Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130382e36342e302f32302d3230203d3e203238323230.roa
File:                     3138372e3130382e36342e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          pi4+GPwAB9AdVPSQMd8K89GGuMPVaP+4c4HbQeRVzU0=
Subject key identifier:   4A:93:C5:FA:A2:8E:EE:F4:30:C0:77:A7:21:A1:7A:DC:4A:3E:D9:AF
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       49CDC1F8C4BDCFF1753AE64DF25425D3D828F92B
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130382e36342e302f32302d3230203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:17 +0000
ROA not before:           Tue 12 Mar 2024 19:46:17 +0000
ROA not after:            Tue 11 Mar 2025 19:51:17 +0000
asID:                     28220
IP address blocks:        187.108.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cd:c1:f8:c4:bd:cf:f1:75:3a:e6:4d:f2:54:25:d3:d8:28:f9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:17 2024 GMT
            Not After : Mar 11 19:51:17 2025 GMT
        Subject: CN=4A93C5FAA28EEEF430C077A721A17ADC4A3ED9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e9:51:68:3d:83:8b:3d:7f:cf:3a:a2:13:be:
                    0b:6d:c8:f3:ed:36:b1:b3:05:81:e2:7a:b6:44:c6:
                    ed:47:3d:81:4b:fe:bb:d1:35:66:77:83:91:c3:1c:
                    f1:d4:2f:0d:ff:1f:3f:10:ad:2c:e9:58:ea:3f:1a:
                    19:fd:57:54:ae:5d:a8:1a:bf:04:c0:39:8d:43:0c:
                    f3:72:32:fb:f2:c9:ae:4f:88:3f:b0:6f:e3:ae:b9:
                    aa:c3:6d:d5:13:a3:11:fc:b5:f3:a0:cd:11:54:f7:
                    f3:d1:75:7c:df:f4:b6:ae:8f:70:72:5b:48:f8:dc:
                    a5:eb:8d:7f:71:d5:a3:be:36:bf:a7:b3:3a:14:8d:
                    d4:70:fd:19:22:76:46:18:7f:3b:da:63:76:d6:a8:
                    6d:dc:90:f9:2d:1a:ea:59:db:81:90:c9:8a:f9:81:
                    bd:6f:8f:fa:0e:4e:6b:5b:6e:e3:1e:a9:3d:6c:82:
                    6b:dc:03:cc:ce:0b:ac:58:83:14:94:3b:5a:a3:51:
                    b5:c2:6c:cc:8b:d1:b8:94:ff:ec:80:87:80:3d:e0:
                    21:05:5b:91:f6:7e:fa:e4:66:5a:ce:11:10:36:37:
                    18:20:e5:75:9d:af:f4:72:ec:ee:1d:2c:d1:d1:d1:
                    12:5e:dc:9a:83:19:99:ce:74:92:1f:08:65:ea:42:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:93:C5:FA:A2:8E:EE:F4:30:C0:77:A7:21:A1:7A:DC:4A:3E:D9:AF
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130382e36342e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:52:1f:67:f6:8f:39:0c:3c:e1:23:16:d3:06:12:c1:5a:2a:
         f3:42:30:c4:03:92:23:2a:4d:aa:11:f0:6b:ef:11:41:f7:17:
         4e:49:e6:7e:65:09:9d:61:29:ef:85:94:9f:7f:85:34:0f:6c:
         ac:ae:d7:f5:90:92:aa:b4:05:e9:51:97:bd:3e:13:86:5f:9e:
         fe:b1:31:66:89:34:ce:79:e6:e5:1a:30:ed:f9:a6:8a:c6:86:
         8f:8b:a9:70:f3:c0:d3:6c:52:cf:7e:e2:12:a7:52:f4:bc:92:
         be:35:4c:4a:8d:90:e1:44:4a:86:a4:8b:77:23:f7:03:62:7a:
         17:10:e8:03:cb:2a:1c:f9:73:1f:7f:00:0a:97:2c:bb:04:f8:
         27:94:7e:c1:f8:ae:b3:0d:3f:fb:37:0f:70:9d:f3:6b:2c:c5:
         e5:0f:87:8e:6c:68:07:39:70:a5:18:9a:b2:6c:2d:64:98:22:
         3e:be:93:eb:00:c8:04:b4:25:2a:5f:95:6b:7d:45:bf:66:d0:
         49:f0:4d:2f:52:c2:bb:cc:ca:44:f0:47:d3:b1:38:04:89:fa:
         42:e6:86:94:bc:eb:e0:6b:d7:1a:f4:ed:fa:73:e0:31:d9:69:
         8d:e1:65:9e:a6:c6:51:6a:60:fb:40:3a:c9:94:2c:67:e3:5f:
         fc:ae:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org