Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32302d3230203d3e203533303539.roa
File:                     3138362e3139332e39362e302f32302d3230203d3e203533303539.roa (raw, json)
Hash identifier:          L4E1RHMRgm2PnezEwPL4lVi/DmpsjnTQpZUgksaUqec=
Subject key identifier:   AA:AA:A7:96:39:C5:40:86:22:AE:13:CE:7C:75:8E:1D:A9:22:5E:41
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       047372F86EB63A9B853F9B9B31FFDFD89DD80DA6
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32302d3230203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:20 +0000
ROA not before:           Tue 12 Mar 2024 19:46:20 +0000
ROA not after:            Tue 11 Mar 2025 19:51:20 +0000
asID:                     53059
IP address blocks:        186.193.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:73:72:f8:6e:b6:3a:9b:85:3f:9b:9b:31:ff:df:d8:9d:d8:0d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:20 2024 GMT
            Not After : Mar 11 19:51:20 2025 GMT
        Subject: CN=AAAAA79639C5408622AE13CE7C758E1DA9225E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:fd:95:08:44:28:37:5e:0b:5b:22:48:11:
                    9b:5c:15:cc:37:d6:7b:98:80:85:94:fb:84:ca:d1:
                    9d:b0:95:30:e1:ed:58:3d:c6:4f:49:7f:d7:1b:e2:
                    95:a3:a8:49:7f:6d:fe:ff:f5:8e:aa:47:05:6c:ac:
                    35:e7:fd:67:7c:76:88:cd:00:c1:a6:cc:50:64:45:
                    d2:84:3d:60:11:ff:97:41:7b:ff:1f:f4:be:95:ad:
                    86:cb:54:42:44:d6:fa:bc:ed:ad:0f:e0:b7:33:74:
                    63:3a:42:73:e9:ab:9c:aa:6a:70:7d:ae:6c:81:2a:
                    80:d3:50:cb:ac:af:bb:3b:5c:22:cd:56:e4:47:b5:
                    57:62:ab:9f:79:5d:32:f5:6b:ae:89:2f:6d:84:b8:
                    d7:f0:2c:17:d6:c4:ba:17:bc:21:dc:c0:a8:a7:e9:
                    69:87:3c:91:58:37:b7:9a:87:76:4e:8a:f6:46:57:
                    68:ee:63:4d:75:9c:96:f6:da:4b:1d:9a:97:ec:fb:
                    9c:cd:37:44:c7:99:58:56:22:2e:15:d2:57:16:46:
                    e6:93:ef:ff:36:e4:ee:b3:18:c7:2e:fe:66:7d:29:
                    b9:e2:7b:9b:e6:a9:a4:31:0d:cd:e2:90:ee:a0:a0:
                    fe:60:fc:31:63:09:6b:e7:9d:0f:ae:a8:60:9b:5a:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AA:A7:96:39:C5:40:86:22:AE:13:CE:7C:75:8E:1D:A9:22:5E:41
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32302d3230203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:29:6a:98:85:e6:54:f3:57:f9:d6:ec:7d:86:5c:f7:a4:
         7e:9e:1d:97:52:60:6c:55:23:ea:0b:06:89:d4:bb:7c:dd:ec:
         cf:c5:15:3c:99:ab:09:d0:3f:46:0d:07:3d:c2:14:1e:a7:17:
         b5:cc:3e:01:fb:28:01:70:9d:e2:a4:c3:81:50:34:af:9d:aa:
         55:ff:c4:69:f3:2b:35:1c:35:58:2c:41:39:72:c1:27:b0:b9:
         12:7f:e1:45:ec:12:fe:b1:19:ae:c2:55:29:df:07:33:bd:58:
         56:bb:4a:19:29:0c:4e:48:f8:f2:1d:18:00:96:dc:8e:8c:35:
         87:2d:50:e7:97:49:61:cf:84:12:3f:58:e5:04:7f:dc:15:41:
         21:78:df:60:f6:0a:96:f5:d9:41:12:b6:8e:cd:05:83:f1:d1:
         22:3a:20:63:1d:e8:c2:09:72:61:9d:2c:1e:e8:b5:45:69:0c:
         bf:d0:90:15:49:14:65:c5:39:0c:97:0d:f0:9a:74:21:01:ee:
         64:54:71:1a:24:b9:c0:f9:76:c8:80:b7:e2:c2:fc:77:8c:17:
         64:c5:b4:5d:db:6c:d4:ba:98:de:84:07:24:f8:5d:bb:29:a3:
         80:78:5b:78:52:3c:df:9c:1d:08:47:fb:83:8c:61:c0:49:8c:
         6e:75:27:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org