Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131342e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131342e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          njRZD5UIQgwRkwgM8OWsKObux6bwFDl6lwdO1TSyBHo=
Subject key identifier:   C2:BC:41:03:C6:3B:7D:21:8C:12:7A:01:0C:C3:42:29:EC:C3:EB:97
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       3AD9DA3F6713CFDE41821772DF93A1A415BDBE5C
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131342e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:12 +0000
ROA not before:           Tue 12 Mar 2024 19:46:12 +0000
ROA not after:            Tue 11 Mar 2025 19:51:12 +0000
asID:                     28220
IP address blocks:        186.251.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d9:da:3f:67:13:cf:de:41:82:17:72:df:93:a1:a4:15:bd:be:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:12 2024 GMT
            Not After : Mar 11 19:51:12 2025 GMT
        Subject: CN=C2BC4103C63B7D218C127A010CC34229ECC3EB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:f6:cf:6b:80:ee:de:80:9d:1d:a3:80:29:
                    f8:5c:50:45:0f:11:59:e9:92:c2:45:e8:19:02:49:
                    44:f0:d8:89:58:66:0c:78:83:b7:66:7a:e3:80:b2:
                    0c:f2:f6:29:15:62:01:aa:fd:15:12:02:03:74:f5:
                    dd:55:d8:a6:27:bd:5c:35:88:17:5e:1d:06:08:dc:
                    26:3d:4b:ae:2f:78:83:dc:1a:17:0c:da:d8:1e:a4:
                    73:12:08:12:11:95:e7:07:03:40:ca:7d:f9:e7:5c:
                    78:ae:61:ce:d8:2d:f9:6a:18:7f:71:2a:ae:39:90:
                    2e:c4:a7:7f:d3:f3:3d:af:86:1d:60:b5:7c:3f:d1:
                    b0:34:2d:22:ec:55:b1:82:86:40:da:46:6b:69:a2:
                    80:31:e3:94:28:36:ec:8f:99:35:54:2b:01:b8:cd:
                    00:0e:dc:23:9c:7c:fa:80:39:b1:71:ad:5c:c9:1d:
                    53:0f:19:f9:b0:77:72:10:e7:33:00:79:01:8c:0a:
                    22:a2:b0:a2:2e:89:b4:81:11:41:e5:f6:39:5d:aa:
                    d8:b8:19:76:0e:32:fa:f6:ff:76:c8:db:02:0b:4a:
                    ee:fa:76:bd:19:73:b4:98:fc:cb:30:22:72:ea:19:
                    aa:81:cd:24:76:17:dd:86:32:23:e2:f0:f4:ba:17:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:41:03:C6:3B:7D:21:8C:12:7A:01:0C:C3:42:29:EC:C3:EB:97
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131342e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:d6:08:b0:8f:7d:60:cf:c8:f6:ec:02:e8:9a:cd:f4:ee:
         a1:a4:be:3c:4b:06:93:f4:f8:75:79:e8:21:9f:c8:a9:80:2d:
         47:05:13:12:55:b1:ad:b3:8c:b8:72:5d:4f:82:21:31:f1:79:
         86:4e:62:df:96:1e:cb:c9:be:74:3a:4c:3d:25:ff:7f:49:01:
         74:86:48:4d:e2:6c:83:24:14:d7:f0:d6:39:c6:f7:ac:e9:cc:
         4a:b2:bb:95:77:71:da:26:7b:ad:5d:f8:2c:80:a9:71:1c:d5:
         d0:89:c9:ee:18:44:91:36:a9:7b:79:a8:c1:4b:75:74:e5:a5:
         c3:37:db:33:dc:fe:fb:fc:dd:36:67:50:ce:df:cb:22:e0:20:
         cf:51:e2:31:03:3c:75:b3:a9:49:04:aa:1b:14:b2:84:7d:9d:
         c5:fa:6a:22:c8:85:84:be:21:11:39:41:27:2a:8b:8b:47:67:
         ae:59:8f:ff:6e:bf:e0:7a:f3:15:08:c6:51:9e:29:df:cf:8b:
         4a:98:dc:bf:3f:f4:02:8d:dc:25:88:90:04:1c:cf:6f:37:0b:
         3c:ac:8a:c1:80:fe:09:51:2c:b1:4c:13:3c:d1:23:59:65:7d:
         31:45:d6:60:40:51:58:fb:2e:87:9d:4c:27:99:22:41:00:2f:
         67:7d:75:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org