Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa
File:                     3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          LmTdlDRa6GTtNyWUSeIrS1nBdfwlma8Jw39ZnCKG+to=
Subject key identifier:   3E:BB:F7:77:4A:5F:32:B1:39:D5:3D:2B:BE:65:ED:C6:05:9E:95:18
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       1ABCC6DCCE59ED6FB353F171B7A409DB5800094F
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:11 +0000
ROA not before:           Tue 12 Mar 2024 19:46:11 +0000
ROA not after:            Tue 11 Mar 2025 19:51:11 +0000
asID:                     28220
IP address blocks:        186.193.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bc:c6:dc:ce:59:ed:6f:b3:53:f1:71:b7:a4:09:db:58:00:09:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:11 2024 GMT
            Not After : Mar 11 19:51:11 2025 GMT
        Subject: CN=3EBBF7774A5F32B139D53D2BBE65EDC6059E9518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:26:37:1c:07:77:11:b1:ab:44:89:a1:ce:
                    51:f8:5f:04:35:fe:92:bb:49:6c:ab:b8:10:9d:ae:
                    99:49:aa:39:ce:2f:e9:1c:0a:12:e7:7e:be:be:bb:
                    8c:15:86:8a:3a:70:e7:1a:92:91:95:e0:ac:c6:e2:
                    9f:c1:71:57:1a:7d:b6:fe:24:b5:e3:17:b0:31:95:
                    6d:bd:ca:41:8c:7c:77:31:e7:9a:a8:d4:be:7f:59:
                    83:3b:c2:c8:95:3e:67:56:6f:58:4d:c0:1c:d5:63:
                    b5:35:03:ef:20:9a:b7:ee:12:9f:09:80:86:1f:16:
                    b6:d4:34:60:f6:f9:e0:6d:57:8d:20:2b:2c:d4:43:
                    fd:76:8e:75:26:99:c0:45:ea:e8:ad:79:16:98:79:
                    35:b1:19:e2:1b:fa:b9:57:25:f2:bc:6b:01:05:f0:
                    46:c5:92:6f:91:78:6c:f8:63:1d:0c:be:55:d6:de:
                    c5:20:cf:36:f4:ed:c1:8d:c0:a9:11:b1:8d:57:07:
                    d1:d5:78:f3:86:e9:5c:06:bb:e8:b8:62:31:00:c3:
                    ea:2f:c9:5f:63:01:51:0b:8c:4d:48:f5:50:b0:9a:
                    8d:1e:cf:dc:d1:6c:53:86:03:2f:25:c3:cc:3b:31:
                    9d:fc:c3:94:c8:6b:62:0a:42:2b:72:5c:58:31:03:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BB:F7:77:4A:5F:32:B1:39:D5:3D:2B:BE:65:ED:C6:05:9E:95:18
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e3130342e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:21:7c:24:79:a3:47:da:36:93:bd:08:49:14:a3:55:0a:ec:
         9f:cd:60:53:4f:a6:3e:03:82:ad:44:a1:75:16:34:be:c6:c2:
         69:4c:0a:93:72:1b:21:43:1e:f4:af:5c:a5:8e:6e:cd:e8:59:
         15:8e:5c:b0:8b:46:ac:1f:3c:36:39:e7:19:08:09:56:56:a2:
         07:4a:6a:83:7b:a9:29:bf:f4:a4:18:93:db:58:c6:32:26:ef:
         79:68:16:af:e3:96:fc:5e:61:a1:ad:9c:b8:01:c5:d0:30:9e:
         8e:2c:4e:1f:df:ee:0b:0a:76:d6:bc:ff:74:1c:89:07:f4:56:
         4c:f4:39:bb:36:75:90:87:de:69:0a:cc:fa:78:9d:1e:0a:69:
         04:fe:52:67:bf:be:0e:45:de:57:e3:1e:b4:2a:53:a3:dd:39:
         1f:7f:06:ee:08:b7:a8:2c:ef:a4:1b:d7:b7:93:99:80:2e:9f:
         9d:86:85:9e:35:37:01:be:5c:9e:dd:0a:e3:80:00:cd:e0:f2:
         77:8a:35:72:db:f8:07:c3:86:03:27:1e:6d:b4:c4:e5:bd:b4:
         7c:e0:ea:c3:65:af:c3:36:37:41:c4:81:8b:1c:2d:ec:ec:cf:
         d4:ed:12:2e:1a:e7:ea:02:b6:d5:58:6f:cb:d2:04:ed:77:e7:
         75:e6:2e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org