Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa
File:                     3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa (raw, json)
Hash identifier:          uhWljts+iujcW+kQdkFCP3JJx7WqNeTPE0EiMcEf1wc=
Subject key identifier:   AD:27:C9:34:6D:94:D4:F8:0A:73:54:05:93:32:4D:03:DE:06:C9:E5
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       1FAA8BA9AE6FD6E2C723AC0DE164784483C48A16
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:19 +0000
ROA not before:           Mon 08 Apr 2024 20:00:19 +0000
ROA not after:            Mon 07 Apr 2025 20:05:19 +0000
asID:                     28220
IP address blocks:        189.124.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:aa:8b:a9:ae:6f:d6:e2:c7:23:ac:0d:e1:64:78:44:83:c4:8a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:19 2024 GMT
            Not After : Apr  7 20:05:19 2025 GMT
        Subject: CN=AD27C9346D94D4F80A73540593324D03DE06C9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:22:06:d1:f9:0a:b3:e0:f0:e5:12:43:d3:
                    5f:39:07:a6:ff:53:b4:27:8e:b2:dd:b2:06:b4:fe:
                    37:8b:56:78:d5:e7:17:02:0f:06:9b:87:ca:4f:06:
                    67:b1:69:9c:d1:d7:09:a6:14:cd:48:04:02:60:dd:
                    df:43:dc:3c:3a:ab:1c:a2:8e:5f:92:ed:53:38:12:
                    8d:eb:c6:a3:a6:7d:da:b5:e3:ec:7d:a3:c7:30:54:
                    cf:7f:f2:c7:86:8f:26:4f:4d:a1:b5:5f:f6:5d:38:
                    b8:75:b1:7e:73:45:7c:dc:8c:57:e7:76:e7:c1:47:
                    10:8a:46:ce:c1:1e:71:c1:15:44:0c:6e:73:9b:b5:
                    87:12:96:9e:42:a4:14:df:5d:d9:09:b4:dc:e5:05:
                    df:48:01:fe:85:57:c4:76:42:69:55:9f:a0:5f:22:
                    a8:75:90:19:af:be:b0:c3:f5:9e:5b:80:53:97:79:
                    98:2c:60:db:39:85:b1:83:32:6d:af:56:23:f7:7a:
                    63:46:7b:47:0f:9d:4f:04:84:31:2a:40:43:03:3c:
                    7b:81:31:9a:d1:ba:04:40:d5:9b:00:3e:2a:0d:d1:
                    6c:83:12:21:fe:59:39:b2:0f:75:1a:82:db:ce:38:
                    2a:16:6a:be:bb:18:b7:7f:73:75:17:b9:24:9c:51:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:C9:34:6D:94:D4:F8:0A:73:54:05:93:32:4D:03:DE:06:C9:E5
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3132382e302f31372d3137203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         26:06:a9:35:10:0b:13:b2:3b:cf:ba:69:9d:da:3a:17:5e:9b:
         e6:ad:62:8b:76:8b:dd:ad:03:19:f1:1d:4b:3d:82:31:c4:ff:
         4b:fc:9b:0c:4d:67:76:fe:35:4f:b5:d0:bd:2f:65:41:3f:a2:
         c7:cb:cb:47:8e:a2:d7:5b:f5:fd:ab:8f:dc:0a:d6:9d:25:58:
         97:05:8b:e1:88:6f:23:e5:61:d4:56:3d:af:52:79:42:2c:16:
         d6:d2:ac:93:9a:cb:dc:b9:ce:bb:2c:36:df:3c:29:02:7e:95:
         38:40:74:36:cb:ad:0f:0b:2a:c7:23:b7:ee:42:b2:49:25:31:
         25:a4:13:40:df:f7:0f:34:e7:18:7a:0b:a7:80:99:fc:20:35:
         52:f1:ac:09:a2:37:b2:38:94:17:56:fd:c6:5b:63:6a:a6:40:
         d1:cb:1e:0a:ab:e7:f5:be:51:c5:79:77:47:06:95:a6:5d:2c:
         e0:ed:a3:71:4c:2a:83:d1:53:ab:74:98:45:55:56:55:0a:e7:
         68:9d:2a:53:f1:30:72:de:34:12:45:bf:a4:55:d7:a2:54:47:
         3b:b8:32:34:0e:19:fe:d0:56:b7:23:0b:f7:7f:3f:65:28:1d:
         42:24:d8:3d:79:75:cf:27:64:11:e6:7a:2d:97:77:a6:48:c0:
         4a:31:1c:17
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH6qLqa5v1uLHI6wN4WR4RIPEihYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzY5MEM5MkY0NjY2RDcyNDBDMTRCMUYxMTVEMzAzMkM2
Q0MwQ0VEMDAeFw0yNDA0MDgyMDAwMTlaFw0yNTA0MDcyMDA1MTlaMDMxMTAvBgNV
BAMTKEFEMjdDOTM0NkQ5NEQ0RjgwQTczNTQwNTkzMzI0RDAzREUwNkM5RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrSIG0fkKs+Dw5RJD0185B6b/
U7QnjrLdsga0/jeLVnjV5xcCDwabh8pPBmexaZzR1wmmFM1IBAJg3d9D3Dw6qxyi
jl+S7VM4Eo3rxqOmfdq14+x9o8cwVM9/8seGjyZPTaG1X/ZdOLh1sX5zRXzcjFfn
dufBRxCKRs7BHnHBFUQMbnObtYcSlp5CpBTfXdkJtNzlBd9IAf6FV8R2QmlVn6Bf
Iqh1kBmvvrDD9Z5bgFOXeZgsYNs5hbGDMm2vViP3emNGe0cPnU8EhDEqQEMDPHuB
MZrRugRA1ZsAPioN0WyDEiH+WTmyD3UagtvOOCoWar67GLd/c3UXuSScUcZ3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrSfJNG2U1PgKc1QFkzJNA94GyeUwHwYDVR0j
BBgwFoAUNpDJL0Zm1yQMFLHxFdMDLGzAztAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMS8zNjkwQzkyRjQ2NjZENzI0MEMxNEIxRjExNUQzMDMyQzZDQzBDRUQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2OTBDOTJGNDY2NkQ3MjQw
QzE0QjFGMTE1RDMwMzJDNkNDMENFRDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzEv
MzEzODM5MmUzMTMyMzQyZTMxMzIzODJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAe9fIAwDQYJKoZIhvcNAQELBQADggEBACYGqTUQ
CxOyO8+6aZ3aOhdem+atYot2i92tAxnxHUs9gjHE/0v8mwxNZ3b+NU+10L0vZUE/
osfLy0eOotdb9f2rj9wK1p0lWJcFi+GIbyPlYdRWPa9SeUIsFtbSrJOay9y5zrss
Nt88KQJ+lThAdDbLrQ8LKscjt+5CskklMSWkE0Df9w805xh6C6eAmfwgNVLxrAmi
N7I4lBdW/cZbY2qmQNHLHgqr5/W+UcV5d0cGlaZdLODto3FMKoPRU6t0mEVVVlUK
52idKlPxMHLeNBJFv6RV16JURzu4MjQOGf7QVrcjC/d/P2UoHUIk2D15dc8nZBHm
ei2Xd6ZIwEoxHBc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:34 2025 by rpki-client