Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa
File:                     3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          9z23IWRizi7JPt2c+6jJHrBvWnpx7rPTbHjixCrER+A=
Subject key identifier:   AB:BA:C0:47:A2:F5:98:70:27:53:8E:39:F0:66:20:4C:1D:29:4B:40
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       373FF4639B0C49D98CDC73BFBCD953B15B01CA2D
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:25 +0000
ROA not before:           Mon 08 Apr 2024 20:00:25 +0000
ROA not after:            Mon 07 Apr 2025 20:05:25 +0000
asID:                     28220
IP address blocks:        186.251.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3f:f4:63:9b:0c:49:d9:8c:dc:73:bf:bc:d9:53:b1:5b:01:ca:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:25 2024 GMT
            Not After : Apr  7 20:05:25 2025 GMT
        Subject: CN=ABBAC047A2F5987027538E39F066204C1D294B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:c7:01:a7:37:cd:a0:da:13:5d:91:a8:53:
                    cc:71:a5:6f:df:7a:33:c8:b1:f1:09:73:00:cf:77:
                    ca:89:b5:cc:60:23:62:b4:d3:96:9b:01:92:41:1e:
                    0c:df:5e:0c:62:0b:d4:24:79:cb:c5:6d:ba:32:ce:
                    98:0e:e1:4f:53:19:ee:6a:c8:e5:9a:03:4b:e6:f4:
                    c6:19:c9:5a:87:69:6d:22:88:b5:37:d2:2a:65:18:
                    07:68:06:e6:21:b1:97:1c:b2:00:16:a8:54:4e:f2:
                    82:8f:95:94:02:38:a5:42:e2:5b:0c:92:25:c2:33:
                    44:be:06:7e:66:1f:20:76:65:3e:99:04:6a:ad:0d:
                    54:fc:99:75:7b:40:fb:ec:32:00:c7:00:5b:d0:62:
                    30:8d:36:04:8e:15:28:f2:38:19:d3:9c:89:ed:9c:
                    6a:aa:c9:ba:57:d3:3f:64:eb:60:c3:1e:81:fb:4d:
                    9e:7a:7a:9d:0c:57:77:d5:c4:11:1a:47:39:98:52:
                    37:2f:10:e1:8a:13:cd:15:46:e8:65:7f:92:61:16:
                    8a:d5:ef:74:b3:35:23:7b:26:ff:35:d8:54:dd:30:
                    fa:ae:69:43:f2:ac:39:15:28:e4:75:9c:13:03:42:
                    5e:8d:fe:ca:aa:0e:a1:5d:49:34:e8:73:53:82:c4:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BA:C0:47:A2:F5:98:70:27:53:8E:39:F0:66:20:4C:1D:29:4B:40
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:ab:cd:9e:a4:e9:46:82:6e:bf:a3:8b:c9:c2:33:38:64:ec:
         2a:6d:7b:3d:cf:cb:43:65:ec:b0:0e:89:36:9a:18:d6:5d:8a:
         0a:0b:f0:d0:74:f5:e2:7b:3b:ed:8d:84:98:3d:74:78:7a:e9:
         47:11:ad:98:ae:1b:08:f4:7b:f9:a5:70:06:ce:8f:fb:92:74:
         ae:73:ab:b3:39:68:c3:2f:3f:8e:de:8f:87:e5:e0:f8:55:b3:
         0f:ef:bf:65:0a:5a:a5:9f:09:77:c3:84:b5:1b:af:3f:6c:f4:
         ce:54:5c:14:9b:93:3a:46:a2:a6:56:4f:0a:87:c4:6b:7e:2f:
         03:ce:7f:80:ca:e9:0a:ab:98:a9:0b:e9:2e:be:7b:cd:b4:54:
         59:9e:fe:45:da:d3:ef:4d:c5:c9:ea:bd:4d:d3:bf:a7:2e:9f:
         3f:9c:d6:c6:ad:0a:af:07:60:5f:60:3b:67:90:16:03:53:d5:
         60:84:60:45:d3:6a:f3:eb:c4:11:30:ec:76:58:46:50:00:3b:
         31:48:f3:e7:b0:34:8a:02:dc:dc:14:2f:de:d4:bf:2d:9b:2c:
         93:c8:36:f8:c0:c7:ad:01:9b:fc:2d:56:66:6f:4f:66:b4:33:
         52:88:49:08:f4:5f:d5:90:2b:2a:46:f1:ca:eb:b1:04:46:f9:
         ab:4b:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org