Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa
File:                     3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa (raw, json)
Hash identifier:          6JLfrsbiAS/+Dtp0ycJ/FPXblGAfCPLbRhHUGLZBNFM=
Subject key identifier:   30:38:8C:FC:84:62:49:D9:DC:E3:67:FB:BE:F0:50:C6:1E:10:F7:31
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       47C7C8D4885B7CB2DA95AB2BFB600585D9EE0E53
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:11 +0000
ROA not before:           Tue 12 Mar 2024 19:46:11 +0000
ROA not after:            Tue 11 Mar 2025 19:51:11 +0000
asID:                     28220
IP address blocks:        187.111.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c7:c8:d4:88:5b:7c:b2:da:95:ab:2b:fb:60:05:85:d9:ee:0e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:11 2024 GMT
            Not After : Mar 11 19:51:11 2025 GMT
        Subject: CN=30388CFC846249D9DCE367FBBEF050C61E10F731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5c:dd:e2:2f:d2:2c:a2:56:d1:e6:1a:c4:74:
                    a5:c5:15:90:01:2f:e7:98:9f:36:c0:65:84:f1:3a:
                    7a:b7:ee:8f:c2:02:39:d4:8d:c8:d4:b8:a6:2a:b6:
                    da:1d:03:ee:09:0b:1e:ce:a9:9c:28:ab:81:5a:c3:
                    9a:6c:05:32:bc:70:b4:91:78:79:3d:64:ab:80:b2:
                    89:8f:05:e0:6b:76:f2:d2:62:39:98:50:3c:f4:17:
                    de:2f:1c:de:c7:73:29:cf:36:50:e7:db:5e:7c:6e:
                    b3:c8:31:12:1d:18:67:f9:a3:bf:56:3c:aa:28:a5:
                    b7:2d:a7:35:79:a4:3f:7e:4f:14:40:c4:51:7d:fb:
                    43:e8:eb:d8:3e:b2:e4:ef:52:d6:7a:b4:9b:18:3c:
                    f9:b2:05:ef:12:fa:de:1e:e7:8e:a6:6a:6f:22:a0:
                    5b:4d:20:e3:cf:d9:07:c1:11:33:7e:b1:11:86:5f:
                    ff:ed:da:14:79:f3:bf:bf:bf:e6:f7:5c:68:79:26:
                    b1:76:10:9f:6a:9e:52:22:05:d5:b2:c2:ad:07:d9:
                    0f:d9:28:84:5a:ed:ef:8a:58:0f:d4:0e:52:59:62:
                    00:44:d0:e8:98:3a:a7:5e:b9:3e:d0:a2:81:a0:44:
                    e7:b3:e9:0a:22:ef:79:16:6d:23:3e:fe:dd:d5:f7:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:8C:FC:84:62:49:D9:DC:E3:67:FB:BE:F0:50:C6:1E:10:F7:31
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e3131312e3232342e302f31392d3139203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:91:74:b3:7a:8b:30:ca:a3:b5:7e:89:5b:fc:7e:22:a6:4f:
         5c:b2:86:6a:ce:5f:dc:6d:fe:7d:20:54:7a:83:05:e8:4d:60:
         e3:21:b2:e8:b6:db:b0:f6:3f:47:1a:88:fc:61:18:78:01:5f:
         03:f2:6a:97:cc:51:8d:55:47:c4:ec:52:ff:fa:76:f7:7c:15:
         2e:54:57:1e:92:ad:38:6c:93:ce:ba:43:91:a6:d5:d3:40:a3:
         63:84:ee:74:95:27:92:a7:a3:4f:10:30:2e:8a:c8:6f:8e:34:
         96:0e:c4:ed:16:42:42:33:2d:d5:b7:2f:7e:e9:ed:f3:57:ff:
         23:35:9b:e4:d7:6d:bd:72:47:05:c6:e7:d6:e8:22:94:df:1f:
         12:95:7a:1c:30:99:36:fd:7e:80:d3:7c:fc:41:c8:ab:db:b9:
         63:87:9e:59:6e:c2:d7:e0:73:07:5a:64:85:8f:e9:83:49:2e:
         9d:41:5d:4a:bf:05:ba:2d:e5:2e:3a:df:87:ed:3a:27:6f:81:
         48:95:3d:25:6f:e2:ad:10:e7:b2:64:b9:1d:28:4d:ab:0e:9a:
         50:1b:e1:25:3d:b9:af:cb:58:d5:0c:cd:ff:d2:93:1d:fe:e5:
         e9:ff:b5:c1:99:71:ba:09:a4:b3:0a:0f:50:1c:57:44:15:c2:
         14:bf:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org