Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3138302e302f32322d3232203d3e203238323230.roa
File:                     3138372e36312e3138302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          A2HLH+CGTiiq23AFEy1fGc29oVXMJDHVYWAbjTQw198=
Subject key identifier:   43:4D:CF:B1:C5:04:4C:15:AD:E9:46:FD:06:5C:BD:ED:7E:32:32:B9
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       6512058758966B6E4E15D792196FBD88C133668F
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3138302e302f32322d3232203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:17 +0000
ROA not before:           Mon 08 Apr 2024 20:00:17 +0000
ROA not after:            Mon 07 Apr 2025 20:05:17 +0000
asID:                     28220
IP address blocks:        187.61.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:12:05:87:58:96:6b:6e:4e:15:d7:92:19:6f:bd:88:c1:33:66:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:17 2024 GMT
            Not After : Apr  7 20:05:17 2025 GMT
        Subject: CN=434DCFB1C5044C15ADE946FD065CBDED7E3232B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:98:30:36:a0:0d:1b:a9:f5:0c:f7:51:4c:
                    9c:86:a0:5b:94:52:1b:f9:af:00:30:ab:ef:b2:8b:
                    37:c3:d4:15:16:d6:a4:f6:d1:ec:83:93:82:74:c8:
                    6b:11:32:02:91:05:9e:04:aa:a1:a3:2a:e0:8a:79:
                    fd:4c:4c:9a:fe:9b:94:b5:51:08:33:37:c4:ae:98:
                    61:56:6d:64:91:d5:54:16:09:5c:d2:fd:28:72:54:
                    4a:56:41:04:1b:68:72:a9:09:c1:9c:22:83:be:32:
                    c6:67:74:7c:b8:da:26:db:7a:52:de:51:f4:d0:a7:
                    fc:d0:53:c9:ab:06:2c:16:94:9b:fc:c2:e7:44:4f:
                    4a:7c:a3:8e:dc:84:66:d3:0c:db:f7:95:7c:b3:8e:
                    0f:56:61:5a:54:33:d4:63:4b:fb:17:c9:49:74:5a:
                    40:48:8a:8f:6e:7b:d0:27:d1:07:70:71:b3:9a:aa:
                    33:a5:03:25:b1:5b:98:4b:c2:7c:c5:d9:c0:13:4d:
                    95:5a:4a:b5:d1:17:59:57:1b:24:b1:c4:52:8c:9c:
                    a1:92:74:ee:38:92:bd:a3:a0:fe:b1:64:cf:a5:b5:
                    8e:49:bc:cd:75:bc:09:f4:f4:ed:15:4f:9b:db:29:
                    41:04:45:26:71:16:18:b0:8d:78:bd:b4:41:94:f7:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:CF:B1:C5:04:4C:15:AD:E9:46:FD:06:5C:BD:ED:7E:32:32:B9
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3138302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:0b:f8:90:5e:19:f0:3c:01:b8:0b:de:62:c9:9e:52:a2:a4:
         21:47:b0:13:ee:2a:9e:fc:55:67:a6:71:ec:80:8f:25:6b:89:
         31:3d:a3:90:81:ce:08:48:eb:a2:4e:9e:8e:cc:fc:9d:4b:30:
         bd:a4:7b:d0:af:ec:0e:3b:24:04:47:65:ef:f5:40:79:2b:55:
         48:a2:fb:36:85:63:46:21:7a:c8:55:9e:16:6b:fe:ec:fe:38:
         5e:84:90:b4:bf:5e:fe:62:1d:9e:b1:99:0e:9d:3a:59:72:de:
         b3:23:b4:1f:7a:eb:77:47:5f:1e:b9:75:a7:fe:64:a1:35:0c:
         7e:c0:4f:2c:45:aa:be:68:f7:c8:94:f2:fc:9d:9d:a6:72:49:
         66:f7:58:e2:a7:f1:dd:27:03:a1:a4:2a:20:6a:d2:22:20:4f:
         98:82:da:81:8c:39:aa:48:83:41:4b:30:c0:a8:65:27:0d:89:
         60:a6:5b:b1:79:fe:0e:4b:37:68:a5:c4:bd:1a:f6:24:8d:9f:
         5f:ad:55:43:e1:b4:e5:16:c4:e1:71:37:f2:07:99:f8:32:e2:
         ec:56:87:11:7d:35:2e:ee:55:90:14:d0:ad:b2:6f:f6:af:ff:
         a4:d4:49:a2:d4:4f:5e:79:a0:99:aa:fd:df:2a:5b:c3:a1:cf:
         b8:93:6c:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZRIFh1iWa25OFdeSGW+9iMEzZo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMTdaFw0yNTA0MDcyMDA1MTdaMDMxMTAvBgNV
BAMTKDQzNERDRkIxQzUwNDRDMTVBREU5NDZGRDA2NUNCREVEN0UzMjMyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJApgwNqANG6n1DPdRTJyGoFuU
Uhv5rwAwq++yizfD1BUW1qT20eyDk4J0yGsRMgKRBZ4EqqGjKuCKef1MTJr+m5S1
UQgzN8SumGFWbWSR1VQWCVzS/ShyVEpWQQQbaHKpCcGcIoO+MsZndHy42ibbelLe
UfTQp/zQU8mrBiwWlJv8wudET0p8o47chGbTDNv3lXyzjg9WYVpUM9RjS/sXyUl0
WkBIio9ue9An0QdwcbOaqjOlAyWxW5hLwnzF2cATTZVaSrXRF1lXGySxxFKMnKGS
dO44kr2joP6xZM+ltY5JvM11vAn09O0VT5vbKUEERSZxFhiwjXi9tEGU90onAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ03PscUETBWt6Ub9Bly97X4yMrkwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzNjMxMmUzMTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuz20MA0GCSqGSIb3DQEBCwUAA4IBAQAgC/iQXhnw
PAG4C95iyZ5SoqQhR7AT7iqe/FVnpnHsgI8la4kxPaOQgc4ISOuiTp6OzPydSzC9
pHvQr+wOOyQER2Xv9UB5K1VIovs2hWNGIXrIVZ4Wa/7s/jhehJC0v17+Yh2esZkO
nTpZct6zI7Qfeut3R18euXWn/mShNQx+wE8sRaq+aPfIlPL8nZ2mcklm91jip/Hd
JwOhpCogatIiIE+YgtqBjDmqSINBSzDAqGUnDYlgpluxef4OSzdopcS9GvYkjZ9f
rVVD4bTlFsThcTfyB5n4MuLsVocRfTUu7lWQFNCtsm/2r/+k1Emi1E9eeaCZqv3f
KlvDoc+4k2wa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org