Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa
File:                     3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          5NC1KgcyUzPCnglK/O9DHVz7IvpmAqLxNN+g8v2cQE4=
Subject key identifier:   3B:40:32:F7:F6:1F:40:0C:7F:A8:50:D5:F4:E9:03:82:2C:58:DE:5A
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       17AC4F6726F5E9B66BF5AC307BBA413526AA6399
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:22 +0000
ROA not before:           Mon 08 Apr 2024 20:00:22 +0000
ROA not after:            Mon 07 Apr 2025 20:05:22 +0000
asID:                     28220
IP address blocks:        187.109.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ac:4f:67:26:f5:e9:b6:6b:f5:ac:30:7b:ba:41:35:26:aa:63:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:22 2024 GMT
            Not After : Apr  7 20:05:22 2025 GMT
        Subject: CN=3B4032F7F61F400C7FA850D5F4E903822C58DE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:06:1a:90:02:33:a4:09:71:8a:a8:0e:a3:
                    23:cd:aa:fe:cf:5a:f7:a1:b1:54:ec:ac:b0:3c:47:
                    88:b1:cb:c7:8f:5a:77:68:8e:cd:12:97:e7:ec:db:
                    12:ee:29:84:dc:57:a0:8e:3d:28:eb:75:a7:02:46:
                    b9:39:49:70:f0:52:6f:d8:d9:86:88:cf:50:8d:85:
                    59:e0:54:5a:16:9f:d8:9e:27:81:94:bc:af:ea:bc:
                    d8:d6:15:a0:6d:bc:a9:0f:6c:5f:ba:b1:47:93:d3:
                    0f:99:ea:f8:cf:6d:31:28:44:a0:ab:d8:bc:21:be:
                    84:8d:34:ef:86:29:1d:c5:b3:e3:d5:95:0a:e5:33:
                    c7:c0:d5:06:9f:6c:df:8a:11:57:d7:81:37:84:45:
                    e8:8a:92:c5:ca:39:c3:8f:88:0f:26:0e:02:8c:20:
                    af:ec:93:3f:9a:54:ac:39:70:5e:0a:f2:a5:d9:40:
                    12:24:88:05:81:2f:74:1b:73:da:5d:94:af:9a:3c:
                    8b:69:f0:7b:99:33:76:d8:ae:73:f4:87:53:86:48:
                    f7:3d:09:1f:e1:e1:8b:d3:69:d4:ed:5f:ad:f1:f6:
                    e4:ac:28:f0:ee:a8:12:4f:7f:e9:af:d2:9f:30:52:
                    0f:5f:54:ee:c3:d7:13:a3:e1:0e:2e:fe:0a:d3:a8:
                    13:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:32:F7:F6:1F:40:0C:7F:A8:50:D5:F4:E9:03:82:2C:58:DE:5A
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:fa:d1:3f:b9:2b:2f:24:2d:cb:c5:1d:6e:f1:23:08:34:04:
         12:0d:ca:ed:ef:d0:61:35:79:89:df:39:e1:b2:84:38:0b:4f:
         ed:31:1c:2a:f4:01:9b:f7:10:b3:dc:c3:32:aa:5b:32:00:0b:
         19:f4:2b:95:65:14:5a:20:4c:21:e7:ce:3b:14:b6:7c:2b:7c:
         ed:3f:5c:cd:6b:4e:38:9c:ad:8e:be:88:6a:f2:28:1f:93:15:
         74:03:da:dc:bb:72:33:d7:e8:af:65:c1:41:42:66:8b:79:23:
         b6:7d:23:08:bd:24:40:92:0b:e7:e4:97:b4:a9:59:58:7d:ee:
         f4:1a:26:4f:81:35:73:81:62:ac:a6:3e:cc:d4:89:6f:cd:47:
         2b:57:bf:bc:55:e9:be:0b:6c:fa:ff:eb:67:13:e1:c3:fd:6a:
         8f:28:ce:eb:6d:e2:89:be:2c:f1:a9:b3:2e:50:51:66:de:54:
         9e:fc:ea:77:25:7c:1b:7f:81:01:19:e7:5a:34:b1:a5:29:db:
         1d:de:e5:ec:85:ef:86:75:f1:fe:33:0e:64:82:e4:89:84:58:
         32:d1:89:04:32:10:e5:07:4f:6d:5a:d1:80:78:df:87:5a:d9:
         05:d2:66:15:61:00:e1:a1:c4:fc:d8:ed:ef:0a:59:88:49:bb:
         1b:4c:ef:9c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF6xPZyb16bZr9awwe7pBNSaqY5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjJaFw0yNTA0MDcyMDA1MjJaMDMxMTAvBgNV
BAMTKDNCNDAzMkY3RjYxRjQwMEM3RkE4NTBENUY0RTkwMzgyMkM1OERFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisQYakAIzpAlxiqgOoyPNqv7P
WvehsVTsrLA8R4ixy8ePWndojs0Sl+fs2xLuKYTcV6COPSjrdacCRrk5SXDwUm/Y
2YaIz1CNhVngVFoWn9ieJ4GUvK/qvNjWFaBtvKkPbF+6sUeT0w+Z6vjPbTEoRKCr
2LwhvoSNNO+GKR3Fs+PVlQrlM8fA1QafbN+KEVfXgTeEReiKksXKOcOPiA8mDgKM
IK/skz+aVKw5cF4K8qXZQBIkiAWBL3Qbc9pdlK+aPItp8HuZM3bYrnP0h1OGSPc9
CR/h4YvTadTtX63x9uSsKPDuqBJPf+mv0p8wUg9fVO7D1xOj4Q4u/grTqBPvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO0Ay9/YfQAx/qFDV9OkDgixY3lowHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzMTMwMzkyZTMxMzczNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7bbAwDQYJKoZIhvcNAQELBQADggEBAD360T+5
Ky8kLcvFHW7xIwg0BBINyu3v0GE1eYnfOeGyhDgLT+0xHCr0AZv3ELPcwzKqWzIA
Cxn0K5VlFFogTCHnzjsUtnwrfO0/XM1rTjicrY6+iGryKB+TFXQD2ty7cjPX6K9l
wUFCZot5I7Z9Iwi9JECSC+fkl7SpWVh97vQaJk+BNXOBYqymPszUiW/NRytXv7xV
6b4LbPr/62cT4cP9ao8ozutt4om+LPGpsy5QUWbeVJ786nclfBt/gQEZ51o0saUp
2x3e5eyF74Z18f4zDmSC5ImEWDLRiQQyEOUHT21a0YB434da2QXSZhVhAOGhxPzY
7e8KWYhJuxtM75w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org