Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          cTIJVqMrraEh8j5H/AG86TKOarXR1gqxVzw49cptMSA=
Subject key identifier:   8D:4D:E6:92:62:AC:CF:CB:FD:1A:61:81:23:AD:6E:5E:7F:41:1D:61
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       6BBF46F149ABF2CBF186EBDB5569498E79B4C6F2
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:22 +0000
ROA not before:           Tue 12 Mar 2024 19:46:22 +0000
ROA not after:            Tue 11 Mar 2025 19:51:22 +0000
asID:                     28220
IP address blocks:        186.208.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bf:46:f1:49:ab:f2:cb:f1:86:eb:db:55:69:49:8e:79:b4:c6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:22 2024 GMT
            Not After : Mar 11 19:51:22 2025 GMT
        Subject: CN=8D4DE69262ACCFCBFD1A618123AD6E5E7F411D61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:be:3d:39:78:ab:bf:12:41:64:51:56:86:
                    60:63:77:e4:cd:21:1e:cf:bc:c2:aa:99:4d:59:b9:
                    58:53:df:6f:07:40:b2:57:eb:fd:39:67:b5:fb:f4:
                    1a:ac:ef:ad:87:59:d4:49:c4:7a:5f:c1:10:73:7a:
                    94:b3:b5:78:e2:d4:4d:be:c7:23:bf:37:d2:29:cc:
                    44:e8:49:3e:e5:bf:97:e0:95:ec:ee:25:ec:46:7d:
                    f1:6d:e7:74:d1:81:50:a0:37:1e:7e:cd:4b:4a:74:
                    25:07:f6:89:e6:94:e8:2c:f6:52:1f:12:f3:b1:c3:
                    00:88:09:dd:01:33:fb:b1:16:84:47:02:48:11:e8:
                    cd:57:57:b8:19:46:fa:61:a4:09:ab:cd:10:c7:d3:
                    45:56:8e:4d:04:af:0b:c6:4b:e7:fc:d7:ed:a6:4a:
                    9d:5d:1b:bd:40:41:75:58:38:ea:63:67:ce:b3:41:
                    7f:91:41:10:ae:a7:64:2e:c2:53:4e:08:4a:4b:0f:
                    9f:10:cc:a1:52:6d:8c:19:25:d4:5c:72:62:45:22:
                    cf:31:c2:76:5f:37:fb:9e:50:08:72:36:28:4f:93:
                    4b:b8:b3:cf:d0:dd:64:e1:e2:04:3f:75:cb:29:1b:
                    29:17:cb:38:ae:41:08:c3:e6:11:ea:d9:40:b0:e7:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:E6:92:62:AC:CF:CB:FD:1A:61:81:23:AD:6E:5E:7F:41:1D:61
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231302e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f1:3c:b3:0d:f5:80:56:8e:93:bf:8f:50:6f:28:84:a0:68:
         9a:bd:f0:24:13:f9:25:78:f6:17:e5:5f:39:fb:11:ca:42:93:
         93:bf:55:40:16:62:5e:17:f3:11:ee:f4:c3:85:b9:52:2b:c5:
         86:81:b2:ea:72:08:c5:30:fb:63:41:4f:3f:29:fd:60:20:fb:
         25:13:92:60:e1:64:ae:4d:11:ef:1b:b5:0e:81:ee:b0:a6:36:
         5b:1b:d0:cd:88:d4:c7:d4:74:95:30:8c:f4:83:43:b4:e2:57:
         71:06:7f:b4:dd:e5:cf:c1:61:5c:7f:58:28:5e:ee:7f:16:a2:
         59:a9:e7:67:8f:6c:19:3d:7e:17:10:60:05:6f:f1:a4:b1:9b:
         a6:c3:8a:fd:9e:04:7c:ee:f9:9c:88:84:10:69:40:9b:90:80:
         15:6f:4c:df:10:80:f3:dc:32:c7:84:21:8a:53:9e:f7:44:cb:
         55:48:a4:a8:2d:80:e2:ed:5f:7d:37:1b:3d:0c:d7:28:0f:d9:
         27:62:d2:b2:d5:b2:9a:51:e2:d1:fd:f1:ee:71:8e:98:0c:79:
         cc:63:d5:2e:a6:80:71:2d:b2:ed:83:b0:e9:2f:21:40:18:61:
         48:79:ae:e6:8c:33:9e:b3:bc:15:a3:56:c6:76:d2:bf:39:23:
         f3:96:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org