:f2:de:a6:56:
                    de:f0:45:40:fb:17:d4:22:de:c2:8b:e7:ec:bd:63:
                    c2:9f:72:79:a2:86:23:28:d6:c0:c5:c6:ff:da:b0:
                    49:53:27:ce:ca:0d:9a:f5:8d:26:ae:45:a9:ee:40:
                    32:07:cf:e5:75:75:ac:4a:a2:0d:db:ab:52:e5:2f:
                    8b:de:ca:1b:2b:72:d6:07:28:0a:d8:a6:bb:f5:e5:
                    77:6e:e5:e7:95:1f:c5:2a:9e:d8:9a:0b:80:4a:03:
                    fd:8e:94:4f:0f:9c:4d:40:9a:47:99:29:05:78:cb:
                    de:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:68:0B:6B:0F:67:0A:D3:C8:92:F5:F1:4A:78:51:02:B4:57:9E:34
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231342e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:60:25:ff:aa:1f:c0:d2:9b:53:a8:b8:c4:17:07:3e:ab:
         29:59:4d:67:1d:d0:a3:ea:21:2e:19:3d:97:55:65:18:c3:2c:
         f8:e5:44:a9:84:3a:73:d6:26:74:0e:da:da:7b:2c:7d:b1:9b:
         1d:af:ed:45:9f:19:3f:55:9f:7b:16:93:a7:e1:8a:f7:2f:c8:
         89:90:d6:8f:8b:7c:83:35:66:4f:fd:d3:76:68:a9:cb:cd:24:
         bb:4f:e5:b3:f2:95:94:11:b5:c5:66:4b:57:a5:c4:fe:0a:db:
         74:e7:65:84:01:52:1f:ad:f6:38:60:ae:bf:e4:ec:49:e1:7f:
         21:3b:d2:a7:0d:19:2c:bf:ce:6e:ee:95:9e:13:2f:cc:76:13:
         bd:bc:3e:80:2a:ee:29:22:5c:20:05:4f:15:ad:e4:6b:89:f6:
         61:e6:6f:ae:74:31:46:26:7e:ee:ef:ad:56:da:13:73:84:68:
         27:55:a3:ff:04:f3:12:da:e9:cd:f7:53:0a:7f:c4:00:60:ae:
         3a:04:8e:7a:81:5e:2c:18:61:da:a7:40:fc:68:89:2f:53:66:
         ff:a0:41:93:f0:5d:43:2a:02:d2:a5:13:b9:8c:2e:ea:0b:37:
         1c:a7:03:5a:90:ff:4f:eb:c5:71:86:8b:e8:49:62:8c:58:5d:
         eb:80:17:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org