Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3130382e36342e302f32302d3230203d3e203238323230.roa
File:                     3138372e3130382e36342e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          ECNwCS64zC2XpZcscjThEQ/tOkl5ngATTtIeq+wOVfw=
Subject key identifier:   75:A0:5A:A4:E4:E7:3B:C0:66:F5:1C:49:E3:7B:4F:7D:57:9C:20:C2
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       493462FD65A3745CE0E2BE718431ECD425BCAD35
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3130382e36342e302f32302d3230203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:18 +0000
ROA not before:           Mon 08 Apr 2024 20:00:18 +0000
ROA not after:            Mon 07 Apr 2025 20:05:18 +0000
asID:                     28220
IP address blocks:        187.108.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:34:62:fd:65:a3:74:5c:e0:e2:be:71:84:31:ec:d4:25:bc:ad:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:18 2024 GMT
            Not After : Apr  7 20:05:18 2025 GMT
        Subject: CN=75A05AA4E4E73BC066F51C49E37B4F7D579C20C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:ce:07:6c:40:c8:99:63:d7:51:33:80:c3:
                    26:84:56:48:72:4f:db:f9:e1:5c:0c:a3:9d:1b:54:
                    8c:3d:4f:cb:05:6c:3b:8f:f3:1d:17:c4:ed:ba:38:
                    49:9c:d5:06:43:db:0f:0d:ae:bb:e2:33:b7:63:f5:
                    2e:4a:f6:da:07:69:42:85:b8:f2:e4:fd:95:02:57:
                    0b:cd:29:16:0b:a3:6e:13:47:c0:50:ce:af:ab:34:
                    dd:ba:43:c2:a5:fe:6a:d9:eb:3b:49:65:76:8b:ee:
                    2c:e9:62:ec:b2:b6:fe:e1:25:1d:93:5e:8c:c6:91:
                    20:f2:96:ba:25:0f:7a:ad:5e:9e:49:42:d7:c9:ba:
                    c7:45:6f:b6:f1:85:04:21:7e:87:c5:fb:71:4a:ab:
                    f5:c3:1f:e4:b9:47:6f:6e:f8:2e:27:10:df:12:63:
                    3e:9c:e3:2a:fe:a2:6a:bd:fb:5c:0f:79:6c:96:9c:
                    8f:eb:ae:a6:26:23:12:48:be:e6:49:40:30:cf:71:
                    85:82:57:cd:17:1d:16:24:95:40:39:aa:05:54:25:
                    89:c4:a5:00:0c:42:f2:5f:64:b6:15:66:1e:00:d1:
                    4f:2d:fe:68:0c:ba:c4:29:37:58:ed:d4:f8:ac:05:
                    c4:90:d5:2f:86:a2:aa:aa:f9:f2:6a:23:ec:a3:a4:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A0:5A:A4:E4:E7:3B:C0:66:F5:1C:49:E3:7B:4F:7D:57:9C:20:C2
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3130382e36342e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:9e:30:67:b5:9d:47:8b:06:a8:98:2d:a3:d4:0b:26:2e:53:
         ef:b3:88:80:37:70:bd:d3:88:08:c6:b0:e3:94:f9:d8:b2:b7:
         64:fb:1b:1b:7d:11:5f:69:75:4d:31:2f:20:d2:1a:13:3d:de:
         cf:57:da:98:ed:6c:6c:3f:1a:fc:5f:3a:c4:01:41:95:74:ea:
         d7:6c:51:00:fa:12:9c:ed:1b:4f:b9:41:6e:2c:d4:7e:d4:4a:
         35:7f:9c:94:05:3d:24:b4:32:e9:fd:dc:5c:49:82:5b:5c:79:
         cb:a1:b8:01:f6:d4:2e:5b:e4:3e:47:74:1b:69:73:a6:a6:30:
         f1:37:ce:44:92:1b:15:3d:21:eb:1c:4b:68:23:47:8c:cc:47:
         dc:7b:ca:87:79:ac:d1:c1:01:6f:7f:ad:4f:34:b5:e0:26:37:
         d8:69:0e:0f:33:1b:c8:db:07:8a:7b:f2:b3:3f:be:34:32:6e:
         ed:0d:ed:0c:18:8c:df:93:6c:6a:55:1d:b2:fe:15:aa:b2:6a:
         13:c8:dd:a5:4a:da:38:9f:f0:42:bc:52:82:9e:c0:10:9b:5f:
         9e:f0:0f:ce:4a:03:7c:17:10:17:a2:dc:44:d9:f0:fa:6e:43:
         98:7f:a7:9b:10:06:8e:96:58:da:b4:eb:4b:ca:d1:d3:6b:40:
         95:9c:de:c7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSTRi/WWjdFzg4r5xhDHs1CW8rTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMThaFw0yNTA0MDcyMDA1MThaMDMxMTAvBgNV
BAMTKDc1QTA1QUE0RTRFNzNCQzA2NkY1MUM0OUUzN0I0RjdENTc5QzIwQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLm84HbEDImWPXUTOAwyaEVkhy
T9v54VwMo50bVIw9T8sFbDuP8x0XxO26OEmc1QZD2w8NrrviM7dj9S5K9toHaUKF
uPLk/ZUCVwvNKRYLo24TR8BQzq+rNN26Q8Kl/mrZ6ztJZXaL7izpYuyytv7hJR2T
XozGkSDylrolD3qtXp5JQtfJusdFb7bxhQQhfofF+3FKq/XDH+S5R29u+C4nEN8S
Yz6c4yr+omq9+1wPeWyWnI/rrqYmIxJIvuZJQDDPcYWCV80XHRYklUA5qgVUJYnE
pQAMQvJfZLYVZh4A0U8t/mgMusQpN1jt1PisBcSQ1S+Goqqq+fJqI+yjpHz1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdaBapOTnO8Bm9RxJ43tPfVecIMIwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzMTMwMzgyZTM2MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu2xAMA0GCSqGSIb3DQEBCwUAA4IBAQAhnjBntZ1H
iwaomC2j1AsmLlPvs4iAN3C904gIxrDjlPnYsrdk+xsbfRFfaXVNMS8g0hoTPd7P
V9qY7WxsPxr8XzrEAUGVdOrXbFEA+hKc7RtPuUFuLNR+1Eo1f5yUBT0ktDLp/dxc
SYJbXHnLobgB9tQuW+Q+R3QbaXOmpjDxN85EkhsVPSHrHEtoI0eMzEfce8qHeazR
wQFvf61PNLXgJjfYaQ4PMxvI2weKe/KzP740Mm7tDe0MGIzfk2xqVR2y/hWqsmoT
yN2lSto4n/BCvFKCnsAQm1+e8A/OSgN8FxAXotxE2fD6bkOYf6ebEAaOlljatOtL
ytHTa0CVnN7H
-----END CERTIFICATE-----
Generated at Fri Apr 18 11:44:45 2025 by rpki-client