Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          D8gqmvQfyCu71ASwCaMokGDWa7nHqb77qdfCZTZEMr0=
Subject key identifier:   F1:E4:01:4F:1A:45:0F:38:B2:D6:01:FF:9D:15:4A:8A:70:D3:F9:2A
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       1308C33333300E5756EDB86CC91022A0271326AC
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:14 +0000
ROA not before:           Mon 08 Apr 2024 20:00:14 +0000
ROA not after:            Mon 07 Apr 2025 20:05:14 +0000
asID:                     28220
IP address blocks:        186.251.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:08:c3:33:33:30:0e:57:56:ed:b8:6c:c9:10:22:a0:27:13:26:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:14 2024 GMT
            Not After : Apr  7 20:05:14 2025 GMT
        Subject: CN=F1E4014F1A450F38B2D601FF9D154A8A70D3F92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:37:7d:0e:48:7d:39:27:06:c2:6a:67:78:
                    ad:26:89:56:2d:46:70:98:97:98:53:98:b6:03:ba:
                    32:1a:ec:2b:37:51:d0:1b:5a:18:26:03:31:b9:0a:
                    99:e4:ff:43:98:91:53:f3:ff:6a:69:1e:4f:69:77:
                    95:24:56:ca:9b:89:a7:d6:d5:63:4b:b4:aa:3d:35:
                    21:86:95:df:13:dc:0b:09:73:5a:c0:76:72:60:47:
                    53:4f:dc:53:e1:aa:1d:36:bd:c6:6d:98:34:fe:24:
                    e3:63:b9:95:17:3e:da:31:db:5f:7c:e7:ff:24:f9:
                    79:d1:f9:0c:4b:b6:0d:db:78:5c:e4:09:ce:3a:cd:
                    61:51:32:20:c1:ae:ff:46:87:df:c6:14:a0:8e:c3:
                    8f:c8:92:53:96:e9:2f:43:ba:a1:56:bb:6d:82:d1:
                    f4:42:35:1f:f6:a5:f2:81:c4:88:3c:22:8b:1e:dc:
                    ea:b4:0b:20:f9:2f:03:08:a7:87:ba:41:f7:6e:5b:
                    c3:52:29:eb:7a:74:20:bb:4c:1e:2d:35:0c:8c:28:
                    71:e2:59:a0:1c:86:5b:40:54:26:2e:17:97:e8:d3:
                    03:e9:9c:35:1a:62:83:0c:62:5e:74:e0:e9:46:9b:
                    05:cf:c8:f9:44:20:3d:46:8c:03:40:2a:cd:70:86:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E4:01:4F:1A:45:0F:38:B2:D6:01:FF:9D:15:4A:8A:70:D3:F9:2A
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:3f:ce:82:21:6b:f3:cf:01:18:38:ff:bc:68:9f:35:31:
         24:a4:9c:45:30:b7:55:a7:be:6b:3f:3d:cb:56:b0:be:d3:22:
         73:73:bf:c1:ee:7f:82:4d:9a:f7:37:5b:6a:d4:82:3a:e6:f2:
         ba:b7:05:6f:6d:83:e1:88:0e:9c:a9:27:bb:85:d2:9d:dd:34:
         6d:d3:7a:17:01:48:a6:e0:f8:ec:92:58:39:56:76:e0:01:63:
         3b:b3:c0:34:69:89:89:60:b1:5e:38:01:d8:f0:98:15:3e:9b:
         ab:9a:d1:89:37:21:5a:e2:96:24:19:a3:66:7d:94:86:cc:5f:
         c9:26:c3:64:7e:0d:5f:98:d7:bb:67:11:35:0d:3c:1c:40:c1:
         fc:a4:33:5e:64:74:7d:fe:96:8f:49:5a:5f:08:15:a8:9c:e7:
         47:38:74:52:77:69:20:f4:62:05:99:9a:c3:27:e5:98:d2:dd:
         e6:fa:ad:e1:93:92:69:ec:fc:30:f6:81:7a:9f:2b:c5:d9:27:
         ae:5c:c8:57:cc:ad:3f:34:75:6b:cd:44:02:37:13:80:f0:75:
         47:de:4e:97:8e:18:c2:f7:e7:54:2a:db:0e:d2:1b:00:08:25:
         d0:af:1f:a7:65:aa:c0:7e:87:70:47:85:e7:15:9d:33:cf:6c:
         5a:67:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org