Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa
File:                     3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          Lmhwi+JbvnsWHeXGJfrnJb2CTpn3QhwRLCKBpxb2nVg=
Subject key identifier:   9A:18:F7:FA:6D:82:80:F1:B4:7A:D9:EF:49:98:4D:B8:57:99:B1:F7
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       52DD6145F19F5DB068F371EF67E32FEFE7C5B172
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:15 +0000
ROA not before:           Mon 08 Apr 2024 20:00:15 +0000
ROA not after:            Mon 07 Apr 2025 20:05:15 +0000
asID:                     28220
IP address blocks:        189.124.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:dd:61:45:f1:9f:5d:b0:68:f3:71:ef:67:e3:2f:ef:e7:c5:b1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:15 2024 GMT
            Not After : Apr  7 20:05:15 2025 GMT
        Subject: CN=9A18F7FA6D8280F1B47AD9EF49984DB85799B1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:29:cf:a4:fd:13:11:95:31:9e:8f:96:64:
                    97:a4:f4:25:a0:71:6c:1a:41:28:1c:42:c1:82:85:
                    fc:4b:5a:36:f0:2c:13:3c:3e:8b:21:ea:34:73:28:
                    7c:f8:82:84:08:61:e8:3e:fa:61:29:31:21:e0:75:
                    21:24:cf:17:be:df:07:d4:33:0e:4f:14:b5:42:98:
                    de:4a:77:f7:bb:e5:c9:74:07:00:30:ca:7e:98:dc:
                    f5:40:ab:1b:80:59:9a:50:ab:91:3b:72:3c:63:0d:
                    92:a0:29:99:22:e1:74:87:82:f2:51:4f:00:d2:04:
                    a7:34:9b:0d:81:8c:7a:e3:54:3c:47:44:ef:9d:70:
                    98:12:8a:2f:b2:2a:a2:f2:66:1a:42:e8:b5:1e:81:
                    05:a7:3d:16:3f:42:30:10:ec:46:20:fc:b1:cc:e2:
                    01:14:66:77:0c:f0:70:8a:f4:93:eb:be:43:4e:e5:
                    85:b5:92:30:68:aa:3e:dd:55:87:ef:f5:86:37:21:
                    54:62:0a:b5:47:29:25:b1:8e:4d:44:13:a2:f8:16:
                    02:8c:36:04:a7:bb:d7:b5:e7:df:02:da:e0:3b:e5:
                    0e:1f:96:dc:b3:58:03:e1:4e:74:65:1a:fe:f6:7a:
                    a5:c3:77:32:a9:2d:4c:82:16:6d:33:a3:27:0a:03:
                    65:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:F7:FA:6D:82:80:F1:B4:7A:D9:EF:49:98:4D:B8:57:99:B1:F7
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:d9:df:af:ce:b9:9b:5c:46:37:51:21:1c:2d:73:a5:3d:1a:
         57:5a:c1:3a:90:ba:54:fa:85:16:28:0a:fa:1e:da:db:3c:78:
         b8:bd:ca:e2:e9:98:01:2b:de:a7:c0:8a:a9:c8:78:b4:8f:e4:
         f2:d7:b6:72:f9:c1:5c:8a:cf:40:27:3f:97:63:49:1a:3b:6d:
         86:0d:94:dd:86:6b:5d:3e:07:11:03:4a:f9:31:bd:43:67:19:
         ea:7d:9c:12:9d:c3:2a:c9:95:5d:02:cb:1d:45:b0:6f:18:ca:
         72:c3:5d:40:5b:f9:66:2b:41:0d:ba:cf:97:e3:b0:40:0e:c8:
         22:3d:61:6f:49:f0:2e:60:f2:cd:06:03:a7:d0:cc:b0:f8:18:
         60:24:6c:a4:e1:c9:f3:30:2a:14:cd:04:a5:50:ca:64:61:52:
         43:83:42:09:df:82:10:7d:50:ac:8c:c6:fa:71:c9:da:14:1d:
         80:c6:23:66:68:21:a3:0b:a5:ca:db:3b:15:44:ac:6b:41:06:
         0a:1b:34:06:47:6c:4b:72:c0:9d:a9:47:83:51:99:05:96:ac:
         09:d6:16:c9:f4:82:27:7a:5e:2c:16:a6:3b:2e:88:3a:44:b4:
         53:66:b8:d7:84:c7:ef:44:99:66:41:ca:2b:92:fe:97:07:fd:
         41:ae:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org