Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          AUofO8aV057Qs1NZwYo/TgTDPUwOPckm7hG6Ihm6ctI=
Subject key identifier:   63:E8:0C:2B:20:AF:12:33:C9:4A:64:40:4F:E0:BC:36:CE:58:E8:4D
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       0FF2391159BCE4809F840D861F129533BA1BEB12
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:17 +0000
ROA not before:           Mon 08 Apr 2024 20:00:17 +0000
ROA not after:            Mon 07 Apr 2025 20:05:17 +0000
asID:                     28220
IP address blocks:        186.251.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f2:39:11:59:bc:e4:80:9f:84:0d:86:1f:12:95:33:ba:1b:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:17 2024 GMT
            Not After : Apr  7 20:05:17 2025 GMT
        Subject: CN=63E80C2B20AF1233C94A64404FE0BC36CE58E84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1b:13:9b:73:57:8c:38:fa:43:5f:d7:1e:5d:
                    1a:09:2c:64:2b:4d:86:6c:ad:0e:d4:c9:df:cf:3c:
                    93:75:d6:f9:02:61:73:66:37:d8:53:0e:0b:80:31:
                    37:8f:b0:56:2a:35:e3:12:c7:02:c3:c3:92:28:2a:
                    ab:77:f7:9e:20:e0:4d:78:67:77:88:86:68:99:fe:
                    df:59:29:57:57:c5:b5:19:3c:7a:a2:09:0a:92:75:
                    93:af:67:1b:4a:b5:a6:fb:af:08:80:e4:25:92:81:
                    68:0a:13:a1:d2:12:eb:71:cd:94:c0:3b:ef:f6:fe:
                    d5:f2:23:8d:d0:f4:11:a8:9b:09:3b:e6:fd:cb:8c:
                    d0:b3:5c:81:4a:c0:84:70:71:20:2f:d6:86:fd:2d:
                    80:87:32:29:2b:fd:84:33:e9:ef:ab:50:0e:af:e9:
                    dc:04:c0:5b:48:fe:27:17:8d:8c:70:90:8a:eb:fb:
                    5b:8b:93:25:91:63:ff:0a:96:fd:be:44:6d:12:b5:
                    47:c7:e8:03:61:d2:c2:f8:78:ef:af:a8:c4:1c:69:
                    67:bf:2a:8c:12:4d:9c:8f:bc:5b:90:75:c7:f2:01:
                    21:20:7d:a0:1a:db:0e:a0:f0:7b:bf:cb:3a:29:1b:
                    de:f6:a4:0e:b5:bf:85:38:b8:7b:76:f7:dc:bb:70:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E8:0C:2B:20:AF:12:33:C9:4A:64:40:4F:E0:BC:36:CE:58:E8:4D
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:92:0d:37:c2:af:b6:31:0e:ee:f4:19:01:6d:71:9d:cf:
         f7:9b:d7:82:99:51:d6:50:79:3a:aa:19:c5:31:04:a1:93:34:
         0f:be:36:72:35:e6:de:73:70:ca:a0:af:0b:51:06:57:1b:b8:
         ff:9a:19:4e:d9:f3:af:35:69:1d:bf:8e:09:ae:1d:40:06:5d:
         97:39:9a:0f:1a:ae:57:98:bc:50:2a:f7:c2:33:33:81:b3:bf:
         dc:14:40:f6:0b:b5:3f:65:d3:22:80:15:19:22:a1:3d:82:78:
         05:4a:98:c8:ef:1b:e3:0d:16:16:4c:6b:bb:fe:91:e1:a9:5f:
         1b:09:45:2e:a4:c4:d8:2e:62:fc:5d:3a:75:b3:58:f3:d4:5b:
         1b:cb:9a:3f:62:6d:27:94:96:95:eb:82:0e:1d:50:31:1d:5f:
         1e:ea:e3:8a:1c:0d:3b:30:9d:a4:21:70:46:2b:0b:33:0e:78:
         46:d9:a2:e3:45:73:af:1c:5b:6e:4f:f7:b7:b1:3e:1a:4c:4c:
         84:00:c2:e7:52:6d:8c:d1:d8:9e:3a:0d:1c:63:fa:a7:0c:42:
         65:8a:de:e8:ce:df:bf:07:44:32:6d:cc:6e:44:61:d7:72:29:
         3b:26:99:d8:af:7b:7b:de:e5:63:00:3e:f5:68:51:49:9a:69:
         c0:71:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:11 2025 by rpki-client