Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          VnFruQ3uWObmYTjg3uzHxNS0nK+CNYjLf/b4J+RBw8s=
Subject key identifier:   26:1D:E7:B2:85:AD:00:80:92:FA:FD:96:43:74:C6:FB:1B:83:34:AD
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       6C4BEBE7750E2EBF40A729EE69794C110AE20022
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:12 +0000
ROA not before:           Tue 12 Mar 2024 19:46:12 +0000
ROA not after:            Tue 11 Mar 2025 19:51:12 +0000
asID:                     28220
IP address blocks:        186.251.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4b:eb:e7:75:0e:2e:bf:40:a7:29:ee:69:79:4c:11:0a:e2:00:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:12 2024 GMT
            Not After : Mar 11 19:51:12 2025 GMT
        Subject: CN=261DE7B285AD008092FAFD964374C6FB1B8334AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:eb:ba:65:cf:0f:c0:37:7f:79:c0:f0:1c:
                    a9:56:9c:f3:e9:c8:08:dc:9a:13:89:97:af:12:0d:
                    b7:e0:5c:0b:45:45:d2:78:7c:16:34:37:ab:75:cb:
                    04:c1:3c:2e:65:98:c7:39:cf:ec:f1:ba:44:b6:d0:
                    f0:a7:ef:4b:bb:04:02:77:4c:bc:3d:4f:1e:55:56:
                    2e:ac:bc:2b:17:e7:d8:16:7f:d6:92:5e:76:83:79:
                    f3:9e:2f:4e:8f:a7:5f:0c:a9:30:b7:64:20:aa:51:
                    fc:27:47:18:43:cf:e1:9f:85:b4:4b:71:76:64:0a:
                    e8:01:e8:ec:48:d4:ff:10:22:f5:29:32:9f:eb:ca:
                    33:73:a1:08:9d:9f:03:80:48:5e:bb:58:29:d3:b4:
                    22:72:73:e6:f2:ad:e6:18:76:9f:59:fa:c6:48:3f:
                    88:18:2f:37:d0:10:81:f5:b4:00:62:14:dd:ab:60:
                    78:88:2b:91:f0:08:e5:d8:b0:2b:43:ed:1f:df:f1:
                    72:d8:05:83:d3:23:67:cb:57:70:8f:63:cf:6b:68:
                    2e:3d:32:bd:5b:f2:99:15:b3:1b:ef:e0:8a:73:7e:
                    87:e9:ee:7c:60:5a:c5:06:f0:18:84:5d:64:46:64:
                    9e:fa:d1:0a:79:f2:95:fc:c6:96:c5:2c:b8:c4:7d:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:E7:B2:85:AD:00:80:92:FA:FD:96:43:74:C6:FB:1B:83:34:AD
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131362e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:b9:6a:98:d8:85:72:c4:7e:a1:69:27:55:43:e7:19:d9:
         2f:03:44:22:33:48:a0:ea:a9:13:cd:50:d1:3a:1a:22:be:50:
         e4:2e:c7:86:e6:0c:d9:dc:17:fe:43:f3:d3:b6:78:aa:4d:77:
         d3:38:71:44:67:35:43:ef:32:15:4c:0f:5a:8c:f3:0f:fd:58:
         99:24:9a:2c:9b:5c:5a:b8:ff:4a:06:82:75:f8:12:25:3a:5d:
         64:c8:e0:ad:de:a6:4c:af:37:ed:60:fc:2a:44:db:e4:be:30:
         2e:c2:83:1b:81:bf:58:f0:47:31:d1:cc:d4:8a:b3:62:0f:85:
         69:0f:ca:4e:f9:15:24:5c:b3:6f:6e:76:7c:3c:ad:17:91:4f:
         da:4c:cd:10:5e:03:97:63:b5:1c:3c:a4:38:b7:d9:b3:0a:e2:
         49:7d:8b:14:2a:5d:4e:65:f4:4e:cd:1b:ef:4b:f0:89:8d:1f:
         18:9a:69:37:49:c9:5b:ac:02:35:d4:b1:39:29:f6:73:96:7f:
         6c:1a:4b:38:fe:86:59:83:fd:3e:b5:86:43:be:c8:c9:13:61:
         1f:ac:a8:fd:08:08:3d:5d:67:c6:b3:6a:de:7c:e2:31:39:4f:
         1a:52:85:97:db:7f:c5:8d:ef:b9:79:2e:8f:1e:82:f0:a9:ee:
         d2:ea:80:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbEvr53UOLr9ApynuaXlMEQriACIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTJaFw0yNTAzMTExOTUxMTJaMDMxMTAvBgNV
BAMTKDI2MURFN0IyODVBRDAwODA5MkZBRkQ5NjQzNzRDNkZCMUI4MzM0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oeu6Zc8PwDd/ecDwHKlWnPPp
yAjcmhOJl68SDbfgXAtFRdJ4fBY0N6t1ywTBPC5lmMc5z+zxukS20PCn70u7BAJ3
TLw9Tx5VVi6svCsX59gWf9aSXnaDefOeL06Pp18MqTC3ZCCqUfwnRxhDz+GfhbRL
cXZkCugB6OxI1P8QIvUpMp/ryjNzoQidnwOASF67WCnTtCJyc+byreYYdp9Z+sZI
P4gYLzfQEIH1tABiFN2rYHiIK5HwCOXYsCtD7R/f8XLYBYPTI2fLV3CPY89raC49
Mr1b8pkVsxvv4Ipzfofp7nxgWsUG8BiEXWRGZJ760Qp58pX8xpbFLLjEff1nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJh3nsoWtAICS+v2WQ3TG+xuDNK0wHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+3QwDQYJKoZIhvcNAQELBQADggEBAFK2uWqY
2IVyxH6haSdVQ+cZ2S8DRCIzSKDqqRPNUNE6GiK+UOQux4bmDNncF/5D89O2eKpN
d9M4cURnNUPvMhVMD1qM8w/9WJkkmiybXFq4/0oGgnX4EiU6XWTI4K3epkyvN+1g
/CpE2+S+MC7CgxuBv1jwRzHRzNSKs2IPhWkPyk75FSRcs29udnw8rReRT9pMzRBe
A5djtRw8pDi32bMK4kl9ixQqXU5l9E7NG+9L8ImNHxiaaTdJyVusAjXUsTkp9nOW
f2waSzj+hlmD/T61hkO+yMkTYR+sqP0ICD1dZ8azat584jE5TxpShZfbf8WN77l5
Lo8egvCp7tLqgHg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org