Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131392e302f32342d3234203d3e203238323230.roa
File:                     3138362e3235312e3131392e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          lrciJS9FVWhJXD3MmublEPXn8PVknwCpMQ/Aj+I4j5w=
Subject key identifier:   03:77:1C:96:5B:47:45:FC:94:F0:8C:A1:DE:CB:45:87:BD:A2:5F:21
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       3C0F27A3C33F9CEA128524B96121C03432A82D37
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131392e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:20 +0000
ROA not before:           Tue 12 Mar 2024 19:46:20 +0000
ROA not after:            Tue 11 Mar 2025 19:51:20 +0000
asID:                     28220
IP address blocks:        186.251.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0f:27:a3:c3:3f:9c:ea:12:85:24:b9:61:21:c0:34:32:a8:2d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:20 2024 GMT
            Not After : Mar 11 19:51:20 2025 GMT
        Subject: CN=03771C965B4745FC94F08CA1DECB4587BDA25F21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:7c:40:88:01:33:5e:73:98:f7:fa:89:b1:
                    5c:56:64:03:74:b1:10:1a:37:52:0d:e0:71:d8:51:
                    87:75:85:b5:a8:65:97:64:c8:cc:0d:d6:12:0e:61:
                    a0:c6:f7:73:4e:a1:86:b9:31:44:8f:31:85:ce:ab:
                    9d:96:5f:56:79:75:89:64:25:d4:92:a6:f1:ce:b7:
                    58:bc:83:aa:0a:d3:7c:a6:c7:20:ac:65:99:04:2b:
                    08:53:5d:a0:9c:5f:25:d6:d0:09:0c:7e:0d:3a:43:
                    8d:e6:72:b9:0a:9e:88:0f:01:aa:ed:5c:43:31:b9:
                    c7:9a:28:44:ec:b4:81:b0:ff:4e:ed:fa:99:3d:cd:
                    cb:0b:3d:38:7d:d4:bf:8e:d1:a2:85:a1:a0:7b:42:
                    0e:d6:90:15:60:8c:dc:52:31:a4:2d:89:c0:0b:b5:
                    a1:b1:ba:40:85:61:f2:22:3f:48:56:e1:c4:eb:70:
                    b4:9f:ca:38:b1:76:a2:f9:e6:b5:dc:99:07:c2:91:
                    62:a6:68:72:a3:38:23:46:d9:aa:7d:4c:00:79:43:
                    39:13:6d:a8:db:3e:6b:ed:1a:ea:92:88:3a:3f:14:
                    2b:07:1c:17:d2:36:a2:81:4a:47:86:4f:28:88:60:
                    fb:1e:91:dd:11:43:86:33:0b:f4:4f:8d:91:04:f2:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:77:1C:96:5B:47:45:FC:94:F0:8C:A1:DE:CB:45:87:BD:A2:5F:21
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138362e3235312e3131392e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:fd:3d:fd:87:24:6d:a2:58:9e:7c:7b:4b:f3:22:c7:96:
         a7:fc:fc:be:4a:09:61:4b:44:53:d4:09:a8:5a:6d:27:bc:8d:
         07:f6:b3:5b:02:ce:87:f0:45:1b:22:d7:7f:f2:a1:fe:b1:d9:
         9a:3b:db:c1:bc:9e:5c:be:5c:c2:d3:99:0f:ec:e0:c2:3f:02:
         d4:7b:8d:f7:b0:e0:38:ed:1f:40:7d:d0:71:c4:2c:ad:0a:da:
         e3:03:65:75:59:71:9f:f0:9c:19:11:60:5a:a8:ad:a1:a4:5e:
         73:d8:d7:a4:0e:e3:c5:3e:68:5a:c0:c9:f7:d9:c7:03:36:56:
         fc:5c:77:54:58:19:6d:e3:bc:4f:c7:25:16:e2:6f:f5:a5:18:
         58:e3:49:85:fd:c0:96:43:e6:7c:f9:40:4c:72:f3:65:8e:45:
         75:2a:50:8f:a2:d9:78:f6:f9:9e:46:fc:f1:9e:43:ac:fd:35:
         7a:f6:48:0a:a5:40:85:e3:0f:60:37:e1:08:88:0b:fd:e2:c6:
         67:aa:b6:6f:7a:89:1a:ce:71:a0:74:d8:56:ae:43:53:37:3c:
         78:91:24:40:af:0f:99:26:12:b1:5e:1f:b1:bc:77:7a:9f:3b:
         0a:07:3a:f2:75:19:e9:b7:e2:46:0a:49:ac:4f:54:cf:38:91:
         7f:51:95:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org