Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3132382e302f31372d3137203d3e203238323230.roa
File:                     3138372e36312e3132382e302f31372d3137203d3e203238323230.roa (raw, json)
Hash identifier:          JH42vgYSME8wKviEMEZUoTYbI6+9BYchNRisExe9oSs=
Subject key identifier:   18:0E:8D:D4:26:B3:EF:B4:38:F1:93:F3:7B:61:46:CD:CA:28:6C:B6
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       5FE64BF52FC87501257DF55C3B5F53F4580FB62D
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3132382e302f31372d3137203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:30 +0000
ROA not before:           Mon 08 Apr 2024 20:00:30 +0000
ROA not after:            Mon 07 Apr 2025 20:05:30 +0000
asID:                     28220
IP address blocks:        187.61.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e6:4b:f5:2f:c8:75:01:25:7d:f5:5c:3b:5f:53:f4:58:0f:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:30 2024 GMT
            Not After : Apr  7 20:05:30 2025 GMT
        Subject: CN=180E8DD426B3EFB438F193F37B6146CDCA286CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:3d:fc:11:92:2d:c0:22:e9:5c:f1:5d:60:
                    a8:53:d5:9b:a4:39:ed:bd:df:84:8f:ff:32:14:84:
                    6b:ac:cb:78:1c:8b:36:9e:c7:ee:af:3c:55:b8:34:
                    f2:03:da:1e:eb:1a:61:b8:b8:a5:33:fa:b8:f4:b6:
                    33:05:23:ea:40:e1:2d:b0:c6:f8:33:54:cb:ea:a3:
                    1b:53:6d:b5:54:fc:dc:a6:65:f0:65:05:63:c2:49:
                    b1:8e:1b:5b:61:66:1d:fc:93:97:6e:b5:01:59:b6:
                    77:d9:58:75:7f:7f:9d:0f:7c:59:b9:32:65:84:4f:
                    b4:84:bb:5b:cc:23:1e:cf:83:23:76:d2:dc:7a:69:
                    3e:64:11:18:0d:b8:89:dd:45:43:64:a9:90:91:b3:
                    b4:83:df:a6:34:c2:96:84:e0:45:96:9d:30:55:4d:
                    ba:c1:19:6d:28:e8:1e:d7:37:55:5b:b0:46:ca:27:
                    ab:39:fb:fd:54:68:f7:d0:a2:c7:98:36:2e:8a:4b:
                    e7:1e:e1:39:a7:ae:e5:65:49:60:75:e9:92:b3:d9:
                    3d:00:d2:0e:1b:02:07:73:4a:c3:79:48:8c:31:5a:
                    5c:90:79:22:89:a8:48:17:77:b9:19:ed:06:4f:40:
                    2d:51:5e:87:05:c0:8e:86:41:12:4c:ef:bd:54:5d:
                    ca:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0E:8D:D4:26:B3:EF:B4:38:F1:93:F3:7B:61:46:CD:CA:28:6C:B6
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3132382e302f31372d3137203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:9f:5f:40:86:cb:a8:cd:d3:74:0f:ed:a8:e8:04:89:64:
         c6:b5:6e:3e:b3:13:37:16:c2:55:31:19:03:54:1f:74:75:c7:
         ae:6f:20:52:a8:f8:d3:b4:88:7f:b3:1e:91:af:65:e0:5f:53:
         87:c4:ac:ab:cb:68:42:3e:38:45:73:1a:a6:78:ef:f0:be:5b:
         12:79:92:4f:8d:1b:c8:cb:c2:8e:5a:09:3a:e5:90:4c:47:b3:
         72:56:39:40:df:c9:87:70:c1:51:bf:ae:56:f5:fc:2c:13:bf:
         c3:5f:49:63:de:2f:f6:b5:85:5b:c3:b5:bb:8d:b8:71:a6:7e:
         82:7d:04:8c:c8:c8:b9:38:42:88:0e:10:55:a2:d2:84:d0:71:
         d3:22:f7:b8:0f:42:4b:33:6c:8e:19:84:d3:71:27:18:08:da:
         b4:df:fd:42:67:23:cf:29:cc:e1:79:f0:5b:24:e0:c7:99:af:
         06:8f:21:e3:ad:51:46:0a:a2:bf:d5:29:74:d9:a8:0f:e8:3c:
         4a:70:b3:b0:ec:ae:0e:a7:3e:c6:c9:2d:2f:36:6d:7d:c2:b2:
         8a:ce:86:a1:d5:b9:5a:a6:85:5f:e6:eb:6a:50:9c:87:9b:23:
         73:66:7c:8c:d5:49:39:a1:29:e1:f5:77:a6:09:f0:aa:27:a1:
         65:8c:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org