Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131372e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131372e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          PgmquujIiRtndja0WPEToSaTXSDKFMmw1BZWfoJqJmk=
Subject key identifier:   8E:E4:C1:B3:E5:39:4B:99:F4:F8:BD:ED:C7:B4:59:E0:93:82:2B:6C
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       5E5B76D88412ACBFC63133918ED31381D1153D83
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131372e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:26 +0000
ROA not before:           Tue 12 Mar 2024 19:46:26 +0000
ROA not after:            Tue 11 Mar 2025 19:51:26 +0000
asID:                     28220
IP address blocks:        186.251.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5b:76:d8:84:12:ac:bf:c6:31:33:91:8e:d3:13:81:d1:15:3d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:26 2024 GMT
            Not After : Mar 11 19:51:26 2025 GMT
        Subject: CN=8EE4C1B3E5394B99F4F8BDEDC7B459E093822B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:5c:20:19:72:36:a7:2d:24:ca:29:51:5b:
                    ab:93:30:41:ae:9b:2f:9a:9f:cf:57:de:cd:04:53:
                    a9:64:a1:7f:7a:4e:c3:4a:9c:76:f0:1e:7f:8e:64:
                    5b:c8:ea:12:03:78:2d:1c:63:11:64:fe:2d:ca:f3:
                    a7:a8:4e:a9:ff:ed:03:af:b4:90:18:a7:85:24:e7:
                    9e:2c:79:9f:46:4f:83:dc:69:c5:24:f7:d5:2e:56:
                    85:e4:2c:4c:0c:76:2f:a5:25:95:fd:ed:d3:14:2c:
                    b6:d6:86:d0:2a:c3:bf:97:8d:f3:bf:c9:3b:75:db:
                    5b:18:f9:ec:b5:74:9b:a3:7c:49:cb:bf:f9:68:f1:
                    58:c4:e7:ae:aa:30:ba:a5:c7:f9:fb:9e:c8:18:60:
                    f4:85:ca:35:f1:1b:9d:e8:11:9c:1c:a0:af:47:e5:
                    d5:a3:1e:4f:66:c4:1b:2e:92:b5:07:95:d2:45:f3:
                    d2:15:68:1d:db:fb:2c:65:dc:e0:82:af:60:35:81:
                    8f:d0:38:cb:48:72:42:5c:4a:b8:d6:c1:9f:8a:46:
                    7e:77:65:e0:c0:55:52:08:1d:1e:91:ff:a8:72:5f:
                    e8:ff:7f:b6:da:67:61:1b:5b:fd:17:d3:82:cd:d9:
                    cb:0b:9f:97:e1:d2:02:3e:10:64:9e:66:33:a9:d5:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:C1:B3:E5:39:4B:99:F4:F8:BD:ED:C7:B4:59:E0:93:82:2B:6C
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131372e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:f2:14:46:e8:3b:07:4a:ed:a9:ec:c7:8c:a4:bb:15:d0:
         87:5b:2c:97:31:4e:eb:0f:50:40:dc:d1:12:e4:5e:41:5d:bc:
         b9:9c:cd:e4:21:ad:2d:fa:0c:c3:eb:76:57:c4:de:99:d2:0d:
         7b:12:38:b8:40:91:2b:a4:04:8f:52:04:c4:82:1a:4f:f9:9c:
         65:20:e2:93:a7:32:54:87:ca:b7:99:2b:69:9c:c3:5c:f2:75:
         09:06:ed:97:33:36:6b:1e:0b:ed:02:99:ee:63:fa:05:df:07:
         49:9e:f1:bd:3d:ed:bb:81:34:ef:26:a2:f2:a1:33:81:f9:53:
         5d:03:66:5a:da:c3:85:2c:65:62:cb:79:7e:ca:ec:86:ca:73:
         61:83:d3:5a:16:6e:c1:aa:bb:f5:c7:6f:14:cf:30:b3:cb:0e:
         d0:4b:e1:7e:7e:49:66:d1:db:20:d4:03:e9:29:c1:2f:01:9c:
         7f:02:96:c4:04:55:48:d9:16:4b:32:d9:af:f4:cd:db:4b:0d:
         e0:e5:4d:4d:5c:6f:77:1b:c5:ba:12:a2:a7:83:12:66:62:ab:
         00:81:26:91:d0:f7:84:6d:2e:a1:0f:59:78:63:14:f7:cd:75:
         3e:cc:df:c1:52:e1:9a:f6:d8:ad:58:8b:3d:73:22:b7:f7:a7:
         e0:44:6c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org