Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3231203d3e203238323230.roa
File:                     3138362e3139332e39362e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          7wVf39DUZiLI1YfsH4GlDvSGlo0ucsZ7M9ji3LUvk7g=
Subject key identifier:   AF:A4:A6:17:19:D8:78:21:0B:86:A3:4E:22:E7:A7:EF:64:F6:08:C2
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       777A6B2F78DFFA81CC7C835C78F7EF7B2AA3E204
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:19 +0000
ROA not before:           Tue 12 Mar 2024 19:46:19 +0000
ROA not after:            Tue 11 Mar 2025 19:51:19 +0000
asID:                     28220
IP address blocks:        186.193.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7a:6b:2f:78:df:fa:81:cc:7c:83:5c:78:f7:ef:7b:2a:a3:e2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:19 2024 GMT
            Not After : Mar 11 19:51:19 2025 GMT
        Subject: CN=AFA4A61719D878210B86A34E22E7A7EF64F608C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:5f:07:15:e8:ad:b2:fc:42:6f:1c:21:2e:
                    52:50:60:2f:6b:67:c5:58:c7:d8:38:a9:88:63:d1:
                    38:21:e8:76:cc:e7:8e:3f:85:f5:b4:fa:13:00:86:
                    4b:c3:26:95:b5:8c:6b:44:e8:f0:02:cb:13:00:ad:
                    92:b2:93:74:e3:04:53:80:eb:7a:1f:16:03:fe:06:
                    b6:cc:86:d6:80:06:d5:1b:a8:6e:cf:8b:e9:00:c7:
                    87:e5:4f:72:0d:b8:61:7c:9d:5c:30:77:19:2e:59:
                    da:c9:05:29:4e:ed:e5:64:49:8b:ae:8e:27:1b:fc:
                    cd:fd:f1:fb:73:75:04:85:50:86:b2:fe:1e:0e:90:
                    1b:2f:22:8e:f1:02:da:ee:45:a4:21:37:f3:da:2d:
                    1b:66:89:1c:41:b5:92:68:06:c2:fe:89:ba:0a:df:
                    aa:0b:86:40:b7:0d:bc:43:b4:34:4a:cd:2e:16:0f:
                    1f:39:84:31:e2:60:c8:5d:2b:3f:e7:ec:cd:92:ed:
                    8f:94:4f:1e:d3:f6:ad:e0:ea:68:67:04:cd:ea:de:
                    98:c3:31:7d:59:61:b1:db:cc:d9:98:bb:90:5a:9e:
                    bc:ca:0f:fa:12:77:31:34:dc:05:01:df:a8:62:e3:
                    16:21:07:e4:c8:aa:c1:49:48:66:19:ff:be:41:d9:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:A6:17:19:D8:78:21:0B:86:A3:4E:22:E7:A7:EF:64:F6:08:C2
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3139332e39362e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:00:fb:af:75:21:89:b5:06:8c:5f:b9:88:9c:ab:81:34:23:
         32:24:84:0b:90:80:4e:17:5f:97:e0:67:69:c6:2a:80:75:b2:
         e1:61:75:0e:e3:0e:8c:c9:fc:95:ba:f3:ed:13:df:6f:87:05:
         2c:57:db:0b:61:3a:71:e2:e0:cc:ca:62:12:40:5c:c7:31:e1:
         7b:bd:6d:38:2c:50:f0:f0:fc:e8:7b:e3:3c:c9:93:e7:eb:4f:
         f8:95:e2:c8:7b:31:9d:6b:c9:ad:3e:77:9d:77:b4:1d:4c:d3:
         13:f7:1e:ee:0b:51:85:48:2d:37:0b:67:4d:3e:9d:64:57:9c:
         c1:19:64:ea:24:9c:72:7e:84:65:11:14:3b:88:aa:5a:41:73:
         e6:f3:aa:55:ae:4a:7d:e2:d5:d9:e1:c6:5b:72:de:a2:6f:8f:
         ae:1d:34:c2:fc:c9:f0:b9:6c:55:28:61:56:93:06:e6:94:23:
         d4:13:73:36:29:18:92:ba:91:dd:01:1b:eb:91:ce:d1:30:d1:
         ea:13:f1:b2:54:98:e5:ec:4e:3e:22:a0:cf:6d:2a:a6:0b:8f:
         1e:70:bc:f9:05:e5:4e:65:b2:0e:a0:81:71:20:f6:d6:b5:81:
         e7:bb:a8:a8:d2:33:7a:34:fa:a5:74:f6:c6:e7:e9:ed:e1:06:
         3a:e5:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org