Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa
File:                     3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          pnkizs8bwlFXK+WVqGmjYPW5/mLLiQ/BHVX/VNt4aXU=
Subject key identifier:   AC:78:7C:8D:15:46:5E:5D:BE:C2:EF:F7:D1:FB:A0:EA:D2:21:54:DA
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       5D837637904DD1E40B93251204C26A0FA9946096
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:10 +0000
ROA not before:           Tue 12 Mar 2024 19:46:10 +0000
ROA not after:            Tue 11 Mar 2025 19:51:10 +0000
asID:                     28220
IP address blocks:        186.251.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:83:76:37:90:4d:d1:e4:0b:93:25:12:04:c2:6a:0f:a9:94:60:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:10 2024 GMT
            Not After : Mar 11 19:51:10 2025 GMT
        Subject: CN=AC787C8D15465E5DBEC2EFF7D1FBA0EAD22154DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:0b:83:62:cd:d3:3a:c4:8a:3c:12:63:4c:
                    0a:67:be:b3:cc:91:a4:78:f2:91:ea:9f:25:53:9d:
                    5c:fa:89:8e:ee:8c:bb:b8:fb:cb:fb:9d:14:bb:a5:
                    68:98:b2:87:e9:98:da:c5:42:48:cd:ee:ed:9f:9f:
                    41:b9:dd:b4:8f:51:37:94:25:18:ef:88:c6:82:4d:
                    e9:e8:a8:5f:1b:a2:38:97:e0:0a:ac:92:1f:6f:75:
                    90:45:1a:8f:77:cc:5b:48:11:56:77:83:0f:4e:cb:
                    1e:ba:da:b3:ca:a3:60:35:93:02:d7:65:c6:be:9a:
                    f1:bd:21:a8:b9:c0:38:d4:38:f4:22:5d:90:82:95:
                    f2:18:f3:08:1b:26:f9:69:85:93:a1:1c:5e:8a:18:
                    80:eb:21:17:1c:6f:03:dd:33:86:c0:f6:ee:5e:97:
                    54:69:ea:48:b8:b2:3e:55:5f:90:ce:97:fb:83:d8:
                    ef:1b:db:7a:7e:0a:90:59:57:3d:9e:41:c1:ec:b1:
                    ec:45:ce:d5:b7:48:89:b2:14:f8:af:69:14:74:18:
                    ca:9f:96:07:81:43:11:0a:b1:99:09:69:b0:a9:12:
                    e4:ce:f1:c1:f5:d8:15:53:48:f2:84:a7:51:a5:17:
                    39:2f:e6:01:ff:ff:b1:4e:28:74:a9:d2:9a:14:f4:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:7C:8D:15:46:5E:5D:BE:C2:EF:F7:D1:FB:A0:EA:D2:21:54:DA
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131322e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:55:e6:da:65:01:b1:9c:07:01:f1:be:81:b2:2c:7d:ee:c0:
         28:57:d6:63:20:05:5d:de:fd:5f:81:99:c7:0d:d0:ef:e4:71:
         65:2d:d5:86:bb:bd:ed:b1:15:b5:13:25:5c:10:32:f9:68:5f:
         84:b6:91:86:3c:c4:e9:64:bf:40:df:20:ef:31:fa:92:60:a3:
         ea:ba:b9:2b:4c:af:4c:8b:57:4e:6a:2b:8c:e0:1c:c9:ed:57:
         3a:6e:a1:65:52:6e:90:5c:c9:ee:bb:42:58:64:40:b2:38:71:
         d4:68:1b:ea:af:40:d7:a8:57:1a:c7:6b:54:7c:39:db:bb:80:
         05:f5:56:95:05:a2:90:f5:13:f9:71:c8:3a:27:62:a6:fb:8a:
         a1:99:ce:5a:9e:cc:44:89:2b:d7:93:1a:1f:3d:34:38:ab:ec:
         c7:a0:3a:b8:b8:a4:6c:61:9d:56:75:df:bb:64:5b:3e:db:e4:
         ab:d0:60:b8:b1:52:1b:28:25:78:7f:85:53:e2:5c:40:57:34:
         16:bc:6c:0a:f0:a6:d4:86:53:ed:47:70:9f:08:56:fd:12:32:
         e1:4a:d9:c1:20:1e:0d:89:48:95:71:fa:cb:0f:7e:ab:84:18:
         3b:86:e2:7d:08:f6:48:e2:6e:1c:c9:16:2c:8e:1d:ec:af:1a:
         b5:47:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org