Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e3139302e3132382e302f31372d3137203d3e203238323230.roa
File:                     3137392e3139302e3132382e302f31372d3137203d3e203238323230.roa (raw, json)
Hash identifier:          tWiW1qqMoSd0KLEDWqevfu67uXF1ooavEUq6ut95CDc=
Subject key identifier:   D3:E3:3C:49:6C:CD:DF:6C:1A:BB:2F:D7:C0:3F:80:6A:C2:4F:C9:9C
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       3100B31D0AD963B047BF5C6BF2EADE35767BCFFF
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e3139302e3132382e302f31372d3137203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:11 +0000
ROA not before:           Tue 12 Mar 2024 19:46:11 +0000
ROA not after:            Tue 11 Mar 2025 19:51:11 +0000
asID:                     28220
IP address blocks:        179.190.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:b3:1d:0a:d9:63:b0:47:bf:5c:6b:f2:ea:de:35:76:7b:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:11 2024 GMT
            Not After : Mar 11 19:51:11 2025 GMT
        Subject: CN=D3E33C496CCDDF6C1ABB2FD7C03F806AC24FC99C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:91:81:9c:9e:00:9c:25:00:df:44:e6:34:
                    d4:34:86:c5:1c:76:c2:0d:cf:29:d1:70:92:3d:f8:
                    ac:8c:80:bb:78:04:34:8d:a1:e8:88:6d:84:2e:d5:
                    de:b2:eb:e5:29:f2:7f:49:3f:f4:c4:4d:20:82:8d:
                    ef:86:8d:72:45:e3:68:94:40:ea:62:70:ca:d0:a6:
                    52:85:77:27:0b:1e:07:eb:28:a9:7e:1b:ec:a9:6f:
                    71:cd:13:3e:a0:c7:2a:7d:25:81:bb:9c:f3:94:56:
                    cb:27:81:51:f7:bb:72:15:0a:48:2e:4c:00:04:eb:
                    7a:40:01:f1:69:e2:74:06:b6:08:4d:66:7a:1b:19:
                    81:e7:db:0f:4d:f6:50:3d:8f:60:fb:a3:c4:fd:9a:
                    ee:3c:da:3a:7e:d4:66:36:64:71:cd:59:6e:0e:08:
                    9b:eb:7a:a4:78:a7:2f:63:0e:d3:d7:8e:63:47:0f:
                    11:b1:39:7c:14:38:6d:5f:b3:41:aa:06:fd:a4:d9:
                    78:34:79:fc:f0:89:96:ea:27:c1:ac:5f:28:e1:12:
                    e7:84:18:2e:6e:93:a6:42:fe:12:f6:3b:d8:75:bc:
                    25:dc:6b:32:77:d7:ee:e7:7a:c8:c7:9c:64:1c:79:
                    d9:a4:16:04:46:5d:e8:da:39:ca:4f:61:06:a7:c1:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:3C:49:6C:CD:DF:6C:1A:BB:2F:D7:C0:3F:80:6A:C2:4F:C9:9C
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e3139302e3132382e302f31372d3137203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:17:79:c6:5f:c8:cb:24:67:28:c2:a6:0b:4f:48:0a:88:
         0c:49:52:64:4f:a3:28:58:6f:f3:13:d1:4a:b3:86:54:62:ef:
         f7:63:73:9e:b3:32:dd:84:0a:81:82:dd:63:a4:eb:9a:37:68:
         18:87:d8:01:71:1f:9f:b6:3c:db:5f:95:e5:f5:55:cd:45:4e:
         21:b8:18:22:d4:27:bd:a8:30:17:a5:79:4e:43:d8:9a:91:b0:
         c0:f3:b7:f7:58:59:55:c1:17:df:01:99:38:cd:92:0d:b0:fc:
         a7:6f:70:d8:30:bf:39:92:e1:70:78:b6:f1:8f:30:71:26:af:
         fe:5c:71:20:62:d8:94:74:b9:3a:62:7a:f5:1f:98:10:a9:9f:
         c2:d6:f5:b0:d5:59:32:03:db:cc:f6:b2:3c:8e:00:32:68:43:
         d1:e3:91:fd:9d:b6:6d:e1:f7:64:f0:3a:91:e1:4d:f6:1b:81:
         68:c4:bc:d7:83:a4:3b:0a:05:94:c5:e2:ca:0a:06:75:d7:9f:
         9a:7f:a4:95:1d:9e:b2:c7:fc:e3:11:05:eb:cf:19:45:59:e9:
         4b:d8:34:0b:0e:8b:e4:3e:4f:dc:ea:46:75:bf:e0:3b:12:17:
         28:06:e7:b8:e1:4a:51:e2:5b:4c:3d:94:9c:37:11:bd:e4:43:
         e6:0b:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org