Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131382e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131382e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          ZqNd+z23XCCw1WLMoGz+04YEq7JiYXxkC7ZKWilD3d4=
Subject key identifier:   83:17:15:59:FB:0A:37:F4:09:4C:3B:36:2D:30:BF:CE:71:28:75:6A
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       6684738A32777006068D6773FC047FDB0D49E174
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131382e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:10 +0000
ROA not before:           Tue 12 Mar 2024 19:46:10 +0000
ROA not after:            Tue 11 Mar 2025 19:51:10 +0000
asID:                     28220
IP address blocks:        186.251.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:73:8a:32:77:70:06:06:8d:67:73:fc:04:7f:db:0d:49:e1:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:10 2024 GMT
            Not After : Mar 11 19:51:10 2025 GMT
        Subject: CN=83171559FB0A37F4094C3B362D30BFCE7128756A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:cc:de:8c:29:fa:ec:3c:7f:30:fc:89:39:
                    af:ce:50:f1:da:18:8e:27:32:52:f8:9a:03:62:cf:
                    0d:b5:3d:10:75:82:fc:a9:03:8d:1b:58:fe:89:87:
                    71:51:a7:8c:fe:42:de:55:a9:30:5b:46:57:e3:42:
                    82:72:38:34:61:93:6c:dd:d0:65:3f:13:65:07:50:
                    aa:1f:f1:b4:75:3d:77:c2:ac:f8:d5:bb:c7:6c:38:
                    2e:dd:2a:be:d3:0d:02:05:f2:06:c3:7e:d8:be:44:
                    b8:13:f0:fc:6e:4a:21:17:3b:51:09:a1:6f:f7:aa:
                    9f:18:19:ee:dc:6f:fe:6b:08:12:18:a9:9b:39:62:
                    4c:5e:4d:b6:8c:39:8d:ac:46:75:db:3e:04:7a:ed:
                    6e:8f:95:70:9a:2c:2e:5a:e6:79:8e:6a:cc:b8:f9:
                    23:f9:e2:67:00:d4:95:93:eb:10:d1:54:36:fa:a4:
                    8d:b9:77:f8:fc:e1:c6:61:e6:a6:0a:c5:37:12:37:
                    34:2a:49:e4:e5:ea:97:7d:05:38:99:82:1c:7a:41:
                    17:ab:f3:ca:ff:46:78:1c:b8:d0:5a:5e:76:a4:3a:
                    44:69:a7:e5:a3:f0:fa:7c:95:34:76:2a:8d:6d:89:
                    d9:d1:87:be:26:08:81:98:b0:bd:a9:2c:a5:2d:51:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:17:15:59:FB:0A:37:F4:09:4C:3B:36:2D:30:BF:CE:71:28:75:6A
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131382e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:41:59:a9:6a:2a:45:1c:67:73:b0:38:d8:92:af:60:70:76:
         6f:a0:2d:fa:60:48:e0:19:ff:c7:db:83:44:af:0d:a9:77:22:
         c0:e1:74:7f:22:16:fb:b9:7a:cf:9b:ca:50:f4:5c:98:4f:e6:
         49:48:7f:ed:4c:de:8c:20:88:1d:d5:22:9b:47:9e:be:27:56:
         6a:14:de:6e:c6:ce:1b:4a:7c:b6:08:1e:98:b4:55:57:54:e8:
         be:d7:fa:b1:39:96:1f:a7:71:12:f2:12:5d:26:7f:20:d2:bb:
         30:ee:b0:30:47:7d:0f:bb:ef:ab:da:b3:cc:c8:3b:e0:23:9f:
         42:d2:06:f4:2f:b6:6a:ea:28:25:7e:77:e7:bf:9f:78:c2:be:
         2d:22:94:f7:2e:3b:68:da:66:3f:82:98:66:77:5e:c7:3d:25:
         71:6e:4d:d1:d8:24:d6:67:0d:07:ab:70:95:25:eb:8e:5a:af:
         cf:30:cd:7c:59:5e:4c:f4:c9:9d:84:67:53:2c:7d:91:67:63:
         cd:92:e3:ed:6a:25:87:b7:0d:46:c1:cd:d4:cd:11:81:4c:23:
         cb:89:d8:61:55:51:3c:49:ce:4f:6f:68:9e:4e:89:6e:a1:77:
         53:3c:e5:dd:e2:99:7b:b1:2e:91:e5:45:2d:71:cd:f5:ad:6d:
         aa:bc:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org