Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          FfXiVKDhz9y+1m/9hzS1gUQpHr5Os38XkFSTruniQsE=
Subject key identifier:   78:84:BF:88:DD:E3:AE:38:57:16:11:0A:5C:03:CE:D2:86:5D:E2:97
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       5107DA20CC3AEADFC03E5891711D1E591A8D2013
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:30 +0000
ROA not before:           Mon 08 Apr 2024 20:00:30 +0000
ROA not after:            Mon 07 Apr 2025 20:05:30 +0000
asID:                     28220
IP address blocks:        186.208.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:07:da:20:cc:3a:ea:df:c0:3e:58:91:71:1d:1e:59:1a:8d:20:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:30 2024 GMT
            Not After : Apr  7 20:05:30 2025 GMT
        Subject: CN=7884BF88DDE3AE385716110A5C03CED2865DE297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:20:d9:02:22:9c:d5:44:7a:92:17:19:fb:
                    8c:3a:fc:48:1b:da:39:1a:40:15:0d:67:58:66:7d:
                    2c:38:14:ac:01:31:f5:b2:ab:ff:d7:af:11:e3:83:
                    18:8a:9b:67:54:46:c5:b7:36:6a:f8:d2:2f:05:f4:
                    06:40:9d:6c:3f:e7:59:7c:86:ae:79:b8:13:7a:ab:
                    9c:31:93:45:65:e6:0c:15:c3:45:2e:54:2c:e0:0c:
                    1c:3b:fe:d9:55:44:c4:ac:0c:98:58:8e:d1:11:85:
                    4d:a9:ff:95:a2:7a:05:eb:b0:75:1a:d2:bf:d5:b3:
                    e9:c9:33:a9:2f:8c:a2:56:d2:e0:66:81:c5:19:dd:
                    ea:a7:78:36:1a:b5:fb:0f:af:50:f2:85:ee:4f:d8:
                    cb:02:d7:ce:d3:c3:3a:0e:4c:94:3c:0a:ad:0f:6b:
                    dd:03:3f:34:e6:a3:f6:64:0b:94:2c:09:5b:99:ba:
                    14:fd:cf:24:d8:ba:23:ac:6e:b0:0d:ab:fc:48:44:
                    1b:6c:36:ce:c0:92:21:c7:59:62:09:91:fc:ce:7a:
                    79:2b:9d:f5:8d:30:b5:ec:b0:9f:53:03:64:38:3f:
                    3b:5f:5c:06:be:cc:d0:c0:08:61:ed:8f:4b:e4:c0:
                    ec:8b:ff:dc:14:8a:da:1a:73:b6:38:a6:13:06:0d:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:BF:88:DD:E3:AE:38:57:16:11:0A:5C:03:CE:D2:86:5D:E2:97
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3230382e3231352e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:19:78:4f:9b:25:04:89:b3:0d:c7:40:9a:27:bf:b6:f0:a2:
         43:19:27:da:f1:59:ba:75:fd:14:5b:2a:88:c0:5b:d0:60:2f:
         70:98:d8:41:a6:0a:3c:8a:a5:7f:25:d8:2c:70:37:32:49:0c:
         e7:9e:2c:58:33:79:0c:c0:ec:8b:6f:2b:38:5a:cb:aa:15:94:
         ab:cf:b3:36:9e:65:59:f3:b5:97:36:05:59:2d:96:09:34:82:
         30:4b:dd:a0:b9:2d:b7:81:77:70:37:b5:9a:74:71:55:5a:5b:
         95:04:9e:b7:94:65:55:e2:08:8a:81:93:64:42:c7:41:29:4f:
         4c:a9:7d:d2:6b:b5:22:88:2a:9e:06:1c:d3:83:9e:3d:ed:b2:
         44:bf:cc:a7:03:df:61:6f:ba:46:3e:7a:e1:f0:5c:a7:3d:b3:
         71:fe:d7:12:7b:f1:51:9a:5f:f3:7c:02:aa:bb:4c:a8:d5:6f:
         49:fa:19:4b:08:ea:31:3e:6c:0b:4d:3b:89:b2:54:f6:62:95:
         6f:cd:8c:d6:da:ef:da:de:90:cf:37:ff:03:16:99:f4:ce:0c:
         fa:9d:bd:ab:02:fb:6f:20:3d:d3:12:45:4d:77:6d:06:2a:b5:
         59:7f:e9:f0:13:19:a2:b2:2d:d3:97:6c:28:16:39:51:04:8e:
         ad:56:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:08 2025 by rpki-client