Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3233362e3139322e302f31392d3139203d3e203238323230.roa
File:                     3138362e3233362e3139322e302f31392d3139203d3e203238323230.roa (raw, json)
Hash identifier:          6h1+rt3m5XICwidESKY1OGX5XRFmBip5klMEbdhzUVY=
Subject key identifier:   9D:22:29:DB:0A:4A:C4:5D:22:33:59:5B:65:E9:E6:12:34:34:6B:33
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       4FA75DEB6B3FFAF2AE2D28B7FF8F34B32A5EF9B4
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3233362e3139322e302f31392d3139203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:22 +0000
ROA not before:           Tue 12 Mar 2024 19:46:22 +0000
ROA not after:            Tue 11 Mar 2025 19:51:22 +0000
asID:                     28220
IP address blocks:        186.236.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a7:5d:eb:6b:3f:fa:f2:ae:2d:28:b7:ff:8f:34:b3:2a:5e:f9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:22 2024 GMT
            Not After : Mar 11 19:51:22 2025 GMT
        Subject: CN=9D2229DB0A4AC45D2233595B65E9E61234346B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:58:de:c0:7d:46:86:26:f8:70:c1:a2:19:
                    33:38:86:f4:12:5e:00:80:47:0d:fa:b8:9b:24:3c:
                    3d:7b:9b:e7:9f:d4:08:37:65:d6:5f:ac:f5:74:91:
                    3a:25:44:bd:ac:b1:0d:8e:20:cb:04:66:eb:6e:b0:
                    25:48:25:fe:34:06:ef:e1:d1:84:e6:c6:f9:ee:33:
                    82:99:da:31:9a:ca:5b:fb:af:e2:94:75:1b:fb:c2:
                    07:15:8c:d3:c1:79:5a:f9:f5:8d:b4:ac:c7:eb:96:
                    7c:8c:20:0c:8b:74:e4:4d:1f:ca:28:98:a0:cf:c0:
                    de:1c:d6:6a:0b:fc:3b:a7:c1:bc:81:96:ba:2c:26:
                    25:7c:00:7a:10:c5:c2:3a:24:29:7e:ef:71:95:51:
                    c5:53:3a:7b:bf:0a:cd:56:52:75:d5:87:6c:9a:2f:
                    a4:d6:ec:5e:a9:c3:cc:18:c6:10:b3:94:23:10:e0:
                    17:d2:3f:d4:e6:25:2a:6a:88:fd:79:b8:3f:9f:c3:
                    6c:ca:8c:4f:7f:cc:ee:06:f7:15:98:d3:eb:84:c9:
                    b7:88:7a:28:03:2c:d3:43:55:06:a5:bb:4a:9b:41:
                    45:9b:6e:95:f6:34:bf:14:dd:71:2e:b1:dc:21:26:
                    9c:bf:a9:db:fc:09:52:a5:7b:3a:5d:fc:50:45:5b:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:22:29:DB:0A:4A:C4:5D:22:33:59:5B:65:E9:E6:12:34:34:6B:33
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3233362e3139322e302f31392d3139203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:4c:2a:a2:36:31:71:18:5d:52:d8:fd:3e:4e:a1:ae:fc:0e:
         1b:7c:1e:05:9e:88:4d:d1:3e:77:54:11:00:6f:aa:31:15:35:
         ee:5c:b7:2f:86:aa:4a:fc:9d:f5:f7:0f:71:2c:2e:9c:25:ce:
         8a:db:a6:5b:3f:02:a9:30:15:c2:7b:2c:a7:40:c2:a4:c3:9f:
         4c:a8:06:08:ee:db:12:42:6b:9a:bf:09:7e:c4:be:94:bb:cc:
         67:73:98:88:66:85:7f:6f:1e:a4:8d:15:ca:67:75:57:25:ae:
         99:97:04:a5:f1:82:a7:c1:cb:80:1f:36:0f:33:0a:7b:24:12:
         ad:f5:01:db:a5:0f:d3:1d:d7:bb:e0:e3:a6:a8:a4:75:8e:8b:
         75:1d:7d:22:8b:a8:a6:88:9a:ad:dd:a2:bc:27:d7:2a:0a:ae:
         f4:fe:f8:07:57:8f:52:8f:ed:23:b0:8e:cd:0c:e0:a2:96:6f:
         ba:b2:b1:6d:5b:0f:59:34:96:46:0f:f3:ab:f6:e7:dd:ca:62:
         cd:00:92:7f:81:4d:e4:28:92:a7:7b:5b:9e:22:ef:91:c9:ba:
         ff:5e:da:ae:84:0a:e8:bc:e2:b9:ac:12:da:88:85:e0:ea:e6:
         1e:9d:cf:d7:be:20:ba:ab:3f:7c:25:c9:e4:f8:0f:93:4a:41:
         13:ea:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org