Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa
File:                     3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          EmcQuqXkTAArhUtEM1+dbSuBd6yOORMUSi4c/Qb4o30=
Subject key identifier:   FA:FD:99:7E:50:6E:CD:1E:D9:95:3B:FC:8A:C0:FD:E3:08:EE:9D:5A
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       52663A14543DE29363180F700715F01E31A42E99
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:12 +0000
ROA not before:           Mon 08 Apr 2024 20:00:12 +0000
ROA not after:            Mon 07 Apr 2025 20:05:12 +0000
asID:                     28220
IP address blocks:        189.124.240.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:66:3a:14:54:3d:e2:93:63:18:0f:70:07:15:f0:1e:31:a4:2e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:12 2024 GMT
            Not After : Apr  7 20:05:12 2025 GMT
        Subject: CN=FAFD997E506ECD1ED9953BFC8AC0FDE308EE9D5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:b5:e6:ef:22:85:8c:57:bc:9d:62:15:61:
                    4b:a8:4c:88:c1:18:22:99:70:ce:6f:30:cc:54:ee:
                    57:f1:9f:a4:ae:7c:24:c3:e9:f2:b5:4e:b2:f4:26:
                    f3:f9:4b:22:29:01:e2:b8:93:1a:9c:62:9a:8a:8a:
                    26:8a:73:20:ad:4a:9b:7e:f0:3f:ad:72:cb:21:96:
                    21:65:1f:b0:38:cf:7a:d8:52:63:f3:1a:17:48:9a:
                    78:7a:aa:78:33:f7:12:23:ec:18:79:be:f0:6e:bd:
                    62:2f:27:63:16:fb:ef:2f:ed:a2:fb:51:dc:7d:7c:
                    b8:f4:cc:03:c5:19:81:f4:3f:25:3b:2d:c1:df:7d:
                    d9:40:f4:61:bf:00:c6:39:85:19:1c:05:c8:7d:a7:
                    8b:58:d8:08:c0:89:2c:ab:ec:e6:32:46:55:ba:bc:
                    d5:bf:c4:99:03:bc:c9:88:ec:07:bc:eb:54:ef:04:
                    a3:6c:05:e0:42:5c:5f:2f:31:71:49:be:9d:56:f5:
                    24:1e:0a:e5:bb:b9:c1:8e:ac:bc:05:1d:7e:21:4d:
                    b6:9d:cb:cb:ba:e2:c9:a6:db:48:8a:9f:af:6d:2a:
                    ce:12:e2:c6:45:10:9f:fa:b5:e6:2c:78:44:9b:10:
                    cd:64:a9:1f:02:32:fb:7c:51:12:35:ff:6e:97:41:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FD:99:7E:50:6E:CD:1E:D9:95:3B:FC:8A:C0:FD:E3:08:EE:9D:5A
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e3132342e3234302e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:a9:cf:04:22:f2:ad:73:fa:95:5c:48:ff:a2:ee:d4:3e:
         ba:bf:57:94:87:50:7e:fd:f1:ae:15:a3:91:59:d9:24:45:7c:
         c3:ee:65:c8:70:f5:59:42:46:8d:9a:4d:f8:d1:8b:65:2d:fe:
         c8:d9:6c:e9:32:de:05:43:c6:65:c1:11:47:ed:40:bc:2a:07:
         3f:76:96:48:0e:a4:09:d2:ec:0b:04:d9:03:a0:0d:b6:d8:19:
         52:89:28:09:2a:88:8e:af:87:8f:d4:00:e5:99:c7:71:90:e1:
         53:7d:5f:9d:df:e4:d5:06:a3:eb:03:ce:2f:a6:d7:3d:df:6f:
         29:ed:8b:36:3a:1c:04:e1:f6:e9:c1:18:d8:8b:39:94:00:82:
         8a:72:6f:5e:7f:8e:dc:5b:0c:b8:4a:4e:27:87:68:9c:8d:82:
         f2:aa:3d:84:ed:f1:5a:28:8d:5a:e8:f1:8e:a1:6b:63:34:27:
         26:02:81:4a:67:3b:bc:fb:cf:71:b7:5e:b5:11:79:84:4b:65:
         e1:80:50:1a:40:9a:61:e3:d5:b7:1d:16:6e:de:1b:ad:3a:1b:
         49:a9:2f:ab:1c:02:36:33:9c:90:d3:ec:26:d4:b1:2c:5a:fb:
         88:a2:bc:ee:1a:d6:04:fc:75:d8:6d:c5:85:86:05:b0:84:f7:
         52:a1:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:38:02 2025 by rpki-client