Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31362e302f32312d3231203d3e203238323230.roa
File:                     3138392e34352e31362e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          WfhckwfKjxIJHALeY5KBaoFI/1NHK5UVTF0M4zLUej4=
Subject key identifier:   FD:CF:4C:DC:D2:62:DD:7D:85:25:B9:D7:1C:DF:B9:BD:45:37:AA:90
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       3064FFF390F51C2F8F6A5729715AA7269840C9E8
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31362e302f32312d3231203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:15 +0000
ROA not before:           Mon 08 Apr 2024 20:00:15 +0000
ROA not after:            Mon 07 Apr 2025 20:05:15 +0000
asID:                     28220
IP address blocks:        189.45.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:64:ff:f3:90:f5:1c:2f:8f:6a:57:29:71:5a:a7:26:98:40:c9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:15 2024 GMT
            Not After : Apr  7 20:05:15 2025 GMT
        Subject: CN=FDCF4CDCD262DD7D8525B9D71CDFB9BD4537AA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:35:42:31:5d:c7:9a:5b:8e:99:75:91:53:
                    f7:2c:a2:2c:f7:cd:6a:8e:bc:e0:4a:08:48:8e:c2:
                    86:aa:17:6c:ab:dd:33:39:d8:9c:57:b2:1a:f8:fc:
                    7e:f1:3c:aa:72:a3:f6:ea:35:2c:af:db:7d:25:e5:
                    58:7d:f7:11:cc:a4:62:20:c9:36:c3:07:94:33:98:
                    c4:97:6a:7e:dc:35:29:d7:8e:a3:fc:a0:80:1f:f1:
                    84:da:37:cf:70:dd:aa:30:c2:5f:11:20:3f:3d:1f:
                    aa:99:3b:6b:86:84:1f:7b:70:99:59:f4:4b:96:18:
                    16:9b:af:a0:59:39:4b:92:52:79:a8:cc:b4:3b:cf:
                    b3:2b:f1:7f:ca:0a:ed:46:01:5e:9f:82:28:78:4e:
                    cf:4a:b5:03:b1:fd:58:32:64:62:6d:e9:96:4b:c7:
                    08:c1:05:5d:c4:77:5f:3d:7b:ed:7b:50:b2:9e:26:
                    83:77:9a:19:90:88:0d:08:de:5a:9e:50:d4:d9:d7:
                    2b:d9:2f:7b:cf:c1:2b:6e:62:88:ff:40:d3:0e:f7:
                    97:3b:8b:9b:fc:53:54:f9:c5:b8:c0:01:32:cb:8b:
                    15:52:bd:4a:0e:da:1f:5e:91:a8:31:ef:f0:78:e6:
                    b5:d6:67:3f:70:27:46:97:77:1b:b4:86:7e:c3:bd:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CF:4C:DC:D2:62:DD:7D:85:25:B9:D7:1C:DF:B9:BD:45:37:AA:90
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31362e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:48:0c:bd:79:25:55:fb:5a:3b:57:ae:a6:1b:6f:a3:24:
         44:a2:38:23:44:a6:b6:ec:d7:49:c6:fc:0f:bf:79:94:7f:09:
         ad:9a:19:fe:28:68:be:98:5d:09:da:f7:fb:bb:43:8e:0d:a8:
         c8:db:91:23:c7:e0:ef:57:8d:0e:e4:e2:a1:66:f2:62:18:1d:
         d1:e0:bd:a6:6f:dc:8e:bb:1c:9c:2c:31:39:53:be:24:3e:52:
         c1:89:4e:dd:76:30:45:b0:2c:9e:03:fd:44:34:83:98:64:2d:
         be:e0:8e:0e:ca:9c:eb:e5:48:b6:74:28:b5:83:cb:f8:fa:86:
         37:50:ff:85:c3:14:65:38:bd:fa:1e:97:f7:18:1a:00:fc:36:
         1f:28:fa:f2:4a:a7:8b:d1:59:c0:de:a2:fc:b4:10:40:51:37:
         0d:36:b8:81:85:e5:4c:f2:c6:cb:77:a3:b2:20:04:6d:de:49:
         a9:42:a9:9c:3f:8f:bd:47:63:a4:c5:02:44:2f:54:62:bb:33:
         55:71:b4:f0:67:5d:13:06:bc:77:c8:8e:32:02:45:e5:f8:7c:
         46:67:52:ae:02:82:8d:d0:a1:d1:7b:fa:89:09:22:28:1b:55:
         74:34:6f:c4:8f:ca:3d:7a:80:a8:4f:c4:ed:aa:af:95:df:ab:
         5e:c9:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org