Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa
File:                     3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          klUOJ7FoFBHS5ojulaE3IQryLv4CNE9RwrYJkKrGTzg=
Subject key identifier:   7A:2F:A9:04:A4:E3:CC:3B:A4:25:F6:64:07:9C:CD:9C:48:75:33:F5
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       53CB1DD0CEF5013E87F9A3CF09431A5E7B0B22D3
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:22 +0000
ROA not before:           Mon 08 Apr 2024 20:00:22 +0000
ROA not after:            Mon 07 Apr 2025 20:05:22 +0000
asID:                     28220
IP address blocks:        189.124.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:cb:1d:d0:ce:f5:01:3e:87:f9:a3:cf:09:43:1a:5e:7b:0b:22:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:22 2024 GMT
            Not After : Apr  7 20:05:22 2025 GMT
        Subject: CN=7A2FA904A4E3CC3BA425F664079CCD9C487533F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:87:27:19:ba:0e:b9:56:ef:41:ae:e0:7f:
                    0a:13:96:c1:04:93:24:18:9b:fb:4e:2a:56:3f:00:
                    5b:79:06:d8:5e:53:74:2e:6c:6e:a6:9c:a6:cb:b0:
                    62:41:27:54:40:ff:cf:df:1f:75:c5:25:09:eb:56:
                    cb:97:4b:6f:e8:15:45:aa:ab:06:08:fd:c3:99:36:
                    84:88:05:e3:05:ab:8b:60:5f:4e:7d:c6:76:61:8e:
                    1e:1f:e4:16:48:1a:29:32:07:0c:b2:86:ba:b0:28:
                    c7:18:29:ae:00:31:95:85:4c:d3:eb:08:e5:9a:06:
                    96:e2:9a:76:63:cd:e3:96:64:cc:2d:2b:43:e4:4e:
                    c1:df:6f:48:d5:22:8a:53:9e:04:29:1a:6b:87:06:
                    b9:fd:0d:3a:90:ac:6a:f7:0a:8c:2b:dd:18:21:cd:
                    d4:74:ba:be:31:11:f4:a2:16:90:54:02:3b:c0:12:
                    ed:23:04:c8:6e:5d:b3:d0:97:03:64:1c:b9:c9:b2:
                    70:a5:8b:98:41:90:31:94:2c:c2:bb:b0:f7:44:f6:
                    5e:f6:44:cf:43:a7:53:4d:4b:40:d7:0d:8f:b2:15:
                    78:7f:3a:76:92:bd:88:17:27:1c:34:2d:2b:54:29:
                    47:42:94:c0:1e:55:2e:9c:66:af:c4:a6:8f:4a:7c:
                    ab:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2F:A9:04:A4:E3:CC:3B:A4:25:F6:64:07:9C:CD:9C:48:75:33:F5
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:37:94:d9:3b:14:23:8a:55:84:0b:d8:c1:ca:49:76:b1:
         f8:c9:c1:ad:65:5c:38:45:4a:1f:63:8c:f3:bc:5f:32:54:43:
         c6:8f:2f:3e:7d:be:83:17:71:40:0b:38:41:0d:61:ac:18:c6:
         c0:03:18:9e:fe:03:e5:46:f5:c4:89:31:b6:ca:e6:b7:a2:5e:
         8e:ce:ca:00:0d:85:6d:ce:1d:2c:51:dc:c3:3a:fe:70:75:5e:
         68:4c:36:21:6b:67:83:63:d8:7a:2d:9b:e1:3d:89:ad:eb:12:
         7a:4d:e4:54:70:f0:b4:6a:6b:d1:4c:f4:b1:03:c4:79:4d:6b:
         9b:8d:89:d3:ee:af:d8:2c:99:44:51:b1:11:2d:87:ea:28:d7:
         21:53:a0:8b:df:b0:04:d8:f7:16:9e:cf:07:32:62:32:a5:e2:
         73:d8:38:8b:0b:7c:d7:98:82:7f:d5:0a:57:ca:1f:06:58:bd:
         6b:e6:4a:6e:f3:6a:55:40:38:03:c7:8f:a0:52:8d:e1:65:e3:
         4f:c1:2e:6d:8e:2c:bc:c1:f4:43:99:8d:fa:b4:e1:bd:33:cf:
         69:8b:98:b7:e0:85:c3:1b:2d:4e:ff:33:fd:aa:bd:75:db:ef:
         c8:fe:8e:dd:2e:03:f5:3f:d5:0c:f7:d6:49:27:3c:85:4d:c1:
         e3:7d:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org