Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa
File:                     3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          c633qDUGY5ny53l6KR64QUtEYUof0gPH1+DK3QUUaIs=
Subject key identifier:   23:B3:52:B6:72:83:0D:4A:1F:3E:0A:90:DD:3E:4A:37:B3:55:A4:DA
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       7623E5FE361B069346E41F11D06AF98DF65BF5B1
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:22 +0000
ROA not before:           Tue 12 Mar 2024 19:46:22 +0000
ROA not after:            Tue 11 Mar 2025 19:51:22 +0000
asID:                     28220
IP address blocks:        168.227.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:23:e5:fe:36:1b:06:93:46:e4:1f:11:d0:6a:f9:8d:f6:5b:f5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:22 2024 GMT
            Not After : Mar 11 19:51:22 2025 GMT
        Subject: CN=23B352B672830D4A1F3E0A90DD3E4A37B355A4DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3a:00:a0:6f:45:e4:63:cd:22:08:51:28:a3:
                    dd:68:ea:3b:1e:c2:ff:54:dc:25:da:a6:75:4e:9e:
                    7b:cb:36:b2:eb:a6:0a:1e:95:ed:89:a2:e7:f9:57:
                    a5:62:4e:58:f0:20:ef:88:cb:31:8a:3c:8d:f7:bd:
                    ee:7e:66:ff:08:87:8c:df:4b:d2:7f:2b:eb:a1:86:
                    49:0f:bd:bf:ff:a0:2e:e4:e6:1b:a3:94:c3:14:6a:
                    eb:d5:8f:17:4c:95:67:80:e9:d7:78:b5:a0:da:dc:
                    f4:4c:2f:2e:b0:a6:5f:e3:26:35:2c:ec:a2:99:60:
                    2b:23:be:27:78:86:da:ec:b1:f7:57:93:d7:68:e8:
                    49:7f:12:61:0d:3c:fc:bc:2b:b8:eb:c4:8e:74:c4:
                    c0:36:1b:58:32:89:b4:e7:8a:af:83:86:9a:cc:25:
                    c2:6d:2f:81:4e:3a:33:43:db:15:40:a5:c9:df:84:
                    1f:a1:be:08:47:ee:49:d8:40:d5:12:dd:61:b9:2d:
                    d1:00:47:77:df:5d:f2:f7:f6:23:a1:2d:0e:ef:e4:
                    bd:ba:39:40:95:e2:22:fb:d7:fc:4f:e6:ed:1b:07:
                    5e:87:e2:d6:f3:df:0b:9f:01:ba:a6:f8:f9:c0:02:
                    f3:d2:29:a9:24:96:32:4a:b4:d0:ca:05:ab:0e:d2:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B3:52:B6:72:83:0D:4A:1F:3E:0A:90:DD:3E:4A:37:B3:55:A4:DA
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3136382e3232372e3130382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:05:bc:0e:49:0c:8a:89:c4:fa:2f:5e:03:8b:a1:cf:d6:55:
         96:b1:4d:db:dd:9a:92:37:0d:25:6b:ff:d0:c4:43:ef:6f:6f:
         b1:08:bf:1e:67:9c:bd:66:13:0f:05:dc:b9:eb:2a:1d:1a:94:
         85:4a:c5:7d:89:b0:db:b2:27:1b:ac:5e:a7:15:4c:6e:64:2d:
         ca:c3:1e:3c:04:b9:4c:6e:7a:c1:21:83:ef:26:b5:6d:e7:83:
         03:ca:85:d2:64:f5:aa:3a:51:0b:ac:0a:d8:50:df:57:15:59:
         c9:ed:df:85:06:42:cb:89:7b:e1:45:25:d9:a3:26:2e:70:50:
         a8:ea:af:17:05:51:66:94:b4:91:0c:57:ad:58:a7:50:3d:f6:
         b3:c9:32:f0:38:7d:56:a3:d5:64:7a:69:f3:a3:2c:70:bc:de:
         43:a1:67:97:c6:62:a5:af:7f:73:db:0b:7e:6c:4a:48:4b:a5:
         6c:e9:e9:79:5c:c2:f3:47:db:4e:6d:8d:f4:44:dd:03:8c:5b:
         4a:33:34:57:a0:e1:cb:69:61:42:6c:6a:e5:e4:e1:c6:6a:f5:
         66:59:ac:49:94:fa:db:ed:8d:2a:fe:a5:f8:83:52:4c:85:28:
         5f:31:b0:45:c5:91:4c:e0:62:39:5d:17:35:66:29:6a:81:ad:
         ed:8f:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org