Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131322e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131322e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          2bkAp2sgEmDtC6xiyPJKIqYs2Gt+mR3BY57RsnnCvQo=
Subject key identifier:   0D:5C:7B:08:2E:6D:3D:56:56:E1:BE:17:23:7A:77:98:41:2A:7B:78
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       0D09761EFFF05F0B4F560A95902CB27758349493
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131322e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:13 +0000
ROA not before:           Mon 08 Apr 2024 20:00:13 +0000
ROA not after:            Mon 07 Apr 2025 20:05:13 +0000
asID:                     28220
IP address blocks:        186.251.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:09:76:1e:ff:f0:5f:0b:4f:56:0a:95:90:2c:b2:77:58:34:94:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:13 2024 GMT
            Not After : Apr  7 20:05:13 2025 GMT
        Subject: CN=0D5C7B082E6D3D5656E1BE17237A7798412A7B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:81:04:39:74:3f:3f:fc:30:25:15:41:9e:
                    05:32:9c:e5:5f:c9:5d:0b:80:f4:9c:12:28:0c:7a:
                    ba:2b:c6:8f:19:37:b4:4a:00:ef:aa:05:2d:d3:ab:
                    96:d7:c9:bb:c3:8f:5d:41:68:94:a7:27:9f:b7:c8:
                    4f:61:2e:22:57:15:be:d9:0e:2c:23:f3:68:ab:31:
                    47:09:dd:e1:f3:e1:25:be:57:81:70:79:97:5c:c2:
                    c9:e8:74:3a:76:20:b8:7f:a7:de:3f:bd:f5:5e:42:
                    29:95:2f:5d:ee:d2:e2:4f:b6:41:f6:5d:bc:27:92:
                    f3:0c:94:77:98:fc:e3:f3:79:06:a7:f9:c1:cd:a6:
                    76:6b:32:80:a7:05:72:85:46:7d:8a:f2:91:05:14:
                    8c:5a:22:72:14:bc:32:d2:8c:64:79:27:df:35:6d:
                    f4:b9:61:c6:9a:3a:e0:82:12:55:08:71:0c:c2:7a:
                    83:47:82:c9:ce:9d:ab:39:1c:e5:51:2d:70:15:f0:
                    a3:fc:96:71:84:ae:dc:69:f4:2f:65:14:2a:68:ce:
                    c4:e8:9c:88:92:c2:2b:1c:91:d7:e5:bd:b1:15:d6:
                    fb:e2:70:49:05:62:1a:51:1c:00:e4:ab:41:af:71:
                    6b:0a:f3:ae:cf:80:d9:82:b5:b9:2e:fe:9d:31:54:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:7B:08:2E:6D:3D:56:56:E1:BE:17:23:7A:77:98:41:2A:7B:78
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131322e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:1e:54:fa:9b:6a:30:e8:19:20:cb:86:4e:ec:02:f5:02:c0:
         9f:9f:aa:62:bf:75:a1:fb:01:7c:ca:8b:a5:6a:63:61:29:e3:
         cd:42:8d:49:79:63:20:0d:e0:29:cd:7d:d6:bc:5f:bd:08:e9:
         9e:fb:38:93:43:1f:0e:91:a0:41:10:1b:e7:b7:10:8d:81:ca:
         cf:8e:aa:e8:43:26:87:47:fc:86:7b:fe:84:a9:a6:3a:b5:cd:
         34:7b:ed:25:c0:90:97:6a:83:0a:74:bb:58:fc:d3:e5:49:61:
         59:1e:0d:94:d0:69:68:42:7b:b0:9c:24:ed:2a:60:2f:8a:54:
         82:85:77:45:89:e7:6c:96:02:90:52:d1:46:3d:6b:06:70:60:
         3c:00:5d:e0:a0:73:ec:75:25:4b:c2:54:95:df:76:86:04:e8:
         c8:3e:b0:8c:76:7f:7f:d3:60:95:4b:20:9e:ca:d7:40:4b:85:
         00:18:44:3c:b3:96:a4:fd:67:aa:4e:2f:85:6c:1d:d0:04:53:
         47:6a:47:17:c8:60:e0:22:05:f4:36:bf:98:bb:53:43:c7:6e:
         6f:d3:4f:46:d9:b1:af:eb:a0:c6:b4:36:56:f5:70:ce:ba:e9:
         41:f0:cc:4c:f2:2c:5c:20:de:94:b4:00:c3:2f:76:62:87:22:
         a2:aa:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org