Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3139312e302f32342d3234203d3e203238323230.roa
File:                     3138372e36312e3139312e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          XMGv+vt9OtcPFJJVcDJv5LizTPXxAR8HPFvlsUT3w6Y=
Subject key identifier:   04:A3:ED:E8:04:1D:7A:B8:0D:A2:9F:C0:5F:B7:E1:9C:AF:5A:E5:DA
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       0701C90DE059B536C4FC7741DA6F86837752BF90
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3139312e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:23 +0000
ROA not before:           Mon 08 Apr 2024 20:00:23 +0000
ROA not after:            Mon 07 Apr 2025 20:05:23 +0000
asID:                     28220
IP address blocks:        187.61.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:01:c9:0d:e0:59:b5:36:c4:fc:77:41:da:6f:86:83:77:52:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:23 2024 GMT
            Not After : Apr  7 20:05:23 2025 GMT
        Subject: CN=04A3EDE8041D7AB80DA29FC05FB7E19CAF5AE5DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:ce:a0:0d:8c:31:16:d2:fc:32:f6:73:92:
                    07:56:19:20:4a:e6:08:ab:14:f8:df:ea:03:53:1d:
                    59:c5:50:1a:6c:d7:14:e7:27:87:9b:c6:ee:da:f9:
                    e8:10:59:49:58:1e:73:50:4e:7c:69:68:e5:c1:9a:
                    f5:20:98:8b:0d:0f:df:1a:6f:e0:68:d6:fb:cf:2e:
                    df:59:0a:e1:a1:c3:ed:74:88:3b:b7:6d:49:b0:57:
                    6a:de:e3:56:ff:99:c0:c1:74:49:d8:16:d3:b1:d5:
                    5c:53:28:87:98:6e:a4:3d:8f:37:21:2e:fb:72:cb:
                    c6:ab:00:0b:b1:9d:87:5e:02:e0:97:84:fa:4e:90:
                    82:c4:45:71:4f:13:22:a8:a0:dd:9b:0a:80:0e:f6:
                    34:45:23:c9:b5:16:7b:58:95:97:05:d7:28:44:49:
                    1c:45:4f:5e:10:55:8d:f5:49:51:7b:13:65:f3:2a:
                    fa:0d:42:06:11:7c:b3:8c:55:ea:14:12:c7:66:c5:
                    53:21:0f:ba:21:72:73:59:f4:d9:d3:2d:f8:0d:16:
                    ad:8b:11:a2:6e:c4:16:61:58:9e:5d:79:54:7e:ea:
                    9e:de:84:b5:6c:54:c7:da:78:ed:db:9f:0e:04:2b:
                    e0:c3:45:9e:95:c3:65:19:0f:4c:1e:98:ac:e7:ca:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:ED:E8:04:1D:7A:B8:0D:A2:9F:C0:5F:B7:E1:9C:AF:5A:E5:DA
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3139312e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2d:b8:5e:d4:d4:9e:b4:5a:5c:77:2f:22:12:e3:cd:05:e6:
         3c:64:04:a4:0d:90:d2:9d:f3:7b:48:03:45:71:26:c8:1e:ee:
         c0:29:b0:cf:31:6c:d0:a6:5d:14:9b:f0:e3:f0:0c:7b:c6:dc:
         53:1a:f6:71:49:6a:f9:83:ea:1b:6c:cf:04:04:4c:67:8e:0a:
         21:ea:b1:0a:f0:a0:18:a6:37:26:a7:bc:ca:1a:f3:9d:cc:58:
         42:4f:93:22:d7:f3:e2:d3:6c:7c:18:f7:21:8e:a6:8b:3e:4c:
         51:8d:34:e4:8a:f0:d4:ca:7d:8b:9d:d3:83:62:11:a1:d2:e8:
         b6:19:b8:bb:04:d0:76:79:a1:a3:76:10:24:d8:8c:bc:af:0e:
         ad:ce:3f:6b:e2:da:3a:32:91:f2:f6:76:06:49:31:95:fb:99:
         55:46:da:d6:fa:78:64:74:3c:f1:ec:13:ad:ce:35:85:9d:d0:
         59:c0:bd:33:1b:3f:36:17:61:1a:7f:08:ca:b5:e4:84:d8:7c:
         63:6d:18:ac:33:ac:2d:18:69:4f:00:71:44:68:99:f3:00:47:
         d1:80:2a:9f:68:1b:d4:5c:5f:0c:b6:92:84:db:78:01:28:3e:
         9b:79:ab:64:fb:5d:4e:95:4a:f3:4a:e7:2d:52:b7:e8:37:91:
         4b:ae:45:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org