Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3139322e302f32312d3231203d3e203238323230.roa
File:                     3137392e39362e3139322e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          a5kXznQD6alvcy9sSGsAV/ldmIRdTDVpMPuzc3tuMXg=
Subject key identifier:   06:33:37:DC:8A:DB:CA:AE:FB:17:8D:5E:AD:3C:7D:D0:68:49:43:91
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       22F99B1329F71DCD1710DFB35C7362DD2D2635BB
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3139322e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:11 +0000
ROA not before:           Tue 12 Mar 2024 19:46:11 +0000
ROA not after:            Tue 11 Mar 2025 19:51:11 +0000
asID:                     28220
IP address blocks:        179.96.192.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f9:9b:13:29:f7:1d:cd:17:10:df:b3:5c:73:62:dd:2d:26:35:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:11 2024 GMT
            Not After : Mar 11 19:51:11 2025 GMT
        Subject: CN=063337DC8ADBCAAEFB178D5EAD3C7DD068494391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:27:be:f9:49:f3:23:e8:9b:5b:fe:8a:db:
                    b4:e5:aa:84:a9:e7:28:76:1f:cd:b1:f8:8f:d8:f0:
                    0d:42:a9:c1:ad:c6:dd:73:db:20:f8:ca:61:8b:67:
                    b8:df:b7:ef:fb:67:a6:75:6d:f0:b1:f5:37:20:ec:
                    46:48:e0:0c:30:74:10:e0:3c:73:0e:e9:4c:ea:fd:
                    3d:6e:25:f6:95:2d:61:5f:71:12:fe:b1:c0:91:c5:
                    a5:8c:ea:13:d1:77:ee:04:8e:dc:41:50:c2:6b:97:
                    c3:b9:3d:2d:97:17:f1:83:67:98:b8:c5:d3:8e:63:
                    e3:8e:3b:3e:4b:fc:e5:19:6d:0e:87:a8:bc:fd:87:
                    d8:8b:00:99:60:2e:db:97:cc:87:0c:d6:f4:06:20:
                    06:1b:3f:64:5f:9c:c4:d6:27:aa:9d:fd:a1:4f:c2:
                    77:be:c3:e8:d0:2c:c8:7f:7c:fa:3b:a5:44:fa:a9:
                    98:44:07:20:ad:7b:5c:13:fa:a3:fa:b5:50:e1:55:
                    75:2a:79:ff:72:70:1d:1f:49:2b:40:2f:0e:82:92:
                    ff:9f:95:34:a0:93:86:03:76:ae:6a:89:55:ee:4e:
                    00:8e:37:d4:e2:4b:82:80:55:1d:3a:e1:fb:9f:53:
                    59:79:4f:1a:d6:12:2e:b9:b7:d7:79:67:b3:92:f1:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:33:37:DC:8A:DB:CA:AE:FB:17:8D:5E:AD:3C:7D:D0:68:49:43:91
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3137392e39362e3139322e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b9:f3:22:de:8d:59:1e:9f:d0:4e:b0:b1:0b:97:f8:13:e0:1b:
         88:f9:ed:da:f4:5e:1e:6b:24:08:e5:98:70:d1:c8:dc:fc:df:
         a6:90:12:64:43:6b:fd:f8:3c:06:aa:f9:79:8d:7e:91:c5:39:
         29:51:20:87:0f:b3:c4:8f:de:a6:00:74:53:24:c4:1b:39:2e:
         82:56:f5:d4:b1:74:51:67:dd:bd:58:0b:8a:1e:5d:20:4c:42:
         1a:6a:da:67:73:75:c9:12:7d:0a:82:40:9e:80:1d:7d:87:fa:
         de:e3:89:7f:03:05:5e:bd:f8:22:e6:04:7f:7a:e8:da:a4:2a:
         b5:e1:3a:ef:7f:f9:d4:6a:cd:02:21:d1:cc:e8:40:dd:4e:f1:
         a3:d1:a8:8f:22:40:3e:00:cc:18:ce:16:c8:a2:ca:17:db:63:
         d8:bf:2e:e9:79:2b:cb:46:f3:58:13:55:06:59:2c:9b:d1:46:
         09:61:24:bf:9c:6b:69:d4:3a:a5:9b:71:06:25:7e:10:40:a0:
         17:2b:d8:a0:ed:fd:80:e4:27:f9:80:4b:83:03:67:4b:63:da:
         15:4a:d8:0f:9e:d5:62:73:f1:3c:ba:19:0e:de:8f:f6:2c:e9:
         24:5b:74:91:0e:a5:60:9d:bd:b1:2c:3c:be:d7:7d:cf:60:f2:
         2b:0e:f6:38
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIvmbEyn3Hc0XEN+zXHNi3S0mNbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTFaFw0yNTAzMTExOTUxMTFaMDMxMTAvBgNV
BAMTKDA2MzMzN0RDOEFEQkNBQUVGQjE3OEQ1RUFEM0M3REQwNjg0OTQzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2ye++UnzI+ibW/6K27TlqoSp
5yh2H82x+I/Y8A1CqcGtxt1z2yD4ymGLZ7jft+/7Z6Z1bfCx9Tcg7EZI4AwwdBDg
PHMO6Uzq/T1uJfaVLWFfcRL+scCRxaWM6hPRd+4EjtxBUMJrl8O5PS2XF/GDZ5i4
xdOOY+OOOz5L/OUZbQ6HqLz9h9iLAJlgLtuXzIcM1vQGIAYbP2RfnMTWJ6qd/aFP
wne+w+jQLMh/fPo7pUT6qZhEByCte1wT+qP6tVDhVXUqef9ycB0fSStALw6Ckv+f
lTSgk4YDdq5qiVXuTgCON9TiS4KAVR064fufU1l5TxrWEi65t9d5Z7OS8SovAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBjM33Irbyq77F41erTx90GhJQ5EwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzNzM5MmUzOTM2MmUzMTM5MzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDs2DAMA0GCSqGSIb3DQEBCwUAA4IBAQC58yLejVke
n9BOsLELl/gT4BuI+e3a9F4eayQI5Zhw0cjc/N+mkBJkQ2v9+DwGqvl5jX6RxTkp
USCHD7PEj96mAHRTJMQbOS6CVvXUsXRRZ929WAuKHl0gTEIaatpnc3XJEn0KgkCe
gB19h/re44l/AwVevfgi5gR/eujapCq14Trvf/nUas0CIdHM6EDdTvGj0aiPIkA+
AMwYzhbIosoX22PYvy7peSvLRvNYE1UGWSyb0UYJYSS/nGtp1Dqlm3EGJX4QQKAX
K9ig7f2A5Cf5gEuDA2dLY9oVStgPntVic/E8uhkO3o/2LOkkW3SRDqVgnb2xLDy+
133PYPIrDvY4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org