Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa
File:                     3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          NnDvoOWeaypXnQxxeBOsCEJB/cRW04BbwU7MN1GKEz8=
Subject key identifier:   3B:E4:96:D9:8F:B4:DF:C7:09:68:10:59:31:E3:0C:C1:58:01:EF:D9
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       2BF99CD19EE31B1443C51051CD8F1BD581AD6B4B
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:22 +0000
ROA not before:           Tue 12 Mar 2024 19:46:22 +0000
ROA not after:            Tue 11 Mar 2025 19:51:22 +0000
asID:                     28220
IP address blocks:        186.251.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f9:9c:d1:9e:e3:1b:14:43:c5:10:51:cd:8f:1b:d5:81:ad:6b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:22 2024 GMT
            Not After : Mar 11 19:51:22 2025 GMT
        Subject: CN=3BE496D98FB4DFC70968105931E30CC15801EFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:e7:73:51:b5:fe:bd:9e:6b:a6:93:88:1a:
                    b0:b7:a3:52:89:fd:c8:96:be:a4:4b:20:ef:a5:f1:
                    10:34:1a:ea:3d:64:b0:fb:2e:09:bd:7c:6f:fa:44:
                    c6:8b:d5:fc:72:f9:16:6a:e7:d2:e5:ad:ba:d5:63:
                    ab:0c:ae:fc:49:a7:12:a1:02:a8:2f:f3:ba:8f:5c:
                    05:89:7a:01:b7:a2:15:99:d3:bc:9b:b0:5b:4e:c9:
                    45:3e:d9:b7:1e:94:2a:66:e1:b7:0c:de:43:8a:e0:
                    dc:a5:96:23:01:0f:4f:70:dc:30:83:7d:80:37:a0:
                    8f:b4:d8:12:ba:a6:95:9b:71:33:1c:d2:61:ed:99:
                    d9:57:7f:9e:60:bc:bf:7c:16:cc:c6:6e:53:7e:2f:
                    cc:40:33:fa:b4:23:13:54:6b:d5:01:94:10:32:3c:
                    f8:b5:d9:19:94:ff:33:d0:18:51:24:bd:5c:9a:80:
                    f5:ca:7f:48:1c:3f:91:1e:f8:f3:0f:3a:c9:b8:ca:
                    8b:12:e8:c7:27:21:ec:b2:a9:c0:b4:6f:7b:0e:76:
                    0d:d3:78:7b:93:b7:81:c3:0b:53:32:3a:4b:73:b8:
                    75:3b:96:83:b8:34:91:f5:86:22:5a:82:54:3d:38:
                    fa:a0:f9:04:64:86:51:85:42:c6:72:ec:50:cf:57:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:96:D9:8F:B4:DF:C7:09:68:10:59:31:E3:0C:C1:58:01:EF:D9
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:b1:95:c1:08:ea:9a:ca:39:a4:96:0f:5b:e2:03:d3:a4:
         bf:db:5e:7b:b1:57:68:fb:1c:da:77:d6:46:9c:1e:6d:86:92:
         ca:be:16:5a:b0:7d:53:c8:c4:c8:c8:1e:56:cc:98:c1:2d:14:
         af:89:a3:a6:ff:62:e6:f6:0a:3a:6c:61:4d:61:2b:04:e6:bd:
         31:37:7c:f9:80:1a:40:68:05:08:b9:22:49:f0:6f:47:a8:04:
         40:58:d0:92:af:05:5e:0d:77:61:3c:1b:86:8d:d6:ad:6b:40:
         fe:5b:17:2d:92:4e:2b:92:02:aa:2e:f7:a5:be:db:62:03:a2:
         33:37:46:66:54:ff:c4:a4:3e:2f:c7:a8:e9:a6:0f:5f:63:23:
         c8:95:2e:14:32:a1:d9:9d:cf:5c:4c:27:e1:11:ab:0f:c7:e6:
         73:3c:c4:b3:43:ce:6e:42:2c:68:e3:3e:a5:31:2a:5b:89:32:
         f9:50:fd:bb:56:ff:b9:66:17:c8:6b:ef:8a:b7:e4:59:ad:f5:
         e5:a0:b5:08:9d:7c:4c:4f:3f:c1:76:13:de:61:e2:62:15:b9:
         ed:5a:b5:41:ed:89:2a:d7:0d:9b:32:27:43:53:bc:ca:bc:00:
         33:08:1b:33:f1:10:bf:64:61:e8:dc:57:af:95:2c:d9:09:d6:
         74:b2:e0:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK/mc0Z7jGxRDxRBRzY8b1YGta0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MjJaFw0yNTAzMTExOTUxMjJaMDMxMTAvBgNV
BAMTKDNCRTQ5NkQ5OEZCNERGQzcwOTY4MTA1OTMxRTMwQ0MxNTgwMUVGRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKedzUbX+vZ5rppOIGrC3o1KJ
/ciWvqRLIO+l8RA0Guo9ZLD7Lgm9fG/6RMaL1fxy+RZq59LlrbrVY6sMrvxJpxKh
Aqgv87qPXAWJegG3ohWZ07ybsFtOyUU+2bcelCpm4bcM3kOK4NylliMBD09w3DCD
fYA3oI+02BK6ppWbcTMc0mHtmdlXf55gvL98FszGblN+L8xAM/q0IxNUa9UBlBAy
PPi12RmU/zPQGFEkvVyagPXKf0gcP5Ee+PMPOsm4yosS6McnIeyyqcC0b3sOdg3T
eHuTt4HDC1MyOktzuHU7loO4NJH1hiJaglQ9OPqg+QRkhlGFQsZy7FDPVw83AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO+SW2Y+038cJaBBZMeMMwVgB79kwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+3QwDQYJKoZIhvcNAQELBQADggEBAG8DsZXB
COqayjmklg9b4gPTpL/bXnuxV2j7HNp31kacHm2Gksq+FlqwfVPIxMjIHlbMmMEt
FK+Jo6b/Yub2CjpsYU1hKwTmvTE3fPmAGkBoBQi5Iknwb0eoBEBY0JKvBV4Nd2E8
G4aN1q1rQP5bFy2STiuSAqou96W+22IDojM3RmZU/8SkPi/HqOmmD19jI8iVLhQy
odmdz1xMJ+ERqw/H5nM8xLNDzm5CLGjjPqUxKluJMvlQ/btW/7lmF8hr74q35Fmt
9eWgtQidfExPP8F2E95h4mIVue1atUHtiSrXDZsyJ0NTvMq8ADMIGzPxEL9kYejc
V6+VLNkJ1nSy4CU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org