Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa
File:                     3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          Q9lY+h8KnmoWO5EUXfhWDJ/s/MUud7D5+6h1PrPqJG8=
Subject key identifier:   A9:58:88:0B:43:52:E1:69:D2:86:E6:51:8A:99:E3:45:3E:56:86:E2
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       3EB072E68D3176F66D137C35621866AB86486775
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:17 +0000
ROA not before:           Tue 12 Mar 2024 19:46:17 +0000
ROA not after:            Tue 11 Mar 2025 19:51:17 +0000
asID:                     28220
IP address blocks:        187.109.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b0:72:e6:8d:31:76:f6:6d:13:7c:35:62:18:66:ab:86:48:67:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:17 2024 GMT
            Not After : Mar 11 19:51:17 2025 GMT
        Subject: CN=A958880B4352E169D286E6518A99E3453E5686E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:a5:0f:7c:aa:97:40:9a:9f:3f:6c:ee:34:
                    60:21:45:17:90:fd:5f:22:21:38:1a:67:45:18:5d:
                    15:f5:d2:79:62:40:e3:8c:1f:a4:1d:3f:ad:6b:29:
                    fc:a0:93:c6:27:a2:85:8e:97:9b:bc:5a:c1:c6:92:
                    7c:5d:5d:4e:cd:93:10:35:15:c3:be:f6:9a:48:93:
                    eb:10:84:f0:96:97:d1:a0:64:a0:bb:72:40:80:d7:
                    69:41:13:5e:cd:88:14:84:4f:43:2f:da:c5:dd:0e:
                    6c:ab:c2:c9:f6:e5:53:ef:b7:a3:c2:83:f5:d9:33:
                    b0:07:04:f1:c2:c7:f5:62:31:1e:d8:96:fe:ff:39:
                    70:30:d8:c6:34:94:6d:7e:ba:20:2f:83:a5:8a:21:
                    70:63:eb:1d:4b:b1:c1:4e:d0:82:f7:0e:f0:e5:2b:
                    d6:f2:63:2e:2d:fb:a6:fe:f6:3f:2f:2f:71:9d:27:
                    3d:32:fe:38:c9:a4:d1:6c:c0:ea:8c:0c:f4:7e:37:
                    80:29:2c:e9:be:c5:56:cd:03:a3:48:c2:5e:be:da:
                    de:30:f1:6f:da:f2:4e:af:2f:3e:48:ca:a0:4e:6c:
                    dc:3e:d4:fa:77:71:68:7b:9c:08:40:19:7c:3e:9a:
                    bb:6e:86:9a:52:af:f6:a9:cf:89:84:a1:1c:a3:17:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:58:88:0B:43:52:E1:69:D2:86:E6:51:8A:99:E3:45:3E:56:86:E2
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3130392e3137362e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:93:26:18:a4:c1:88:2d:9d:f3:6f:1c:6d:4f:58:72:00:62:
         6f:3b:b1:cb:f1:6a:ad:08:dd:5a:5a:66:cc:9a:c3:1c:44:67:
         3d:ae:ed:4b:61:ef:28:db:db:8e:87:7c:3c:6f:99:bb:6e:80:
         d7:bd:b5:c3:52:28:2a:43:ab:e1:38:c5:a6:51:7a:a8:16:42:
         82:a7:21:57:d8:69:be:71:f5:c9:61:51:c0:7b:78:7b:df:28:
         fd:d5:52:6f:cb:7e:f3:16:c1:f7:c2:b1:35:71:29:e1:b2:b8:
         f5:0f:d8:3a:fb:c9:af:21:7b:fe:69:c3:47:b8:fa:e0:bc:f0:
         88:cf:9d:91:03:81:f7:ea:87:4b:c9:64:2f:71:d7:e8:b1:b3:
         4e:f6:26:63:a5:a1:32:6b:23:7d:22:f2:a3:be:5a:97:0e:1b:
         b1:ab:14:7d:af:7c:89:66:af:27:29:f2:42:38:ae:23:46:d6:
         0c:a2:6a:9b:2d:09:2e:aa:62:c0:9a:b9:5d:f3:dd:8f:3c:d5:
         f1:fa:bd:c1:5f:40:34:57:8e:e4:22:27:29:d1:21:fb:ce:eb:
         d8:4f:12:e3:51:fa:dc:80:65:31:e4:69:23:6b:b6:09:7b:a7:
         ba:27:db:66:82:a7:af:b3:87:d8:f9:97:de:de:1a:06:31:38:
         f5:d3:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org