Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e3130342e302f32312d3231203d3e203238323230.roa
File:                     3138372e38362e3130342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          sbEsxHP4ZPngRuK323itXChkqhFjBI3zAY8z9wff/A4=
Subject key identifier:   EB:6B:A9:A0:64:50:FE:6D:AB:20:4A:0D:44:6B:4A:2A:42:1C:7A:90
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       28F93B1A795AE1552FE8898207BFE00CE435C7BC
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e3130342e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:27 +0000
ROA not before:           Mon 08 Apr 2024 20:00:27 +0000
ROA not after:            Mon 07 Apr 2025 20:05:27 +0000
asID:                     28220
IP address blocks:        187.86.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f9:3b:1a:79:5a:e1:55:2f:e8:89:82:07:bf:e0:0c:e4:35:c7:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:27 2024 GMT
            Not After : Apr  7 20:05:27 2025 GMT
        Subject: CN=EB6BA9A06450FE6DAB204A0D446B4A2A421C7A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:89:da:e3:11:0a:43:3b:30:09:b8:55:d6:2d:
                    f2:c9:db:f0:9b:04:4b:1a:5e:02:85:82:5f:0b:1f:
                    9b:66:bf:9a:cc:c5:7a:4e:93:e6:9c:3c:30:ac:46:
                    ea:91:29:10:0f:1e:74:c0:c1:3c:d1:3a:1c:91:e8:
                    45:7d:17:54:51:3d:ec:ae:05:87:4d:65:8c:c3:60:
                    b2:98:70:43:10:8a:1c:83:ec:09:1a:8d:1b:88:83:
                    e3:ea:ab:1f:b4:ad:3e:ad:93:b8:47:c8:87:8a:09:
                    05:5c:01:32:2a:e0:70:9c:cf:84:a8:05:d0:9e:a0:
                    fe:70:93:15:23:9b:1a:b4:ac:06:6a:cb:cd:4a:c5:
                    c6:85:ae:33:0f:d2:39:27:b6:f5:a8:0f:dd:90:99:
                    ee:d6:cd:8c:5b:27:1d:69:ae:a5:2e:c1:8c:1c:06:
                    8f:cd:b6:2f:51:54:67:85:a8:b5:a4:f4:3c:24:f4:
                    e1:2c:4b:80:a9:f9:5f:74:a6:c2:03:80:19:f5:91:
                    d3:54:11:16:e9:0d:43:c1:85:80:24:87:f6:1d:c4:
                    70:ee:e8:9d:4b:61:17:5b:3e:d9:eb:a6:5c:bc:b9:
                    cb:9f:13:22:f4:4e:da:87:0b:31:f4:15:23:2f:41:
                    66:1a:69:d6:f0:8c:99:ef:dd:fa:13:cf:05:1f:4f:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6B:A9:A0:64:50:FE:6D:AB:20:4A:0D:44:6B:4A:2A:42:1C:7A:90
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e3130342e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:56:47:e5:03:d9:8c:39:c6:3e:fb:c3:80:9a:65:18:0a:54:
         6c:ab:9a:f2:86:ad:d5:cc:86:ea:d1:0f:6f:af:31:02:cc:ef:
         9d:29:9e:c2:39:4d:39:18:83:68:d7:04:5e:26:c6:79:f6:30:
         b5:be:77:b6:6c:2a:c9:cd:9f:9b:ce:8e:d8:59:9a:a3:d9:56:
         6e:6a:fc:25:bc:0d:18:53:58:c4:5d:64:03:88:e4:8c:cb:13:
         ed:0e:46:a2:23:6c:93:89:e2:69:e0:ed:5c:51:9c:8e:23:7b:
         df:b0:3f:23:7d:1d:a5:fa:d5:ef:cb:0f:98:cf:11:a3:2f:0f:
         ee:83:39:03:1f:6c:51:df:bd:3c:53:15:ed:c3:af:44:37:0d:
         09:f1:57:bd:4a:7f:f1:dd:fc:43:7a:09:a5:f0:61:24:30:f9:
         71:ea:c9:4a:5d:c2:94:ca:98:04:8e:18:ee:b7:a1:3f:9e:46:
         7b:a3:a3:6f:b3:be:a3:71:8d:de:e0:82:fc:1f:71:3c:c7:59:
         a7:db:7b:f8:da:bb:7d:2e:43:6e:b8:30:cc:88:90:ce:1a:37:
         1a:47:a8:8c:b6:6a:6e:f8:99:db:c5:d3:24:25:74:47:88:1c:
         47:b8:30:be:ed:fa:6b:e9:9a:3f:ae:ef:e8:0e:da:fc:fe:b0:
         9d:1c:fc:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKPk7Gnla4VUv6ImCB7/gDOQ1x7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMjdaFw0yNTA0MDcyMDA1MjdaMDMxMTAvBgNV
BAMTKEVCNkJBOUEwNjQ1MEZFNkRBQjIwNEEwRDQ0NkI0QTJBNDIxQzdBOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVidrjEQpDOzAJuFXWLfLJ2/Cb
BEsaXgKFgl8LH5tmv5rMxXpOk+acPDCsRuqRKRAPHnTAwTzROhyR6EV9F1RRPeyu
BYdNZYzDYLKYcEMQihyD7AkajRuIg+Pqqx+0rT6tk7hHyIeKCQVcATIq4HCcz4So
BdCeoP5wkxUjmxq0rAZqy81KxcaFrjMP0jkntvWoD92Qme7WzYxbJx1prqUuwYwc
Bo/Nti9RVGeFqLWk9Dwk9OEsS4Cp+V90psIDgBn1kdNUERbpDUPBhYAkh/YdxHDu
6J1LYRdbPtnrply8ucufEyL0TtqHCzH0FSMvQWYaadbwjJnv3foTzwUfT3oTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU62upoGRQ/m2rIEoNRGtKKkIcepAwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM3MmUzODM2MmUzMTMwMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDu1ZoMA0GCSqGSIb3DQEBCwUAA4IBAQBYVkflA9mM
OcY++8OAmmUYClRsq5ryhq3VzIbq0Q9vrzECzO+dKZ7COU05GINo1wReJsZ59jC1
vne2bCrJzZ+bzo7YWZqj2VZuavwlvA0YU1jEXWQDiOSMyxPtDkaiI2yTieJp4O1c
UZyOI3vfsD8jfR2l+tXvyw+YzxGjLw/ugzkDH2xR3708UxXtw69ENw0J8Ve9Sn/x
3fxDegml8GEkMPlx6slKXcKUypgEjhjut6E/nkZ7o6Nvs76jcY3e4IL8H3E8x1mn
23v42rt9LkNuuDDMiJDOGjcaR6iMtmpu+JnbxdMkJXRHiBxHuDC+7fpr6Zo/ru/o
Dtr8/rCdHPyq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org