Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa
File:                     3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          H30QrXMqzZv1Zvhbj5ypr8kPTCOQ29H5IHyr66e+PFI=
Subject key identifier:   0A:AF:49:9E:D7:8A:39:65:D8:32:D5:3F:0E:6C:0E:16:32:4B:AE:2D
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       40986B7D531A9DB19C15B45C268AA17AE03E52F7
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:14 +0000
ROA not before:           Mon 08 Apr 2024 20:00:14 +0000
ROA not after:            Mon 07 Apr 2025 20:05:14 +0000
asID:                     28220
IP address blocks:        186.251.112.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:98:6b:7d:53:1a:9d:b1:9c:15:b4:5c:26:8a:a1:7a:e0:3e:52:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:14 2024 GMT
            Not After : Apr  7 20:05:14 2025 GMT
        Subject: CN=0AAF499ED78A3965D832D53F0E6C0E16324BAE2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:a0:cd:e0:f4:7d:c1:45:e1:61:b0:c9:ca:
                    b7:b7:43:18:e1:9c:7f:ee:e8:b2:5c:90:d2:62:70:
                    99:f5:9f:1c:c0:16:ed:63:b0:94:43:b5:b0:db:a7:
                    6a:23:5e:5b:74:d9:52:cb:f8:34:12:12:94:11:66:
                    a1:2a:61:89:43:e2:33:59:a3:59:47:92:cf:da:d2:
                    b1:a6:74:d7:56:69:62:33:b7:86:8d:94:af:59:bc:
                    53:4c:d3:24:10:81:ce:04:77:ff:b9:f1:9b:77:d1:
                    c8:b3:22:b6:a1:a9:9f:d3:18:68:a2:60:27:9c:a6:
                    e9:56:a0:72:93:c5:98:43:01:b7:8e:b6:09:d7:c0:
                    1c:39:c6:5d:aa:63:e4:76:bf:60:0c:86:08:05:81:
                    5c:60:ab:4a:68:8e:6b:f9:f3:29:1d:58:42:c7:1f:
                    ca:35:78:e3:fd:3c:d6:ae:5f:d8:6d:6d:c9:94:7a:
                    a3:66:c3:fe:0e:aa:22:d8:57:25:e3:8c:2a:7a:78:
                    97:50:f6:8e:d8:79:e7:d2:d9:ae:3e:c4:9b:1e:a0:
                    8a:dc:ef:d1:80:ac:f9:39:a6:cb:0c:27:89:e5:8f:
                    75:af:35:7d:f1:fd:cc:7e:d6:77:bb:3b:9d:07:46:
                    df:81:f2:be:8b:90:13:f7:41:15:75:57:f9:4a:fc:
                    d8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AF:49:9E:D7:8A:39:65:D8:32:D5:3F:0E:6C:0E:16:32:4B:AE:2D
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:03:e1:1c:92:19:74:91:64:ea:bc:32:a0:7c:59:8d:51:
         bf:4f:6a:c0:c6:92:6e:3e:b2:5d:ac:22:d4:d5:05:53:4e:3f:
         70:6e:24:48:18:5a:1c:42:7b:a6:0f:c5:40:2e:7f:6c:0b:2d:
         2c:6e:21:4d:e4:b1:0f:68:c8:32:4c:1c:38:20:ce:b8:ac:f9:
         e4:13:5a:63:1b:cd:a7:a7:71:ff:84:49:ad:c2:04:8a:be:c4:
         79:87:aa:40:c7:8e:e9:f3:d8:1c:9c:7b:9f:f4:ef:1b:74:77:
         86:17:c2:a0:49:7b:27:b4:39:60:5f:9b:43:56:97:d8:97:17:
         d5:6a:a4:ac:9e:60:39:ac:5b:1a:54:2c:ab:56:ad:4d:ea:04:
         6b:17:d2:ad:cf:e9:01:e5:8c:15:f0:bc:0c:b1:f3:81:04:b2:
         ad:61:dd:fc:a1:65:82:57:49:92:14:34:0c:0f:c9:0c:d9:f5:
         ae:9c:9e:08:b4:19:c5:5c:59:dc:48:b4:7a:2b:b7:cc:6f:ba:
         97:86:03:4f:b3:96:d8:1e:47:6c:d5:3d:f4:2e:d1:e3:a6:4e:
         d1:38:f7:3e:ec:3f:50:59:0c:ac:ca:c7:c6:d8:bd:4c:f1:d3:
         cd:5c:94:1d:79:cb:d4:80:fe:b5:92:b4:af:dc:dc:5d:9e:28:
         e4:1f:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:06 2025 by rpki-client