Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230392e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3230392e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          u5P/hTVvknxZcJDf6A7IFsQhM9OJMzuo1B2Js7WcimA=
Subject key identifier:   1F:F6:24:C1:E3:AD:54:89:DD:54:2F:60:34:5A:15:EF:08:47:F5:A9
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       7CF2A084CBB6B5788007A259E40706219DD32659
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230392e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:20 +0000
ROA not before:           Tue 12 Mar 2024 19:46:20 +0000
ROA not after:            Tue 11 Mar 2025 19:51:20 +0000
asID:                     28220
IP address blocks:        186.208.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f2:a0:84:cb:b6:b5:78:80:07:a2:59:e4:07:06:21:9d:d3:26:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:20 2024 GMT
            Not After : Mar 11 19:51:20 2025 GMT
        Subject: CN=1FF624C1E3AD5489DD542F60345A15EF0847F5A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:25:f5:42:25:0e:f7:21:55:74:da:f2:5a:
                    1d:de:7a:95:6b:a0:18:7c:a6:98:ba:96:6b:5e:74:
                    d0:52:76:73:71:f9:6f:55:b3:92:a1:52:ae:79:c5:
                    4d:e1:99:e9:8b:f4:9e:10:8a:8b:0f:d8:13:70:53:
                    8a:52:a8:2f:37:b9:2b:39:e3:63:d7:b5:a0:0c:91:
                    28:8d:ea:97:36:32:84:11:31:28:02:f3:47:99:7c:
                    bc:e4:e8:e3:cc:46:cc:75:89:d8:20:a4:91:c6:ab:
                    62:98:b4:52:1e:1c:8b:8f:c6:18:1c:98:aa:20:37:
                    97:52:a8:35:ea:a7:7b:e6:0f:58:81:d3:16:64:07:
                    a8:73:f3:54:54:3c:79:59:0c:5b:a3:0c:08:b5:55:
                    02:26:7a:74:98:5c:77:47:bf:df:48:63:f2:24:62:
                    a2:49:0b:39:f5:24:68:d8:a8:d7:7c:dc:6f:02:cc:
                    b4:89:fd:96:1c:c5:af:59:50:b3:73:70:7b:ec:f0:
                    20:4e:64:c3:e7:83:ab:2a:f2:a4:af:1e:f4:ae:17:
                    42:26:b0:fd:c2:51:5f:f7:ff:69:8a:1d:8b:43:78:
                    0f:68:24:bf:2f:67:40:b7:69:0c:97:73:05:82:04:
                    c4:3c:27:ca:7c:1b:51:1b:c3:eb:e0:42:d2:ef:4d:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:24:C1:E3:AD:54:89:DD:54:2F:60:34:5A:15:EF:08:47:F5:A9
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3230392e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3f:ee:90:4e:d2:0d:0b:82:2d:df:70:dc:e3:cd:24:1d:00:
         14:96:26:73:9c:21:7d:fb:81:46:9b:9e:1a:a0:7a:d8:d6:32:
         c5:32:6f:98:cb:dd:4d:b1:f8:19:22:22:25:67:a2:0f:0c:c3:
         63:10:36:48:d8:66:29:ec:31:87:ed:8d:62:b2:a0:db:90:2c:
         33:11:90:5b:f2:f4:2c:f2:8e:37:17:30:f7:73:d5:23:fd:1b:
         06:82:e4:b8:c9:3a:82:c5:f4:a8:86:3a:02:95:28:09:fd:e8:
         67:17:b5:5c:0e:46:99:cb:0a:9f:07:e3:b8:0e:82:ea:e1:ab:
         de:a6:f4:b7:39:a6:bd:52:37:bf:19:8d:d1:03:71:b3:fe:eb:
         e0:ae:0d:76:a5:78:88:67:57:f7:29:1b:d6:fc:40:14:8f:f5:
         f9:19:bf:51:18:84:5c:9c:84:c0:05:97:a7:4b:e0:95:35:5b:
         20:48:ca:61:82:89:11:da:d8:ea:d9:c7:fb:ad:1c:96:d1:3b:
         97:15:8f:97:56:4f:fa:5b:8e:94:cb:24:a2:f5:ee:b3:64:2a:
         89:9b:f3:84:fd:62:1a:3a:70:3c:e4:02:f8:6c:18:e7:1f:ba:
         7f:de:9c:ce:19:ab:42:3a:87:6d:6c:6b:7c:ee:2c:11:d8:e7:
         0a:89:35:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org