Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39382e302f32332d3233203d3e203238323230.roa
File:                     3138372e38362e39382e302f32332d3233203d3e203238323230.roa (raw, json)
Hash identifier:          eczywwhek+JX4hsociAV/y5iWF/T2/yhe5DoQXOkDjg=
Subject key identifier:   72:6E:C9:5A:9A:C6:58:0A:FC:3A:8A:BF:F4:2B:45:60:4C:72:EB:A9
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       2EB6B79173D097828E1BA39BA988EFC9D96EB92B
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39382e302f32332d3233203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:15 +0000
ROA not before:           Mon 08 Apr 2024 20:00:15 +0000
ROA not after:            Mon 07 Apr 2025 20:05:15 +0000
asID:                     28220
IP address blocks:        187.86.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b6:b7:91:73:d0:97:82:8e:1b:a3:9b:a9:88:ef:c9:d9:6e:b9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:15 2024 GMT
            Not After : Apr  7 20:05:15 2025 GMT
        Subject: CN=726EC95A9AC6580AFC3A8ABFF42B45604C72EBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:aa:59:61:c7:ce:a6:ba:83:81:52:ee:38:
                    22:8f:8d:29:91:d1:62:f0:a5:06:55:37:43:8d:57:
                    c1:44:62:bf:d8:14:3f:93:a8:36:d5:9c:1d:b2:a2:
                    33:db:75:23:70:2b:24:f6:ac:4d:08:e7:dd:77:1b:
                    8f:a6:ce:e9:8a:cc:02:9c:ba:3b:47:4c:f3:3c:8c:
                    ea:a0:93:a7:dd:1b:f0:a9:b9:c2:69:e0:40:57:f8:
                    43:8f:96:d9:0e:61:94:5d:f0:5d:1f:9a:5d:a2:a0:
                    e0:36:e9:44:fa:db:06:f5:30:1d:fd:aa:90:c4:ae:
                    cd:6b:c2:d0:ec:63:6c:db:b5:e1:2a:08:2d:b8:30:
                    72:98:95:0b:42:7d:8d:0a:6e:c7:2d:db:6d:af:f8:
                    f7:2d:13:38:c8:34:a5:84:7b:eb:94:c7:fc:87:15:
                    8d:71:4e:5c:bb:d2:98:d4:aa:3d:c6:65:b5:33:3e:
                    e3:10:a3:bc:b2:6f:09:db:cb:7a:a0:ee:54:97:f0:
                    78:7a:83:6c:4f:89:e2:3c:3e:b4:93:21:39:d1:93:
                    6f:47:90:46:f4:48:da:38:7a:bf:0e:2f:a1:fa:f6:
                    a8:d9:32:a8:12:e0:82:6e:3c:d1:a9:9a:70:37:79:
                    11:2e:7d:f1:48:c9:83:3e:c5:c0:73:23:c0:3f:31:
                    88:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:C9:5A:9A:C6:58:0A:FC:3A:8A:BF:F4:2B:45:60:4C:72:EB:A9
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39382e302f32332d3233203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:bf:80:d0:61:f2:15:2f:de:60:f5:05:f8:4c:73:05:e7:1f:
         47:05:42:a2:17:31:2d:44:95:bb:21:3f:13:45:88:2c:9a:25:
         3a:38:d3:fe:2e:6d:3e:22:5d:79:71:a6:5d:4a:74:dc:3e:a1:
         eb:01:a2:5a:38:f7:63:d1:d0:d1:e6:d2:81:2c:f0:ac:49:ea:
         fc:ca:b7:ba:be:f8:9c:59:a5:bf:30:36:e5:18:d3:a1:3d:9a:
         57:05:74:06:3f:78:2e:71:7c:4c:6b:46:6e:c7:31:10:56:bb:
         af:db:d0:1d:b3:2e:95:97:5a:86:0c:20:98:0f:78:d8:7a:34:
         a5:61:6a:1a:91:96:5f:ef:0a:da:a1:40:9d:bf:af:44:4b:1c:
         47:5c:fe:a2:60:d4:3b:d1:61:cc:ba:71:94:74:b2:07:01:3b:
         0c:ed:8f:f9:ba:c9:d4:a0:25:55:c3:bf:bd:b4:21:79:fa:54:
         db:b2:15:a3:ac:26:c7:c2:e9:91:b1:58:30:bb:52:c1:bf:ed:
         ca:4e:2c:3a:92:c2:b0:46:6e:70:be:53:2d:12:7d:1d:f5:84:
         54:23:88:22:59:17:b1:ec:fd:b2:b1:8d:d8:c2:a4:0a:da:2a:
         9a:37:95:06:d6:a4:f9:ab:59:09:63:c7:57:be:49:ef:5f:37:
         38:3c:d6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org