Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa
File:                     3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa (raw, json)
Hash identifier:          M7VikbREp52k2o3MEQedGXX6D0vliCOB0onAplcHVAg=
Subject key identifier:   DC:B4:47:23:17:DF:B8:F0:54:0F:0E:17:A5:C5:D9:C5:25:D8:7E:93
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       1E43FB17D00DC71CDDCBC51E709E8463E8D96DE3
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:18 +0000
ROA not before:           Mon 08 Apr 2024 20:00:18 +0000
ROA not after:            Mon 07 Apr 2025 20:05:18 +0000
asID:                     28220
IP address blocks:        187.111.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:fb:17:d0:0d:c7:1c:dd:cb:c5:1e:70:9e:84:63:e8:d9:6d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:18 2024 GMT
            Not After : Apr  7 20:05:18 2025 GMT
        Subject: CN=DCB4472317DFB8F0540F0E17A5C5D9C525D87E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:17:ff:58:11:60:36:25:84:1e:d8:4d:a9:
                    9a:c8:08:a2:c6:da:05:56:df:4e:77:1b:06:9d:fd:
                    12:9a:13:8f:f7:0b:a2:2c:17:51:eb:ff:9f:3c:de:
                    a4:24:48:46:ec:06:31:bd:a5:8e:f9:f2:0d:58:39:
                    c2:56:fb:8a:63:a5:4d:ba:27:4c:bd:32:43:56:0b:
                    ac:da:6f:01:2c:6a:ee:69:f2:56:bc:80:51:2d:2d:
                    fd:de:05:52:ae:28:4d:94:41:01:f3:f0:56:cd:b9:
                    c8:48:49:37:74:9b:07:97:a8:06:47:ee:aa:da:73:
                    6f:57:fe:1f:9d:aa:f8:35:db:2c:68:bb:5f:8b:a8:
                    54:02:4e:d4:97:bc:97:42:b5:36:51:86:3d:5c:5d:
                    6f:5a:63:71:4a:cf:ea:9b:dd:2e:c8:ec:7a:38:1a:
                    5a:8f:0e:e3:a7:2a:b8:cd:38:b4:f0:bf:ec:4a:86:
                    32:2a:48:7f:5f:bf:43:85:61:be:7d:c4:83:2c:db:
                    e0:51:41:9b:39:e8:d6:89:79:a9:1d:df:a9:77:3f:
                    d1:f7:5b:76:23:ba:c6:55:6b:e1:c9:ed:cc:22:a4:
                    80:14:bb:77:ce:00:fa:69:fd:61:e5:c7:e5:71:2b:
                    99:eb:45:f4:c3:47:e2:84:e1:c5:b9:79:56:8e:7c:
                    7f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:47:23:17:DF:B8:F0:54:0F:0E:17:A5:C5:D9:C5:25:D8:7E:93
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:ec:63:c9:a1:89:30:79:76:95:a7:56:83:f4:59:9a:41:ae:
         36:ab:54:63:d0:b7:40:ce:91:94:69:cc:ee:b6:5e:6e:48:cf:
         10:38:36:18:7d:f3:90:bb:41:e4:02:72:6c:48:06:23:73:81:
         c4:f7:e4:55:eb:f7:1d:ed:91:a0:1c:f2:20:cd:81:a5:20:ab:
         4b:c9:27:4e:ff:63:62:bb:0f:4e:44:69:14:ad:a4:59:83:22:
         a5:a1:77:0e:f1:05:07:4a:e9:40:94:9f:06:5b:2c:d1:b2:f7:
         bc:f0:f4:c0:30:9a:0c:33:a2:3f:5d:64:af:b7:e9:a5:41:b8:
         1d:7d:28:cc:fd:26:a3:e1:24:74:78:2f:be:ac:0d:c5:2e:24:
         09:fb:0a:c3:c6:d6:a0:61:70:ba:19:e7:5f:45:92:fa:9d:34:
         f4:34:8b:c8:0c:33:73:7e:87:9c:e9:bf:72:c5:40:ef:77:d2:
         6e:f4:70:4d:48:e9:da:5e:53:d2:1a:b3:0e:39:02:cd:be:3f:
         e3:2d:dc:fe:34:e5:4a:8f:7b:fa:01:68:aa:8b:7b:f1:c7:de:
         28:17:7b:4c:3d:e5:66:8a:e1:f2:9e:cf:73:65:c4:b5:1d:55:
         38:09:66:00:76:d0:c9:91:17:a0:79:c0:20:b7:10:c3:11:3b:
         8e:dd:24:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHkP7F9ANxxzdy8UecJ6EY+jZbeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMThaFw0yNTA0MDcyMDA1MThaMDMxMTAvBgNV
BAMTKERDQjQ0NzIzMTdERkI4RjA1NDBGMEUxN0E1QzVEOUM1MjVEODdFOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5hf/WBFgNiWEHthNqZrICKLG
2gVW3053Gwad/RKaE4/3C6IsF1Hr/5883qQkSEbsBjG9pY758g1YOcJW+4pjpU26
J0y9MkNWC6zabwEsau5p8la8gFEtLf3eBVKuKE2UQQHz8FbNuchISTd0mweXqAZH
7qrac29X/h+dqvg12yxou1+LqFQCTtSXvJdCtTZRhj1cXW9aY3FKz+qb3S7I7Ho4
GlqPDuOnKrjNOLTwv+xKhjIqSH9fv0OFYb59xIMs2+BRQZs56NaJeakd36l3P9H3
W3YjusZVa+HJ7cwipIAUu3fOAPpp/WHlx+VxK5nrRfTDR+KE4cW5eVaOfH/jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3LRHIxffuPBUDw4XpcXZxSXYfpMwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzMTMxMzEyZTMyMzIzNDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW7b+AwDQYJKoZIhvcNAQELBQADggEBAA/sY8mh
iTB5dpWnVoP0WZpBrjarVGPQt0DOkZRpzO62Xm5IzxA4Nhh985C7QeQCcmxIBiNz
gcT35FXr9x3tkaAc8iDNgaUgq0vJJ07/Y2K7D05EaRStpFmDIqWhdw7xBQdK6UCU
nwZbLNGy97zw9MAwmgwzoj9dZK+36aVBuB19KMz9JqPhJHR4L76sDcUuJAn7CsPG
1qBhcLoZ519FkvqdNPQ0i8gMM3N+h5zpv3LFQO930m70cE1I6dpeU9Iasw45As2+
P+Mt3P405UqPe/oBaKqLe/HH3igXe0w95WaK4fKez3NlxLUdVTgJZgB20MmRF6B5
wCC3EMMRO47dJPo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:36:52 2025 by rpki-client