Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231342e302f32342d3234203d3e203533303539.roa
File:                     3138362e3230382e3231342e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          JT4EWD3C5y04tEUmbti/58BcerSsPyyZEVd8+vbpSPY=
Subject key identifier:   2B:59:6E:A2:DF:D7:C8:5C:48:99:57:5A:30:99:C3:BF:AA:EB:69:D4
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       0AF5739958196310823CB89A67F0D40BBAEF3DBA
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231342e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:13 +0000
ROA not before:           Tue 12 Mar 2024 19:46:13 +0000
ROA not after:            Tue 11 Mar 2025 19:51:13 +0000
asID:                     53059
IP address blocks:        186.208.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f5:73:99:58:19:63:10:82:3c:b8:9a:67:f0:d4:0b:ba:ef:3d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:13 2024 GMT
            Not After : Mar 11 19:51:13 2025 GMT
        Subject: CN=2B596EA2DFD7C85C4899575A3099C3BFAAEB69D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f0:41:31:69:e3:13:98:f8:3f:01:ba:20:de:
                    a5:59:30:18:70:4e:e9:62:d2:ae:73:cd:8f:8c:da:
                    a8:98:57:ff:e8:2f:bb:69:b7:cf:e0:74:a6:6b:4e:
                    2e:84:82:44:37:47:e7:1b:95:f1:8c:3f:62:9d:4a:
                    82:57:b5:ba:a3:7c:b6:ee:18:1e:00:cf:09:01:d0:
                    e6:93:99:aa:14:b5:85:83:16:2c:d4:f3:a1:41:16:
                    74:78:a5:80:56:51:6a:af:03:a1:e1:d6:fe:23:ed:
                    24:ea:10:5c:e4:d8:83:f8:58:27:28:7d:8a:cf:38:
                    93:42:e2:dc:a8:36:87:37:c9:89:26:0c:f3:87:56:
                    3a:0f:ba:9d:7c:27:18:3a:90:d9:c8:0c:50:a4:eb:
                    e6:43:21:44:64:59:ce:c0:3e:d4:86:9b:29:c1:fd:
                    bc:03:42:89:b5:6f:3c:ab:51:e9:5e:68:9b:83:dd:
                    fa:be:fa:93:80:c5:4f:21:12:04:64:ce:db:9e:77:
                    04:ee:de:38:f4:84:52:be:5a:7e:a5:f3:8a:4c:67:
                    8b:16:ef:be:eb:40:69:52:03:0c:63:16:af:38:2a:
                    09:84:e6:e2:c6:2a:de:50:90:e4:cb:1e:3c:aa:38:
                    1c:22:d4:a7:00:8a:f4:70:e0:40:f4:7f:12:81:87:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:6E:A2:DF:D7:C8:5C:48:99:57:5A:30:99:C3:BF:AA:EB:69:D4
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3230382e3231342e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:95:39:eb:2a:32:8a:0a:51:4a:c6:c8:2f:34:3a:4d:99:3d:
         69:8b:ed:a4:6a:ae:94:cf:65:40:4e:48:3c:d9:3f:e7:e7:4e:
         1a:91:e4:a0:9d:5a:c5:0b:62:c6:e5:a8:06:60:91:6c:8e:ac:
         ca:1c:a9:58:86:db:9d:76:10:e4:ba:fd:7a:fa:9b:83:d0:d3:
         2b:a8:6e:97:54:5b:4f:f1:0b:5b:77:fa:b4:3c:a7:db:14:c1:
         89:bd:48:66:48:d6:f4:98:ed:92:c4:1c:5a:f2:2d:42:63:fc:
         dc:8a:ac:05:e7:04:ba:ce:84:68:65:e2:3d:b9:11:09:b9:57:
         79:32:6e:7d:30:de:8f:d2:be:8e:f3:3f:c5:a5:6f:9f:b5:a3:
         94:ca:7a:21:9b:43:7a:01:b7:e3:d0:4e:3a:7d:43:76:54:d8:
         d2:66:e5:27:c7:8a:1d:23:40:47:8d:b6:12:27:18:22:e4:3d:
         b0:96:bd:5c:ad:a1:38:bb:4b:43:0b:20:4e:9d:ad:95:cb:92:
         3c:47:38:ce:68:3c:eb:ed:71:fb:c1:48:45:c9:de:1d:8d:15:
         c4:c6:00:19:8e:d5:f8:23:15:56:8c:d2:09:85:d8:f3:b4:e7:
         44:e6:5d:55:e2:b7:a3:f9:2d:c7:38:85:4f:a5:53:98:4f:66:
         2f:72:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org