Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3132382e302f31372d3137203d3e203238323230.roa
File:                     3138372e36312e3132382e302f31372d3137203d3e203238323230.roa (raw, json)
Hash identifier:          o7TSKO9E/G6e9uT+rB8BkRKQiFVOMheJurV6eWzkA7o=
Subject key identifier:   EC:CA:31:4E:34:5A:A3:6A:7C:A9:23:7F:D6:57:F3:36:C3:EC:D7:8A
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       753015C91077140F622F8EF76FD317A3A563F434
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3132382e302f31372d3137203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:25 +0000
ROA not before:           Tue 12 Mar 2024 19:46:25 +0000
ROA not after:            Tue 11 Mar 2025 19:51:25 +0000
asID:                     28220
IP address blocks:        187.61.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:30:15:c9:10:77:14:0f:62:2f:8e:f7:6f:d3:17:a3:a5:63:f4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:25 2024 GMT
            Not After : Mar 11 19:51:25 2025 GMT
        Subject: CN=ECCA314E345AA36A7CA9237FD657F336C3ECD78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:ac:df:59:cf:02:3e:01:00:55:77:3e:c2:
                    74:95:58:d8:78:5f:41:28:ab:5f:7a:e0:c7:2f:3a:
                    36:2a:50:37:1d:58:8a:aa:bc:2e:19:54:56:67:70:
                    6b:97:f7:0e:1d:d1:80:0f:37:31:a7:7b:fe:ac:2f:
                    b7:03:fd:a6:62:49:dd:88:67:ee:2d:cc:e5:65:72:
                    f2:c5:5e:08:e2:08:75:5d:dd:df:c1:a6:ef:03:c8:
                    8e:7f:74:f3:4f:3e:1e:f6:82:1b:ec:20:27:20:43:
                    c9:23:f4:6d:f7:70:0f:9e:e4:6b:33:7c:d4:34:43:
                    4b:96:0e:bf:68:a7:ee:ee:1b:20:66:e7:79:16:a3:
                    02:40:c3:9d:37:9f:f4:15:f9:8f:73:0d:40:c1:57:
                    be:6a:70:2d:17:6f:de:53:1b:87:1e:3a:10:7f:df:
                    99:1c:36:bd:a8:63:69:47:de:a0:10:16:ac:1d:0f:
                    dc:94:0f:d6:ba:36:8b:57:ef:9c:a5:2d:3c:6b:52:
                    aa:22:ee:4d:20:0e:ab:56:e0:64:98:c8:50:ab:23:
                    3a:2f:f8:4e:76:5a:8f:85:a1:39:3b:b3:1c:ff:3c:
                    78:49:d9:1e:dc:82:3f:49:2f:ce:6f:7d:73:d7:75:
                    ca:57:df:72:0b:48:ef:d3:41:62:1f:a1:ec:de:80:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:31:4E:34:5A:A3:6A:7C:A9:23:7F:D6:57:F3:36:C3:EC:D7:8A
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3132382e302f31372d3137203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:b4:fd:a7:d3:b8:31:09:58:32:07:d2:bd:84:14:3a:53:
         0f:7a:fb:37:d3:29:51:13:2b:32:8c:6f:46:35:96:34:f7:64:
         07:5b:d8:7f:d2:eb:68:4d:41:97:07:d1:e3:7a:9b:0b:4b:35:
         c8:ee:b9:68:cb:88:84:24:97:da:73:d9:96:3a:5a:44:09:5f:
         a1:db:a2:f7:8e:7a:b8:1d:b1:63:fd:49:79:56:92:93:85:34:
         25:b2:c3:89:c9:96:08:7e:77:61:1f:82:17:7a:32:b6:35:f6:
         6b:0f:3e:dc:c7:17:ed:5a:c6:ea:6c:72:d6:a1:ff:d7:41:d1:
         e0:4d:26:e8:f6:23:b8:25:79:ff:bb:10:15:d0:0c:75:a7:ad:
         54:4b:bd:4b:7a:3c:bd:8a:d8:49:7c:e2:8d:5b:89:d8:87:32:
         e0:4c:90:52:13:5f:aa:0c:bd:e3:39:62:e6:79:cd:44:5e:01:
         9d:ee:d5:50:38:96:e6:2e:df:da:9e:b1:66:5f:f9:5f:07:80:
         1a:b4:e4:c6:40:5b:62:b5:2b:e9:01:e2:88:cf:65:0a:f7:b4:
         99:b8:1b:fb:88:ee:cf:57:4d:29:7b:fe:1d:8f:db:62:3d:c6:
         69:dd:e6:36:2b:8e:a9:ba:98:aa:f2:8d:e3:34:de:01:b3:7e:
         e8:fc:91:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org