Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          BYAbj/vgLRlTaIyqDtI8duGKRSozirjvvZHNTnUD6HU=
Subject key identifier:   1A:71:F8:EC:7D:B5:87:F0:21:10:39:AC:D5:F9:D5:BF:D5:67:27:35
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       16C8517058D6C6AA224F40B6283F3E347B6E8660
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:21 +0000
ROA not before:           Mon 08 Apr 2024 20:00:21 +0000
ROA not after:            Mon 07 Apr 2025 20:05:21 +0000
asID:                     28220
IP address blocks:        186.251.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c8:51:70:58:d6:c6:aa:22:4f:40:b6:28:3f:3e:34:7b:6e:86:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:21 2024 GMT
            Not After : Apr  7 20:05:21 2025 GMT
        Subject: CN=1A71F8EC7DB587F0211039ACD5F9D5BFD5672735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:2b:ca:a8:73:71:dc:e7:52:0b:87:bf:9a:
                    46:b1:16:7b:b5:50:d3:49:4e:81:5d:8a:b9:83:f2:
                    46:df:a6:7e:d1:50:ae:c5:7e:b7:54:cd:8d:56:4d:
                    c1:00:cc:19:8c:9a:93:2f:71:6c:a5:d8:ad:44:ee:
                    cb:2a:72:61:d7:9f:29:e6:dc:1d:f9:8e:ca:2a:dd:
                    8e:1a:53:d4:30:21:3a:b1:cd:8f:0e:f7:9b:ed:0e:
                    a6:07:51:fb:4f:bb:6d:b4:f6:6b:f0:d2:1e:27:c1:
                    dd:0f:6c:fb:2e:23:ff:aa:67:90:15:6f:5c:05:98:
                    af:b1:d9:df:96:ea:04:ce:3f:39:32:9d:39:fd:fc:
                    46:cc:f3:4c:84:d3:e1:7f:6e:46:fc:e6:51:b7:b7:
                    47:f3:4d:33:38:1d:cd:04:88:ee:4c:7c:52:35:cd:
                    26:51:17:df:78:77:a5:ed:d7:eb:13:bc:42:9d:90:
                    22:2f:ea:25:ed:1d:8a:49:88:36:2e:ad:0f:c0:8d:
                    35:64:ce:ad:fb:13:97:77:64:f3:52:43:48:4c:39:
                    4c:96:41:dc:9c:9b:67:c9:ea:d4:bb:d6:e1:a5:19:
                    6e:cf:a3:67:2a:3b:4b:af:89:44:7d:71:3b:d2:dd:
                    60:3c:1e:d4:6d:e1:fc:bd:df:cd:db:7a:60:c0:37:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:F8:EC:7D:B5:87:F0:21:10:39:AC:D5:F9:D5:BF:D5:67:27:35
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0e:af:df:28:22:b6:65:6d:f2:c3:ee:50:99:18:e2:b3:d4:
         15:62:de:a8:4d:ec:5c:36:e9:fc:90:af:f6:e4:33:7e:8a:83:
         ef:08:e7:99:62:0b:90:b5:06:d4:c9:55:27:18:e2:c1:2a:e4:
         bd:ea:86:60:b3:c7:63:b2:75:dd:a7:bd:00:86:6a:02:ef:28:
         54:a8:3d:c9:86:fa:94:8c:65:b8:04:65:80:2d:34:df:29:42:
         01:fb:9b:a0:fd:38:30:98:fd:18:be:40:43:ce:a8:65:70:c3:
         f2:7d:bd:82:ae:08:f8:b0:9e:e9:f6:43:ba:26:74:56:e1:2f:
         fe:d1:9c:d9:7d:51:a2:d6:6d:e1:e7:e5:50:e9:bb:1f:24:df:
         9b:fa:88:63:1e:76:1b:da:05:3e:a0:26:0b:d5:5a:f5:85:7d:
         f9:32:95:38:19:62:9d:4d:19:5d:4d:c8:c8:27:d4:21:b5:3c:
         09:ef:22:02:4f:9b:9d:39:b2:da:d3:84:1a:fd:8e:5a:ca:6b:
         69:05:d2:9d:b3:f3:7d:2d:30:ea:a7:c8:ed:6a:4d:e6:0b:49:
         0e:90:90:ef:d9:76:c7:0c:bf:22:8f:b7:34:fc:a1:8f:1a:f3:
         6d:53:88:d7:31:ec:87:47:13:45:27:35:31:e2:92:3d:37:81:
         6a:15:21:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFshRcFjWxqoiT0C2KD8+NHtuhmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjFaFw0yNTA0MDcyMDA1MjFaMDMxMTAvBgNV
BAMTKDFBNzFGOEVDN0RCNTg3RjAyMTEwMzlBQ0Q1RjlENUJGRDU2NzI3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDojivKqHNx3OdSC4e/mkaxFnu1
UNNJToFdirmD8kbfpn7RUK7FfrdUzY1WTcEAzBmMmpMvcWyl2K1E7ssqcmHXnynm
3B35jsoq3Y4aU9QwITqxzY8O95vtDqYHUftPu2209mvw0h4nwd0PbPsuI/+qZ5AV
b1wFmK+x2d+W6gTOPzkynTn9/EbM80yE0+F/bkb85lG3t0fzTTM4Hc0EiO5MfFI1
zSZRF994d6Xt1+sTvEKdkCIv6iXtHYpJiDYurQ/AjTVkzq37E5d3ZPNSQ0hMOUyW
Qdycm2fJ6tS71uGlGW7Po2cqO0uviUR9cTvS3WA8HtRt4fy9383bemDANwj/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGnH47H21h/AhEDms1fnVv9VnJzUwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM2MmUzMjM1MzEyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+3EwDQYJKoZIhvcNAQELBQADggEBAHUOr98o
IrZlbfLD7lCZGOKz1BVi3qhN7Fw26fyQr/bkM36Kg+8I55liC5C1BtTJVScY4sEq
5L3qhmCzx2Oydd2nvQCGagLvKFSoPcmG+pSMZbgEZYAtNN8pQgH7m6D9ODCY/Ri+
QEPOqGVww/J9vYKuCPiwnun2Q7omdFbhL/7RnNl9UaLWbeHn5VDpux8k35v6iGMe
dhvaBT6gJgvVWvWFffkylTgZYp1NGV1NyMgn1CG1PAnvIgJPm505strThBr9jlrK
a2kF0p2z830tMOqnyO1qTeYLSQ6QkO/ZdscMvyKPtzT8oY8a821TiNcx7IdHE0Un
NTHikj03gWoVIRM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org