Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa
File:                     3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          O4niW2JC+aPKAvx5ZdfS563LuERJgDEfgNklnqkQa9E=
Subject key identifier:   3B:49:C0:A9:8F:1B:14:49:14:8A:43:0D:9B:D0:86:8E:54:4B:1D:CF
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       14C3163111FE57A2BA7257B77A01E7081F5FF48A
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:10 +0000
ROA not before:           Tue 12 Mar 2024 19:46:10 +0000
ROA not after:            Tue 11 Mar 2025 19:51:10 +0000
asID:                     28220
IP address blocks:        186.208.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c3:16:31:11:fe:57:a2:ba:72:57:b7:7a:01:e7:08:1f:5f:f4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:10 2024 GMT
            Not After : Mar 11 19:51:10 2025 GMT
        Subject: CN=3B49C0A98F1B1449148A430D9BD0868E544B1DCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:bb:fb:1a:6f:da:f7:5e:96:68:8a:2e:71:d0:
                    bd:44:08:5e:cf:39:2d:1c:f4:7a:14:86:5c:e9:f7:
                    4e:89:ab:52:13:00:ea:e1:c6:af:5e:52:ba:5b:75:
                    be:28:f1:12:1e:5f:55:ff:ec:e6:57:fc:fd:9e:96:
                    52:b9:8c:0a:79:82:af:03:a3:b4:47:b2:a5:9e:42:
                    04:01:d0:32:70:5a:81:56:26:c7:56:d2:60:4a:18:
                    6c:3b:86:c1:69:75:a7:6a:33:15:84:98:fb:d1:0b:
                    c9:8a:12:2b:92:de:b9:9e:ad:3a:6b:b9:c5:a2:ad:
                    b0:ea:0b:48:f2:fc:8d:7e:b7:68:66:ed:50:ef:70:
                    1e:0f:99:f8:54:b8:0f:f1:50:51:a9:67:19:90:7c:
                    72:fa:2f:31:b4:60:7c:9e:eb:6b:c4:1d:2e:6e:93:
                    09:cb:08:d3:52:b9:a5:f2:3d:5d:9a:76:3a:db:a4:
                    19:61:67:0b:de:19:70:dc:bc:7b:59:5f:9b:d1:ba:
                    eb:db:db:9f:26:ee:40:fa:4a:ed:3d:b0:34:a1:68:
                    48:40:31:0c:a5:d0:58:12:53:dc:7f:2f:53:04:80:
                    3d:4c:66:c4:33:34:78:c2:fa:27:54:36:92:46:4d:
                    dc:cb:2b:d7:06:17:81:4d:b5:4f:2f:be:2b:b0:c9:
                    4a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:49:C0:A9:8F:1B:14:49:14:8A:43:0D:9B:D0:86:8E:54:4B:1D:CF
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230382e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2e:c1:db:9d:61:2c:ab:0b:9f:2c:de:05:79:ca:be:86:5b:dc:
         4d:6b:0a:6a:13:4f:44:db:d8:b4:bf:45:5d:52:b4:d8:e1:36:
         bd:81:aa:30:44:dd:da:62:68:67:d2:76:01:46:40:69:f9:1e:
         b7:1b:ae:c1:cb:5b:3c:9c:00:a9:41:d4:b3:9c:a9:9b:82:7c:
         ec:ce:f7:f2:61:0e:75:d5:03:fb:98:bc:b8:3d:a6:a4:4e:81:
         38:9c:c5:53:9c:6e:32:a0:81:6f:ca:c2:50:92:5e:d6:12:cb:
         40:f7:fd:f7:8f:f8:c3:b7:e9:57:22:d2:75:51:0b:74:9d:5e:
         b8:07:2f:b4:bb:a6:9c:90:91:db:ac:33:ee:e2:03:bf:f7:55:
         9f:b0:73:25:de:52:02:53:47:bb:7e:12:f5:80:90:cf:30:df:
         ae:a3:b6:7e:f2:fa:c7:b7:4e:8f:5c:8a:45:f2:51:44:1b:58:
         e2:57:5d:e3:81:4d:68:5d:26:12:b0:37:8f:17:d8:66:99:72:
         e4:07:02:35:6d:66:e7:94:39:32:89:aa:c0:48:74:3a:d1:e8:
         f3:22:92:4a:ea:8e:de:6b:83:9e:be:e4:7f:aa:f2:dd:cd:06:
         29:9a:06:e7:58:75:eb:c4:cc:7b:41:d3:ac:27:7a:2d:4d:bf:
         20:d6:95:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFMMWMRH+V6K6cle3egHnCB9f9IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTBaFw0yNTAzMTExOTUxMTBaMDMxMTAvBgNV
BAMTKDNCNDlDMEE5OEYxQjE0NDkxNDhBNDMwRDlCRDA4NjhFNTQ0QjFEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzu/sab9r3XpZoii5x0L1ECF7P
OS0c9HoUhlzp906Jq1ITAOrhxq9eUrpbdb4o8RIeX1X/7OZX/P2ellK5jAp5gq8D
o7RHsqWeQgQB0DJwWoFWJsdW0mBKGGw7hsFpdadqMxWEmPvRC8mKEiuS3rmerTpr
ucWirbDqC0jy/I1+t2hm7VDvcB4PmfhUuA/xUFGpZxmQfHL6LzG0YHye62vEHS5u
kwnLCNNSuaXyPV2adjrbpBlhZwveGXDcvHtZX5vRuuvb258m7kD6Su09sDShaEhA
MQyl0FgSU9x/L1MEgD1MZsQzNHjC+idUNpJGTdzLK9cGF4FNtU8vviuwyUqzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO0nAqY8bFEkUikMNm9CGjlRLHc8wHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM2MmUzMjMwMzgyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO60NAwDQYJKoZIhvcNAQELBQADggEBAC7B251h
LKsLnyzeBXnKvoZb3E1rCmoTT0Tb2LS/RV1StNjhNr2BqjBE3dpiaGfSdgFGQGn5
HrcbrsHLWzycAKlB1LOcqZuCfOzO9/JhDnXVA/uYvLg9pqROgTicxVOcbjKggW/K
wlCSXtYSy0D3/feP+MO36Vci0nVRC3SdXrgHL7S7ppyQkdusM+7iA7/3VZ+wcyXe
UgJTR7t+EvWAkM8w366jtn7y+se3To9cikXyUUQbWOJXXeOBTWhdJhKwN48X2GaZ
cuQHAjVtZueUOTKJqsBIdDrR6PMikkrqjt5rg56+5H+q8t3NBimaBudYdevEzHtB
06wnei1NvyDWlaY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org