Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          8rZKOHiVGhh0fTxjtE3sCcoi0gRyOHaLk5mRLOS++3U=
Subject key identifier:   D6:3E:53:5B:DC:29:8F:80:9D:96:D9:54:DA:8B:6E:00:1F:4A:43:A5
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       372FA4350932C5AE2AABB9654351899E6E7F486C
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:19 +0000
ROA not before:           Tue 12 Mar 2024 19:46:19 +0000
ROA not after:            Tue 11 Mar 2025 19:51:19 +0000
asID:                     28220
IP address blocks:        186.251.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2f:a4:35:09:32:c5:ae:2a:ab:b9:65:43:51:89:9e:6e:7f:48:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:19 2024 GMT
            Not After : Mar 11 19:51:19 2025 GMT
        Subject: CN=D63E535BDC298F809D96D954DA8B6E001F4A43A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:20:4c:05:0e:87:f2:bf:62:2f:24:33:1a:
                    c1:9c:7b:39:68:75:46:f9:67:a8:89:4e:3a:83:29:
                    d0:ec:c7:18:73:e9:b6:72:93:27:73:af:b6:23:db:
                    4c:ce:2a:e8:41:67:7b:62:80:59:8a:62:70:14:91:
                    11:37:66:f3:d8:8d:98:f2:6b:4d:23:59:37:33:0f:
                    21:31:b6:53:af:31:d6:ef:1a:b0:74:eb:49:1e:69:
                    5d:fa:e8:cf:99:1c:d0:d7:99:de:56:92:0f:fb:f5:
                    8d:8e:fe:3a:46:ee:5d:e0:a1:f3:6a:58:74:3a:b4:
                    40:55:aa:78:fb:57:ef:db:c1:c3:16:40:03:85:83:
                    2c:96:19:00:4c:f3:e9:9b:6b:d5:e7:c1:12:cf:bd:
                    f7:a3:1f:10:98:8a:be:fc:52:36:40:e2:0e:c0:b1:
                    e8:e0:52:8e:b2:86:52:59:a5:38:c6:d5:13:2e:ab:
                    1b:1c:a4:dd:cb:42:69:9f:b2:9d:cf:2c:e3:2f:aa:
                    f6:89:64:60:ba:ac:56:76:e7:6a:99:a4:52:d4:1d:
                    85:30:24:7a:cb:20:d9:94:5e:5f:69:e5:3c:95:d2:
                    25:be:8b:ea:48:40:d9:53:97:47:56:73:a3:99:11:
                    15:d4:9d:67:46:bb:a8:a0:0b:ad:bd:60:af:b9:89:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:53:5B:DC:29:8F:80:9D:96:D9:54:DA:8B:6E:00:1F:4A:43:A5
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131332e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:90:18:f3:62:fd:95:a2:fa:e8:6b:3d:2f:05:c8:ca:1b:7d:
         9a:d8:3d:d9:43:d5:93:9e:75:73:4d:fb:f1:f6:4b:61:0c:31:
         cf:79:66:bd:cf:ab:72:01:00:1f:f0:73:bd:36:e2:d1:40:0d:
         fb:fc:67:33:83:c1:4c:de:1e:54:f7:2b:20:15:9e:d0:c6:e5:
         95:91:02:7e:01:ea:be:8d:25:7f:dd:11:47:5b:7c:68:8f:89:
         44:ee:72:53:f5:05:ba:f5:7b:b5:54:8d:6c:9f:c0:37:7d:7d:
         06:8d:a4:d0:56:5a:11:bd:69:9a:6d:cd:36:f5:f4:a4:e0:35:
         9d:76:e9:75:69:50:8c:80:a7:b3:d9:2b:9b:44:b8:3d:77:1a:
         48:c1:91:f5:45:fd:7d:72:7c:61:38:06:f8:93:d7:4b:b1:b6:
         d9:0e:55:9d:f9:b5:c0:d6:13:52:70:45:3a:51:b2:0d:72:c6:
         52:d3:e0:53:8d:61:e4:84:b9:d3:b4:27:37:ed:a2:fb:2b:3b:
         ff:c4:0a:00:60:bd:d8:b0:fd:f9:b2:a5:0c:ac:62:47:20:21:
         29:d2:2b:9a:67:e7:4b:b8:b1:e7:67:84:59:2f:48:de:68:08:
         99:0d:cf:60:b5:aa:87:84:17:5f:1f:48:3a:86:d6:77:ff:d4:
         f2:b0:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org