Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
File:                     3138362e3139322e31362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          GsMtGjK2Ajx2YUrKcTrgx5JZF7Q1MMK0b+p4Tk/2S2Q=
Subject key identifier:   E8:C2:E8:0C:8A:49:FD:05:08:8D:14:83:60:95:8C:A9:89:A6:E5:AE
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       1383C147F7D51FD1D4FB58A8AE8642D46C627B05
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:25 +0000
ROA not before:           Tue 12 Mar 2024 19:46:25 +0000
ROA not after:            Tue 11 Mar 2025 19:51:25 +0000
asID:                     28220
IP address blocks:        186.192.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:83:c1:47:f7:d5:1f:d1:d4:fb:58:a8:ae:86:42:d4:6c:62:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:25 2024 GMT
            Not After : Mar 11 19:51:25 2025 GMT
        Subject: CN=E8C2E80C8A49FD05088D148360958CA989A6E5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:64:49:e0:6d:70:48:6b:f4:04:65:b7:3d:48:
                    da:ce:fe:ba:89:5f:67:1e:75:1e:20:c4:a1:48:1e:
                    32:15:e5:0c:07:a1:93:c3:6f:66:8f:0c:ea:1d:7d:
                    f5:90:fa:16:a7:8f:34:fe:ab:e0:aa:e0:24:c5:72:
                    82:fd:ca:b7:44:40:03:56:4f:5f:cc:32:97:73:36:
                    92:14:b5:14:ad:e7:a9:ba:31:3a:24:4a:29:78:8f:
                    21:de:bc:fc:49:5c:14:ca:34:9b:00:78:01:35:e9:
                    d9:5b:07:cd:b7:0b:cd:9f:b9:6e:34:d3:69:ea:af:
                    2b:8f:fc:77:52:ff:27:1b:e5:12:e6:cc:40:94:71:
                    52:8d:17:47:e0:0d:0b:1b:89:24:95:de:37:7a:1e:
                    51:83:33:d3:f4:d0:dd:33:e9:7d:64:d2:a3:f7:f6:
                    d9:59:4b:c7:8b:04:77:09:35:63:1e:7b:9d:f8:d0:
                    96:e9:6b:27:23:07:b0:e8:b0:bb:48:9b:1b:da:08:
                    15:9b:78:48:80:3e:2a:72:45:37:fe:90:6f:7b:88:
                    15:a7:1b:d8:ca:8f:68:95:53:2f:31:65:2e:7c:36:
                    45:94:06:57:81:a2:eb:91:e6:dc:9a:a1:df:27:a4:
                    26:60:94:fc:87:f5:24:66:7f:b3:72:83:bb:ee:9c:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C2:E8:0C:8A:49:FD:05:08:8D:14:83:60:95:8C:A9:89:A6:E5:AE
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139322e31362e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.192.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:f1:23:6d:da:97:09:b0:9c:f1:29:e2:98:b3:0e:f4:26:
         55:e2:33:52:ee:a2:64:a2:4a:3b:63:70:5f:ff:96:d4:b7:ad:
         a0:54:f0:a5:77:71:81:57:89:03:cd:0c:81:5c:6d:9d:c4:b8:
         2d:b6:23:28:e2:c5:03:39:35:66:78:14:be:70:93:19:ba:99:
         b7:ad:26:51:57:64:41:58:da:80:14:52:86:31:02:4f:74:69:
         20:be:08:36:3f:47:e2:9f:51:00:f7:36:3d:17:23:03:38:12:
         72:8e:29:18:66:70:82:75:ee:a2:eb:35:42:a7:ef:77:7e:f4:
         de:ca:85:7a:39:ef:81:11:c1:d1:d7:23:2d:7d:1f:25:32:d1:
         f4:1f:b8:d5:69:6e:cd:79:e6:8a:3a:21:f3:f3:4a:e1:dc:11:
         99:9b:3c:5e:e9:be:93:6e:10:e3:ca:6e:7f:34:7f:8e:fc:7e:
         df:7c:72:f1:a7:c5:a2:7f:d5:e0:b0:91:94:c3:80:c1:a9:14:
         0b:65:12:8c:49:ee:73:b7:85:f6:b9:a2:68:29:fc:5a:c4:36:
         70:61:35:a2:49:b1:bb:b3:9f:a5:61:37:b3:ac:88:99:af:17:
         35:1b:01:70:7e:6f:5a:a0:0b:f9:d4:a3:8a:ba:54:93:21:b9:
         e2:27:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org