Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa
File:                     3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          Tpn0wIOiGOgEQp6p4Os/wakFxql2U51MrjKCUj2zt5Q=
Subject key identifier:   F0:DC:58:99:8D:91:7D:D6:5A:BB:CF:CD:26:12:CF:08:4B:5C:CF:CB
Certificate issuer:       /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial:       2519173AE05B98D07AC4BFCA8446E50212975751
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:05:14 +0000
ROA not before:           Mon 08 Apr 2024 20:00:14 +0000
ROA not after:            Mon 07 Apr 2025 20:05:14 +0000
asID:                     28220
IP address blocks:        201.148.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:19:17:3a:e0:5b:98:d0:7a:c4:bf:ca:84:46:e5:02:12:97:57:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
        Validity
            Not Before: Apr  8 20:00:14 2024 GMT
            Not After : Apr  7 20:05:14 2025 GMT
        Subject: CN=F0DC58998D917DD65ABBCFCD2612CF084B5CCFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:e9:cc:d1:0a:dd:80:eb:34:fc:b4:54:64:
                    6d:17:72:d4:64:e4:57:43:bf:58:d3:43:25:40:9b:
                    4d:53:7e:b9:64:26:19:24:d8:4d:77:00:8d:4f:78:
                    b0:2e:24:8e:b7:93:13:16:72:75:43:64:93:b1:44:
                    38:ac:0e:d4:e2:ea:0a:aa:ac:9b:14:c4:eb:42:1d:
                    71:47:7a:7b:e1:27:ee:be:e4:b1:d5:be:b9:34:af:
                    89:a7:f6:4b:79:bc:0f:3b:e9:13:41:98:c9:ef:ca:
                    67:ee:54:a4:af:e3:49:06:e6:3e:cc:5f:54:bd:47:
                    c4:20:5a:2c:b5:0c:47:bb:a0:97:0e:5c:5a:f1:0d:
                    2b:c1:57:8c:29:18:24:fc:f9:47:8f:7f:9d:35:27:
                    62:98:b9:21:c8:4b:5a:b2:e5:17:2b:b8:b5:6a:16:
                    a8:1a:18:47:11:59:4e:f7:e6:e8:83:59:54:48:c8:
                    eb:df:1e:e6:8e:2a:78:9e:75:a6:5e:4a:7c:9d:10:
                    6e:61:23:ac:b5:7c:75:9e:4f:6b:c0:41:29:a5:05:
                    2b:b5:10:23:7e:6b:9c:b6:e6:95:e4:dd:42:83:79:
                    b0:17:c9:17:de:a6:ff:93:4a:ee:e6:75:56:80:61:
                    e8:8a:6f:ab:f7:ed:f4:24:5a:44:98:13:7f:da:7c:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:58:99:8D:91:7D:D6:5A:BB:CF:CD:26:12:CF:08:4B:5C:CF:CB
            X509v3 Authority Key Identifier:
                keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e1:17:de:0c:3a:72:d6:1e:13:28:89:06:d4:fe:cb:aa:c1:
         be:46:72:a9:5f:2a:43:15:9d:05:3e:77:a8:f7:66:7a:a2:8d:
         20:90:91:6a:d7:72:30:33:f8:8d:c8:31:8f:fa:cd:6a:48:ca:
         dd:8c:f0:5d:e1:2f:0c:2b:de:a9:2d:4b:19:62:77:db:94:1c:
         20:3c:d1:ea:db:58:de:83:2f:6e:72:4b:e1:78:c9:26:10:79:
         77:2c:a3:90:24:f4:58:5e:ae:35:91:38:2f:33:fe:9a:11:9b:
         9c:fd:c1:4f:59:3d:f7:d5:37:27:f4:36:fe:90:1b:87:02:44:
         28:5e:0c:bf:a2:2a:c9:5f:ac:88:ec:7f:06:9e:e8:05:94:fd:
         6a:e7:05:24:b5:ba:22:b3:01:e4:a7:1c:6b:50:f1:ff:2d:fb:
         cb:f2:6a:7e:4b:32:2a:dd:84:69:02:54:3b:7c:a7:8c:48:f5:
         4c:29:41:f8:f8:d8:68:92:12:84:a1:4e:0c:f9:5d:7b:be:0e:
         aa:74:a9:9f:bc:60:ed:52:ca:d0:47:9d:99:43:2a:76:79:c8:
         47:a6:93:8d:59:bd:f3:83:9f:72:23:fc:4c:60:25:95:98:d5:
         87:ab:6d:a8:f2:a0:a9:fd:d5:72:d8:87:6b:36:44:8e:1a:31:
         48:93:c3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org