Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31382e302f32332d3233203d3e203238323230.roa
File:                     3138392e34352e31382e302f32332d3233203d3e203238323230.roa (raw, json)
Hash identifier:          38lGNJaobV6FMriURcpn9pUIoYTmOGDKCa2ynHb0lb0=
Subject key identifier:   BF:BA:67:31:2F:F8:5A:13:12:BA:19:01:15:10:19:AF:5B:8C:A2:1B
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       30B4AE7D586E5A76C681A654A8547C9B2F65498B
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31382e302f32332d3233203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:19 +0000
ROA not before:           Mon 08 Apr 2024 20:00:19 +0000
ROA not after:            Mon 07 Apr 2025 20:05:19 +0000
asID:                     28220
IP address blocks:        189.45.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b4:ae:7d:58:6e:5a:76:c6:81:a6:54:a8:54:7c:9b:2f:65:49:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:19 2024 GMT
            Not After : Apr  7 20:05:19 2025 GMT
        Subject: CN=BFBA67312FF85A1312BA1901151019AF5B8CA21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:29:eb:d9:e7:fb:55:61:21:9f:4c:b8:5a:
                    75:01:a0:d9:78:4e:24:56:99:9a:85:5a:70:83:50:
                    b6:c7:17:39:ea:f1:3c:ff:2e:84:44:d2:d3:7e:fb:
                    61:02:80:6f:80:fb:cc:89:dc:26:68:a1:bb:8e:29:
                    21:38:a9:22:d4:2f:02:ee:36:4a:d0:fc:3c:91:04:
                    73:27:98:bf:1f:62:21:8e:ba:1c:68:f0:d6:80:39:
                    44:56:25:1b:49:dd:9b:df:13:f6:82:04:9b:77:c4:
                    7a:15:5b:54:83:5b:da:2e:88:22:56:36:80:15:7b:
                    71:3c:8e:9a:7e:e0:0f:86:ba:1f:a1:9c:11:52:3c:
                    ab:25:83:df:4d:78:db:30:f6:53:13:e6:65:33:dc:
                    79:06:92:2d:95:12:cf:bf:8e:57:4f:6f:21:60:c3:
                    9a:44:75:1d:17:53:1b:1d:b2:8b:51:97:99:3a:be:
                    2f:f6:c2:35:4c:4d:e8:82:f6:41:07:5f:ff:81:dd:
                    1d:f1:e8:9b:3c:ea:34:f0:44:a6:dc:10:cd:ea:44:
                    5e:a3:9e:bd:d1:e4:69:86:12:2c:fe:f4:34:06:b8:
                    c3:46:e1:7f:eb:20:81:79:a8:59:46:e6:de:11:ff:
                    e2:ba:60:c6:61:8a:05:3e:9b:08:35:40:97:c0:29:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BA:67:31:2F:F8:5A:13:12:BA:19:01:15:10:19:AF:5B:8C:A2:1B
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138392e34352e31382e302f32332d3233203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:53:fa:b8:b5:ea:34:fd:f6:1d:a8:80:25:23:93:61:04:
         9d:4b:08:e8:6a:13:3d:48:4e:ca:25:16:e4:1a:14:e0:b3:da:
         48:31:97:01:a8:9d:54:45:4e:af:2f:13:f5:c4:7b:cb:84:95:
         26:74:76:48:88:c6:01:43:14:b3:39:7a:83:d0:05:bd:76:68:
         cc:12:60:8a:4c:8e:41:75:82:13:f1:b5:9f:30:b9:21:2c:c8:
         23:68:37:e2:49:78:04:d3:37:1f:d3:a0:5e:b2:ee:49:0a:31:
         8f:2f:72:9e:5b:82:3c:f7:11:16:86:b6:c3:24:e6:ea:c5:c8:
         d5:8c:70:43:a1:99:eb:b1:22:52:1d:04:03:af:65:4f:21:df:
         31:f0:6f:33:09:5f:be:ff:64:32:87:b5:67:1a:04:08:70:fd:
         a8:d6:b4:12:a7:84:89:c2:a4:5f:c7:d6:7d:e2:43:cd:61:28:
         80:72:d3:5a:73:01:60:70:f1:29:68:9f:02:c4:c7:fc:7a:e6:
         03:eb:0a:22:87:74:87:5c:eb:72:c6:5e:cb:a9:ff:4e:8b:e2:
         cb:81:02:36:d8:9f:d2:01:c1:78:51:a8:73:a3:97:bf:d9:f0:
         18:b8:d4:4a:e4:1a:0f:46:4e:23:2d:3b:19:9f:30:df:de:61:
         68:41:68:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org