Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3132382e302f31382d3138203d3e203238323230.roa
File:                     3138372e36312e3132382e302f31382d3138203d3e203238323230.roa (raw, json)
Hash identifier:          eTC4z9qlOmosOeYKTKe8/0zntT0NWNk623LVsoAFAgg=
Subject key identifier:   55:FD:57:60:D5:28:94:81:2E:04:02:34:3F:E4:14:3A:69:61:F1:C7
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       7C8F5E2ECB0B26F13D81B43EB186FE63A4B7FD86
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3132382e302f31382d3138203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:24 +0000
ROA not before:           Mon 08 Apr 2024 20:00:24 +0000
ROA not after:            Mon 07 Apr 2025 20:05:24 +0000
asID:                     28220
IP address blocks:        187.61.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8f:5e:2e:cb:0b:26:f1:3d:81:b4:3e:b1:86:fe:63:a4:b7:fd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:24 2024 GMT
            Not After : Apr  7 20:05:24 2025 GMT
        Subject: CN=55FD5760D52894812E0402343FE4143A6961F1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:2f:93:97:17:ba:d4:d4:06:e7:0a:9d:73:
                    fc:32:79:91:4a:a1:9e:dd:93:18:ef:df:1d:0e:af:
                    89:be:8c:fc:a3:d2:24:62:ce:d1:76:fa:83:cd:0d:
                    7e:e8:1d:2f:b7:62:e2:7d:06:00:20:77:82:45:07:
                    5b:1c:b2:bb:1c:cb:3a:8d:36:fb:44:dd:b3:51:8e:
                    5f:f8:50:37:b9:37:03:c5:8c:eb:59:24:41:41:f6:
                    c8:f8:b5:f0:b8:7e:29:bf:5c:40:88:eb:6e:21:67:
                    98:15:61:05:84:73:b7:3b:e5:e3:7e:99:8a:8a:81:
                    46:6f:f8:e6:82:b6:91:49:2c:71:29:e6:a2:9d:f3:
                    a6:92:4c:c6:ad:fd:38:14:e1:ed:6b:53:ef:69:25:
                    bd:fb:81:e0:58:43:2f:dc:c4:c4:a7:2d:61:35:83:
                    43:1a:3c:02:c2:fb:8f:8a:79:72:5e:eb:35:1c:4d:
                    e0:f0:85:65:7b:a6:2a:50:02:81:cd:be:cd:64:70:
                    88:84:4b:6e:a2:6b:ab:de:a1:e8:09:7b:79:dc:98:
                    e3:35:c9:5e:75:39:4b:e7:9d:a2:79:64:98:76:19:
                    d4:6e:2b:0f:e1:d5:b1:d7:88:6b:c5:8d:2d:03:e8:
                    cf:84:b5:dd:9f:65:bb:b5:4f:b9:18:f1:1f:6f:44:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FD:57:60:D5:28:94:81:2E:04:02:34:3F:E4:14:3A:69:61:F1:C7
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3132382e302f31382d3138203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:f7:be:98:17:16:d7:da:d6:16:b3:d1:f8:ca:4a:76:27:90:
         c9:46:4c:f9:41:64:cc:df:33:11:a6:78:e0:b2:30:2d:a1:ec:
         45:bc:fc:d5:16:b7:32:7d:86:8f:cb:2c:3e:8b:9e:e2:ee:b2:
         eb:65:8b:4b:72:fe:81:9b:1e:a1:cc:7d:59:a1:38:29:52:9a:
         cb:2b:d4:ae:04:0e:b2:5f:fb:61:ad:40:9c:e8:0e:78:a9:99:
         b2:bf:45:73:33:1f:70:95:9b:b4:32:6d:f2:86:68:db:64:df:
         d9:47:bf:84:f3:b3:e9:e6:b3:15:94:ae:64:2f:a7:f0:eb:50:
         ce:3a:17:90:32:2f:d4:b8:16:10:2c:25:5b:b8:6e:9f:2d:46:
         1a:82:4a:e8:c6:6b:20:b1:ce:c1:d7:b6:26:6d:af:c5:25:c9:
         1b:b3:b5:15:de:ce:34:31:e6:b7:8f:d7:08:94:14:48:bb:8a:
         21:37:8e:12:b2:e8:4a:d5:e6:8c:07:fc:f3:7b:21:dd:97:d3:
         6f:17:40:e8:1a:e9:dc:9c:b2:09:b5:4a:73:ee:04:6c:16:17:
         c0:2b:22:b3:de:74:26:f5:b1:e3:9c:7a:ac:aa:64:7b:69:8c:
         be:bf:fe:ce:b3:58:eb:2e:97:07:a7:d4:65:ee:ff:5d:d2:55:
         c9:b7:25:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfI9eLssLJvE9gbQ+sYb+Y6S3/YYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjRaFw0yNTA0MDcyMDA1MjRaMDMxMTAvBgNV
BAMTKDU1RkQ1NzYwRDUyODk0ODEyRTA0MDIzNDNGRTQxNDNBNjk2MUYxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdy+Tlxe61NQG5wqdc/wyeZFK
oZ7dkxjv3x0Or4m+jPyj0iRiztF2+oPNDX7oHS+3YuJ9BgAgd4JFB1scsrscyzqN
NvtE3bNRjl/4UDe5NwPFjOtZJEFB9sj4tfC4fim/XECI624hZ5gVYQWEc7c75eN+
mYqKgUZv+OaCtpFJLHEp5qKd86aSTMat/TgU4e1rU+9pJb37geBYQy/cxMSnLWE1
g0MaPALC+4+KeXJe6zUcTeDwhWV7pipQAoHNvs1kcIiES26ia6veoegJe3ncmOM1
yV51OUvnnaJ5ZJh2GdRuKw/h1bHXiGvFjS0D6M+Etd2fZbu1T7kY8R9vRFsTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVf1XYNUolIEuBAI0P+QUOmlh8ccwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzNjMxMmUzMTMyMzgyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGuz2AMA0GCSqGSIb3DQEBCwUAA4IBAQCP976YFxbX
2tYWs9H4ykp2J5DJRkz5QWTM3zMRpnjgsjAtoexFvPzVFrcyfYaPyyw+i57i7rLr
ZYtLcv6Bmx6hzH1ZoTgpUprLK9SuBA6yX/thrUCc6A54qZmyv0VzMx9wlZu0Mm3y
hmjbZN/ZR7+E87Pp5rMVlK5kL6fw61DOOheQMi/UuBYQLCVbuG6fLUYagkroxmsg
sc7B17Ymba/FJckbs7UV3s40Mea3j9cIlBRIu4ohN44SsuhK1eaMB/zzeyHdl9Nv
F0DoGuncnLIJtUpz7gRsFhfAKyKz3nQm9bHjnHqsqmR7aYy+v/7Os1jrLpcHp9Rl
7v9d0lXJtyVz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org