Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3139322e302f31382d3138203d3e203238323230.roa
File:                     3138372e36312e3139322e302f31382d3138203d3e203238323230.roa (raw, json)
Hash identifier:          iLQ2feybeG81oNM3N4l3t47WxfMvE2WdD2IFXFjEs3I=
Subject key identifier:   48:9B:9A:A7:15:E4:61:EC:FA:90:47:C1:35:4B:B3:2E:44:A0:07:FB
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       1DD04B4D18F46DA3E1B97A7DF5DF6DCB47F29531
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3139322e302f31382d3138203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:20 +0000
ROA not before:           Mon 08 Apr 2024 20:00:20 +0000
ROA not after:            Mon 07 Apr 2025 20:05:20 +0000
asID:                     28220
IP address blocks:        187.61.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d0:4b:4d:18:f4:6d:a3:e1:b9:7a:7d:f5:df:6d:cb:47:f2:95:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:20 2024 GMT
            Not After : Apr  7 20:05:20 2025 GMT
        Subject: CN=489B9AA715E461ECFA9047C1354BB32E44A007FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3b:15:3f:15:bf:f0:99:39:b5:d8:ae:ee:ae:
                    70:f9:44:e9:c2:59:6b:fd:f5:f7:1f:8b:a4:3c:5b:
                    5c:de:05:7e:ee:0b:60:74:68:24:9d:de:ff:e5:0b:
                    1d:5b:0c:f3:bf:e2:ee:55:66:b5:b4:1d:c7:5b:f8:
                    ed:bc:15:3b:01:c8:6d:c8:00:37:da:2f:f7:72:e3:
                    9b:dd:1f:65:28:a2:90:7a:43:52:a6:6c:b6:de:cc:
                    b7:78:96:12:e8:8a:01:c4:35:11:31:8b:fe:c5:6c:
                    22:e1:72:2d:6c:b3:91:00:b1:91:b2:a3:30:92:e1:
                    16:54:9c:bb:68:23:fc:68:de:86:78:c7:f6:f2:53:
                    9d:c3:80:3f:d4:55:5d:30:b9:5a:97:93:7a:3f:96:
                    ad:0f:b1:12:03:08:0b:8f:8d:8b:9c:4b:fc:07:25:
                    12:c4:d4:ab:8c:bc:4f:ae:6f:26:0b:32:94:db:bc:
                    94:a5:5d:72:3c:91:8f:25:12:1f:e8:be:aa:fd:d9:
                    4b:ad:c1:d8:09:d1:13:06:b9:9c:a1:aa:9f:61:fc:
                    05:e3:38:3f:a0:68:65:8c:de:dd:40:bd:44:d5:17:
                    57:fa:f6:1e:a0:85:bb:1d:16:23:cc:88:1f:5e:2c:
                    0e:77:bc:c5:82:8c:d4:78:56:50:43:23:16:70:7f:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9B:9A:A7:15:E4:61:EC:FA:90:47:C1:35:4B:B3:2E:44:A0:07:FB
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e36312e3139322e302f31382d3138203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         77:74:5d:5c:16:89:62:37:e2:08:06:d0:b2:60:40:39:ad:f6:
         4f:a2:5c:18:b9:9b:4b:5a:ff:df:15:ab:5f:38:82:0c:2f:74:
         e2:f4:7a:bb:38:cc:92:42:10:db:b0:17:75:53:cc:e6:73:b8:
         cc:da:fc:d0:eb:a5:9e:b8:35:fd:4f:7a:d0:d9:47:a9:ac:90:
         14:86:bb:bb:f4:72:e0:89:75:d9:a9:75:c5:ea:89:4d:54:40:
         6d:af:b8:5f:bb:c8:4d:ac:b5:d9:fa:dd:d2:ab:9b:33:31:78:
         58:3e:a1:c6:65:16:1c:fd:4e:e8:bc:1c:83:54:de:e1:8c:8f:
         b4:31:41:58:f2:bb:f0:f2:c9:87:32:15:d2:8e:f3:51:cd:04:
         aa:ac:e5:13:22:e7:03:2f:25:8b:47:6b:23:93:7d:95:64:aa:
         4c:94:57:11:08:89:31:7b:8c:b0:ca:1e:f9:cf:eb:d3:5e:9a:
         82:c4:81:5a:eb:c8:af:3d:28:d9:9e:54:b9:7b:8e:51:29:13:
         4d:7d:c5:80:71:f9:fa:84:99:82:26:12:61:62:e2:51:4a:0a:
         86:c8:50:4b:70:6e:f8:6d:cb:9c:34:08:77:5c:06:84:5d:0e:
         4f:00:08:ac:02:e7:02:a0:78:c8:94:86:57:b7:a1:4d:37:a9:
         9a:be:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:34 2025 by rpki-client