Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa
File:                     3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          +qp6J33FYVajPIpJfM0wP4ygTwJm0nxhjssVd/1fWN0=
Subject key identifier:   0B:A3:1A:B5:D0:EE:22:96:25:B4:5C:00:C6:57:CD:4D:1C:68:A3:DA
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       5ED8ED3FFA7E4CD715DDD0D0DFD340D64C17E74B
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:25 +0000
ROA not before:           Tue 12 Mar 2024 19:46:25 +0000
ROA not after:            Tue 11 Mar 2025 19:51:25 +0000
asID:                     28220
IP address blocks:        186.208.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d8:ed:3f:fa:7e:4c:d7:15:dd:d0:d0:df:d3:40:d6:4c:17:e7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:25 2024 GMT
            Not After : Mar 11 19:51:25 2025 GMT
        Subject: CN=0BA31AB5D0EE229625B45C00C657CD4D1C68A3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:4a:5b:b1:00:9e:8d:a0:e0:fb:45:41:65:
                    c5:78:7c:8c:0b:94:49:c3:5a:54:b8:c3:a2:40:3e:
                    cc:a6:8d:f0:10:37:ef:1b:3c:65:24:3b:b1:75:da:
                    01:6f:39:11:17:6c:a1:a8:d6:bf:06:86:6a:f1:16:
                    74:e7:f0:59:13:87:cb:bf:28:16:7b:90:df:f9:c4:
                    57:f0:16:62:9a:b7:8a:c0:ff:0d:1f:bc:82:f3:47:
                    7e:35:0b:cc:ad:65:7a:0e:7d:60:a1:eb:f7:32:b8:
                    60:9f:b8:92:22:04:65:e6:9f:fa:fd:98:b2:ea:0d:
                    99:f7:eb:8e:c4:42:a9:55:71:78:f8:c7:a2:26:91:
                    a2:7e:4d:e4:4d:0e:40:52:68:81:ed:6c:a3:21:ff:
                    43:4f:aa:7a:fd:3a:52:78:72:27:b3:44:bb:de:e0:
                    ea:7c:8b:6c:2d:86:ff:8d:30:3a:cc:99:c2:5a:0a:
                    b3:39:a7:04:9b:28:ea:74:3d:05:de:90:78:f5:64:
                    7e:a1:94:e1:f7:f5:15:c9:08:dd:33:4e:3e:f4:f0:
                    66:2e:cc:7b:b4:ec:63:39:2b:25:66:f8:22:99:a6:
                    bc:cd:db:65:4b:24:84:ac:16:62:f0:03:04:43:bd:
                    22:f1:dd:80:bb:5d:74:d9:16:56:6d:e1:b1:92:da:
                    17:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A3:1A:B5:D0:EE:22:96:25:B4:5C:00:C6:57:CD:4D:1C:68:A3:DA
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231312e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:f2:97:78:30:ad:db:24:c4:a3:91:22:a8:93:d5:5d:9e:
         ea:1a:bc:c6:80:13:45:b9:9e:0d:c4:7b:d2:e8:5f:4a:15:35:
         f5:a5:7e:47:27:3f:31:d6:3b:93:d7:f1:62:1c:67:20:40:5b:
         0b:00:ee:e1:f8:52:e8:2f:f8:f2:25:f3:2c:d4:44:0c:59:ca:
         56:a3:21:b3:df:c1:69:bb:f8:40:0b:9d:44:50:20:7a:d7:42:
         dc:1a:e4:e2:01:a2:59:21:5a:5f:c4:f8:bb:09:c8:09:58:6a:
         51:19:b9:02:74:01:02:49:66:75:d6:f4:bb:2f:b2:27:32:27:
         b2:bb:b7:16:e9:9d:28:b7:6d:90:af:b3:cd:7b:30:d8:df:88:
         ae:03:60:77:3d:db:18:5b:63:4e:84:25:50:14:22:71:3b:9b:
         9d:39:1c:93:ff:06:b1:3b:f4:db:e0:75:9f:05:64:3c:38:cb:
         30:97:aa:ba:6c:10:d7:39:3b:1d:12:da:ab:3a:0b:d2:9d:38:
         67:c6:ec:fb:d6:9b:18:b4:c2:78:48:59:77:2e:a3:64:b8:62:
         ad:4d:a1:78:e6:92:63:62:b4:7c:db:0d:55:d5:e3:bb:56:d6:
         58:04:6f:8f:9a:a8:f2:3b:8b:ed:3b:02:1c:25:15:5d:35:66:
         73:1c:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org