Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          hx779RCV9uPBa/oWNPmo/SUNJUz5k3kMRelmBxma+pE=
Subject key identifier:   01:05:ED:1E:AE:43:7E:FB:67:3B:B1:20:88:43:9E:09:AE:C4:C9:44
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       3EE447C696BC21F789B4CDBBEE661333350F08
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:13 +0000
ROA not before:           Tue 12 Mar 2024 19:46:13 +0000
ROA not after:            Tue 11 Mar 2025 19:51:13 +0000
asID:                     28220
IP address blocks:        186.251.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:47:c6:96:bc:21:f7:89:b4:cd:bb:ee:66:13:33:35:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:13 2024 GMT
            Not After : Mar 11 19:51:13 2025 GMT
        Subject: CN=0105ED1EAE437EFB673BB12088439E09AEC4C944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:00:09:f9:86:60:a1:cf:1a:c0:70:02:c3:
                    42:1b:e8:8d:f6:33:b9:a6:c6:f7:b3:67:9e:8e:ed:
                    ff:26:30:66:ec:8a:22:74:65:aa:ac:22:d0:83:6f:
                    cd:fb:38:3e:93:bf:e0:54:b2:99:98:df:98:fe:ce:
                    fc:fb:7e:d6:7f:77:1c:71:f4:60:d8:ed:8a:3b:58:
                    43:07:75:53:ca:c7:46:30:2a:c9:fa:a1:a0:e7:d4:
                    9b:bd:a8:15:6f:e3:48:d3:e6:d3:43:85:75:2c:b2:
                    c2:c7:ce:c0:d3:f4:1b:f1:46:ab:5a:b7:56:b0:1b:
                    06:6e:8f:80:74:cb:3a:e6:ec:f2:d0:2e:51:af:4b:
                    c2:94:d2:e6:97:dc:16:bd:c0:3c:93:65:ee:a5:c6:
                    ce:69:97:20:fd:38:c1:56:e0:35:90:9d:f2:66:e5:
                    91:69:ce:df:28:8d:a5:10:58:51:b8:2c:4f:82:73:
                    ea:4f:1a:6b:fd:e3:76:aa:c4:88:79:0b:c4:ed:a3:
                    d9:61:1e:f2:8d:87:9a:98:20:10:f7:04:27:01:ed:
                    bd:08:f3:eb:4e:ea:6d:e3:b8:10:d5:d4:75:4e:91:
                    61:f7:b7:0a:d4:0b:2c:3f:1a:df:34:cf:a7:dc:dd:
                    23:6b:f8:1b:f1:1d:b7:40:2e:3d:89:8a:47:76:ed:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:ED:1E:AE:43:7E:FB:67:3B:B1:20:88:43:9E:09:AE:C4:C9:44
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131352e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:98:16:1a:37:41:c1:8b:7e:05:b2:d5:ff:c3:b7:48:1a:3a:
         6e:f0:44:1a:7f:5d:2b:41:66:fc:96:ca:c4:0d:d7:d3:37:bf:
         3d:4a:c4:57:92:1c:d1:93:86:d5:c3:ed:69:ab:58:3a:a7:76:
         39:ab:51:8a:91:df:53:cf:54:88:70:53:ca:a7:e2:92:1d:0e:
         8a:66:e5:0c:0e:eb:b6:06:17:fc:4f:81:28:e2:6f:32:68:14:
         e2:e3:89:66:1d:71:1a:ec:64:67:d9:11:bf:8c:c1:79:ae:98:
         e3:98:59:17:78:a8:db:f4:ec:e6:a4:68:b1:e3:4f:5e:62:6e:
         44:b1:a1:ba:56:cb:9c:dc:d2:8a:11:74:2f:ca:b3:5b:64:1e:
         c7:d0:85:7c:8e:be:4f:ac:e4:ef:2c:ca:a3:9f:a7:fd:72:74:
         55:a1:2b:1e:b2:2b:46:8b:0b:81:28:cc:f8:96:93:53:b1:8a:
         e0:40:1b:d9:32:25:1d:dc:81:c6:45:72:6e:26:c4:31:4c:ac:
         ed:c4:58:b7:1d:d6:c5:e9:8c:e9:0f:ca:11:6c:9e:93:b5:6a:
         15:35:4f:82:8f:1d:1a:f9:1e:90:24:87:27:7a:56:c5:f1:bf:
         1e:45:b2:64:8c:a1:b7:35:ba:ac:4c:b0:05:e4:cf:1e:ff:fb:
         25:29:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org