Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e3130302e302f32322d3232203d3e203238323230.roa
File:                     3138372e38362e3130302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          rVRNGqW5FRlv3ADI5YMLnTEcxEEkyAlshqbtBZ2LDJA=
Subject key identifier:   E3:D1:44:56:C5:25:BE:FE:F0:4E:E4:DC:EE:A4:FD:F5:A5:BD:89:4B
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       0B15F3610BDE0263CB41E056C225CC9E9ADF80C8
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e3130302e302f32322d3232203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:20 +0000
ROA not before:           Mon 08 Apr 2024 20:00:20 +0000
ROA not after:            Mon 07 Apr 2025 20:05:20 +0000
asID:                     28220
IP address blocks:        187.86.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:15:f3:61:0b:de:02:63:cb:41:e0:56:c2:25:cc:9e:9a:df:80:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:20 2024 GMT
            Not After : Apr  7 20:05:20 2025 GMT
        Subject: CN=E3D14456C525BEFEF04EE4DCEEA4FDF5A5BD894B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:0f:9e:30:58:52:d5:eb:e1:c7:70:5a:a7:
                    fc:bd:e2:c0:e7:90:fa:59:75:d0:18:ee:2d:46:41:
                    36:0e:f6:22:cd:0e:c4:70:34:b2:a7:13:c9:53:9d:
                    59:ec:65:4f:00:83:f6:c1:b2:1e:c5:38:4a:e3:81:
                    e7:47:b0:90:4b:42:7a:35:0d:76:cc:32:17:1f:c2:
                    c2:95:64:e1:3d:82:a0:e0:b0:f7:84:2f:69:bb:b7:
                    eb:a1:ad:da:ac:47:01:29:98:94:21:5b:00:47:90:
                    13:3f:ef:d6:4c:08:c2:71:6d:a4:d8:e0:57:da:f8:
                    82:f7:f7:28:7d:d2:f7:91:c3:c7:90:a8:67:e5:a6:
                    f3:61:0f:bc:a2:5f:cb:3d:01:2e:2c:b3:93:54:52:
                    f7:a9:d3:cf:aa:79:46:84:7a:c6:34:93:89:8e:9c:
                    06:d4:77:8e:69:89:99:e6:f8:7e:b7:9d:fc:88:72:
                    85:ff:14:b6:8e:9d:eb:23:bf:02:6c:f4:08:09:6e:
                    45:cc:03:63:49:39:f9:eb:25:cf:3c:fe:3e:b5:bf:
                    5b:58:c0:c9:0f:54:d9:61:8e:02:1f:b4:7e:6e:31:
                    e3:4e:ea:c6:bc:f2:bf:5f:00:a7:87:f6:ea:fb:2e:
                    30:59:ea:45:20:be:83:25:a1:c7:ad:3f:69:fd:44:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D1:44:56:C5:25:BE:FE:F0:4E:E4:DC:EE:A4:FD:F5:A5:BD:89:4B
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e3130302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:f6:51:87:9b:b5:2d:61:f2:52:76:7c:1d:21:c3:c6:84:
         7a:f8:bb:95:9f:5a:c2:e9:41:b5:81:68:b1:de:8b:a5:82:26:
         3e:2a:0d:40:bd:d1:e5:dc:53:eb:29:0a:0b:61:5e:d8:b9:12:
         fd:1b:73:60:e4:41:e8:b1:d8:dd:06:8d:13:6e:e0:ad:e7:ed:
         9f:da:17:62:43:d6:b0:69:65:f7:55:a6:f9:29:52:93:44:ca:
         5c:58:cf:85:cb:af:08:3c:04:1e:c0:7e:a5:af:0e:52:b2:ae:
         6f:f1:d0:e2:e1:bc:f8:d1:b5:57:12:95:5b:a7:93:e5:74:95:
         8f:7d:39:e5:d0:b2:d7:d3:a4:26:8d:0b:07:a4:d2:12:aa:32:
         1b:c5:ef:b5:12:ab:2f:46:53:97:55:dd:a3:0e:ef:cb:7e:24:
         ff:2b:07:c1:27:c5:88:26:fc:1e:35:97:dc:63:fa:da:76:2f:
         fc:ea:76:c8:f5:dd:8f:cc:30:c1:ea:0f:b5:c0:e4:6d:6a:1c:
         39:da:61:26:d2:58:fd:b7:00:0f:e5:e3:5e:69:72:67:88:85:
         3a:7f:05:7c:c5:b8:c4:cb:f9:14:b4:6b:48:d6:43:df:27:0a:
         b2:24:cd:15:c6:71:dd:bf:53:f0:c2:98:3c:61:b3:8e:67:a6:
         4c:fc:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org