Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa
File:                     3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          eQA+Bexuf+dlda5Cz0nZ3DcfKJW6pUkBsd8DB05+vwM=
Subject key identifier:   8D:C8:56:40:52:66:9A:C4:DB:12:5A:0F:20:4E:C4:BA:21:C0:29:FF
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       68316931019426854BAE0A1B4916EBBCE89D190C
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:17 +0000
ROA not before:           Tue 12 Mar 2024 19:46:17 +0000
ROA not after:            Tue 11 Mar 2025 19:51:17 +0000
asID:                     28220
IP address blocks:        179.190.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:31:69:31:01:94:26:85:4b:ae:0a:1b:49:16:eb:bc:e8:9d:19:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:17 2024 GMT
            Not After : Mar 11 19:51:17 2025 GMT
        Subject: CN=8DC8564052669AC4DB125A0F204EC4BA21C029FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:cd:17:f9:06:44:53:7b:00:01:41:a0:15:
                    fa:d9:ee:2f:d2:ec:1a:b3:b6:4b:00:58:12:a5:8d:
                    e0:93:5d:e9:d2:e2:4c:ae:e1:e0:32:7b:ad:1e:db:
                    6d:79:29:0d:ba:be:ee:14:24:3e:f5:82:8c:e7:4e:
                    03:fb:33:8c:ae:8c:2f:9b:cd:c2:7f:7b:03:4a:85:
                    33:e1:06:fb:24:5c:3d:8f:32:bc:c1:37:0c:de:e1:
                    09:bf:d4:95:d0:89:da:a3:82:62:59:f0:5d:6c:04:
                    05:22:1f:c1:da:db:c2:a7:bf:48:95:9f:33:ee:bc:
                    e6:24:60:77:b4:64:74:3e:e1:65:19:e6:c9:b5:59:
                    50:a8:cf:4c:c0:a7:f1:e6:9e:d6:0b:9a:3e:13:40:
                    ac:39:78:61:c5:c6:77:26:9b:d1:9e:a7:67:ff:a1:
                    05:bf:8e:b8:6f:a1:0f:68:1a:21:11:64:a6:33:aa:
                    c1:60:8b:77:16:80:a5:81:cb:3e:71:9a:d7:76:1e:
                    8d:b7:f5:6d:4a:a8:1d:d9:0b:2b:8a:b6:08:9e:e0:
                    88:1a:58:d8:34:1f:34:a5:7f:28:7e:93:0f:b3:16:
                    92:c4:41:73:bd:40:65:82:24:2b:ee:75:cd:c9:f7:
                    e0:a3:0b:bf:fc:88:f7:3f:19:39:b1:c5:69:f8:00:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C8:56:40:52:66:9A:C4:DB:12:5A:0F:20:4E:C4:BA:21:C0:29:FF
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e3139302e3230382e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.190.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:e3:dd:96:2b:01:8b:a1:96:77:77:81:13:49:26:db:fa:
         3b:bd:97:cc:11:dc:11:7d:f5:f8:6f:3e:d8:54:e9:8b:19:e0:
         7e:0a:75:c8:1f:86:50:aa:b2:7e:54:1c:be:c7:31:ad:d3:e0:
         b0:65:97:28:83:d1:c6:54:60:c4:27:e4:14:99:6f:aa:b8:7b:
         8e:99:90:0a:e2:25:31:8e:7d:fd:c7:ef:30:c6:32:0f:6e:2e:
         65:5a:e3:e1:e2:59:32:20:2f:f9:30:25:e0:32:f4:98:35:5f:
         35:3b:c2:28:c2:63:5c:fb:7d:aa:58:98:b8:17:17:c3:c4:dd:
         7e:e9:89:af:61:32:38:1d:42:2d:7e:54:99:da:b8:27:6d:a2:
         01:c4:ea:1f:58:66:22:7d:d3:ff:5d:93:b8:06:17:c9:4c:55:
         96:47:c1:67:ef:b1:c0:f6:c0:92:f6:74:89:6a:17:8e:9e:b9:
         9f:99:90:8b:d3:13:49:53:46:40:fa:d6:32:02:ba:8b:51:e8:
         49:fa:45:34:61:2a:8e:6c:32:74:b9:42:aa:fd:32:2f:4f:ac:
         a9:b7:8a:0c:26:d8:3c:6e:93:48:6d:2e:9e:47:07:6a:db:7b:
         54:b5:98:ae:3b:da:0a:21:15:cb:07:02:2d:12:ab:80:3d:43:
         cb:10:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org