Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131322e302f32312d3231203d3e203238323230.roa
File:                     3138362e3235312e3131322e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          zTrkeHFwSLoWwWbt/WZgm87q5742aCGRD7agNX0xKZE=
Subject key identifier:   48:07:35:BB:92:78:4D:F0:E4:F6:EB:D2:35:F5:5D:47:4B:1F:A4:C9
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       4D62968F8E28AD6FBCDC4125667EF27782657653
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131322e302f32312d3231203d3e203238323230.roa
Signing time:             Wed 13 Mar 2024 00:17:24 +0000
ROA not before:           Wed 13 Mar 2024 00:12:24 +0000
ROA not after:            Wed 12 Mar 2025 00:17:24 +0000
asID:                     28220
IP address blocks:        186.251.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:62:96:8f:8e:28:ad:6f:bc:dc:41:25:66:7e:f2:77:82:65:76:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 13 00:12:24 2024 GMT
            Not After : Mar 12 00:17:24 2025 GMT
        Subject: CN=480735BB92784DF0E4F6EBD235F55D474B1FA4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:49:1a:de:48:9c:50:14:07:4b:57:df:19:
                    e7:e1:b0:c8:af:cb:84:96:c8:fc:f8:84:b2:2a:ea:
                    6f:4f:db:4d:ed:87:ac:05:cb:dd:7d:7a:9a:c6:9f:
                    0b:51:6d:21:c4:50:a6:64:78:73:e1:32:32:d2:f4:
                    b7:86:34:62:bd:62:4e:f3:1f:cf:16:b2:00:e4:54:
                    24:2d:0b:09:b7:b3:ed:e7:94:1e:bf:f3:5e:df:57:
                    dc:fd:da:27:c7:cd:85:89:17:8a:a0:3b:53:92:a7:
                    de:82:d6:46:f1:f7:51:19:77:c4:a5:b8:89:70:d7:
                    40:ec:f9:82:4f:71:45:1f:29:7b:2e:ea:99:4c:50:
                    fe:1d:7e:0b:01:b5:cb:50:a9:86:8c:96:c2:21:d9:
                    ba:13:88:d0:45:ca:ae:80:02:bc:88:52:c7:04:3c:
                    52:c3:9e:19:e3:fc:1d:08:f0:b7:d6:37:24:fb:e7:
                    83:d4:54:78:9d:7e:b3:2b:18:4a:74:de:d2:39:5a:
                    06:ef:69:86:3f:3a:0b:09:9a:6d:88:2e:ac:fd:05:
                    6a:38:b8:4c:bc:d4:3e:f8:86:5e:f9:b1:ef:0c:e4:
                    bf:84:25:7f:19:b0:b1:0f:55:eb:3d:28:6a:0d:0f:
                    6b:f2:e3:b5:54:1e:72:bf:b3:3e:00:66:23:33:a1:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:07:35:BB:92:78:4D:F0:E4:F6:EB:D2:35:F5:5D:47:4B:1F:A4:C9
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131322e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:af:ac:a0:3d:8b:1c:da:bf:97:cd:c3:2c:db:fc:a0:d3:6a:
         f7:0f:cc:5e:87:3c:d0:03:1f:d7:32:d3:05:30:30:1f:62:cc:
         73:92:4f:f0:a1:a0:06:34:79:5e:d5:7c:e4:01:1f:a8:17:aa:
         93:5d:84:53:62:c7:5c:ab:a3:31:67:2c:90:aa:04:b5:ad:fe:
         8a:c6:7a:53:dd:1b:34:6b:3a:95:9b:c8:c1:7c:37:3b:c6:51:
         28:3e:e3:5d:03:bc:6f:c1:18:35:f9:81:fd:80:09:e0:be:dc:
         14:81:f0:4c:2c:9c:23:77:d4:ab:ed:a0:f4:0a:f8:03:2a:26:
         dd:dd:96:4f:a0:ca:fc:05:44:3e:f9:f8:c7:9f:a9:f0:8b:b7:
         ec:8c:0f:73:e9:34:ff:e8:96:8d:b7:64:76:a0:c1:5b:bc:4c:
         9c:79:55:98:69:bb:a8:f0:bc:0c:cc:a3:67:c5:ec:41:cf:02:
         ec:83:1e:4f:a8:47:6a:99:2b:54:b3:aa:82:78:e3:ba:b3:14:
         41:1d:ea:de:f9:94:d3:df:26:8c:7c:a2:81:95:63:12:05:70:
         99:9c:bf:98:ef:bc:31:f6:66:42:d6:11:0e:92:12:9f:9a:19:
         80:7d:c8:c6:38:7a:c6:95:98:4d:e4:4c:cb:2c:10:4b:cf:f2:
         7b:e2:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org