Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3132382e302f31382d3138203d3e203238323230.roa
File:                     3138372e36312e3132382e302f31382d3138203d3e203238323230.roa (raw, json)
Hash identifier:          BFDauXFos51SbP9yJvKb8ek9/e9pI6GooRlw4NzUUwo=
Subject key identifier:   F3:C9:4A:68:14:54:03:4C:AD:F6:B5:B8:CB:24:91:9B:4E:7A:3D:B8
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       1F5A8C6052A8BD8819461188A641E2F348D20FAF
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3132382e302f31382d3138203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:15 +0000
ROA not before:           Tue 12 Mar 2024 19:46:15 +0000
ROA not after:            Tue 11 Mar 2025 19:51:15 +0000
asID:                     28220
IP address blocks:        187.61.128.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:8c:60:52:a8:bd:88:19:46:11:88:a6:41:e2:f3:48:d2:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:15 2024 GMT
            Not After : Mar 11 19:51:15 2025 GMT
        Subject: CN=F3C94A681454034CADF6B5B8CB24919B4E7A3DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:cf:43:18:7e:41:9d:7b:64:e7:4f:80:e0:
                    df:38:f8:7b:1b:61:f7:38:76:5a:7e:46:fe:ce:e6:
                    af:bf:4c:04:57:0f:d8:ec:01:23:c2:46:31:a5:b9:
                    3f:19:bb:17:f6:82:ee:f9:d1:33:c1:72:cd:49:2f:
                    20:ec:58:b5:3c:d5:cc:5d:0b:84:38:70:2a:18:85:
                    3c:d5:2f:cc:6e:16:71:6e:f2:db:d5:bd:59:ee:be:
                    5f:b5:28:5a:d6:50:2b:08:d0:45:1b:2d:4a:11:8b:
                    24:e0:1a:0e:21:97:c9:5c:77:f6:92:74:a1:4e:10:
                    03:25:3f:91:d1:86:c9:79:bc:0c:b9:dc:70:81:bc:
                    c8:d8:07:02:6c:32:98:4a:7c:0d:61:cc:77:0e:71:
                    b0:fd:13:69:22:9a:07:be:aa:cc:1c:8f:a8:9a:a5:
                    a6:74:02:d4:a7:19:3a:b1:1e:83:54:12:69:ee:8b:
                    5d:56:49:48:68:a7:77:21:9e:98:d1:08:68:18:fb:
                    cf:57:23:57:58:16:ca:74:b3:b3:ae:a0:6a:ae:fb:
                    86:41:c0:43:1d:ba:72:03:96:13:cb:d7:74:67:e6:
                    8a:06:f4:4e:d0:d0:58:89:95:1e:9e:80:7b:e2:81:
                    eb:51:27:30:6d:86:05:1a:db:76:7f:2c:3c:77:72:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C9:4A:68:14:54:03:4C:AD:F6:B5:B8:CB:24:91:9B:4E:7A:3D:B8
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3132382e302f31382d3138203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:48:c5:06:40:c4:be:10:9e:5e:91:18:7f:1d:69:4a:cb:f7:
         4e:3d:70:77:fc:20:d7:f0:f6:18:4a:1c:45:c8:c6:42:a4:71:
         ed:09:57:0f:d7:51:74:cd:69:21:bf:38:f8:33:2b:f8:88:5a:
         f3:39:a2:a1:67:52:f7:54:7b:e1:17:c8:2f:cf:00:d5:b3:4f:
         9f:c2:1b:84:ba:f9:e8:09:b6:56:dc:e5:75:e4:ee:99:1e:34:
         87:05:20:bd:46:65:ce:9e:a9:1f:5b:1e:3e:82:03:cf:4b:59:
         ee:04:88:ae:cf:b5:13:4a:11:34:c1:c7:d0:49:75:11:b6:65:
         84:5a:33:a0:b3:d4:01:2d:27:fa:31:a7:0f:96:5a:5c:b3:b8:
         02:e1:8a:e0:fe:c4:4b:df:17:2a:78:15:df:36:54:20:ae:06:
         a5:5d:d9:71:0f:1a:64:b1:a6:94:8e:0e:74:82:ef:65:96:01:
         57:61:ac:5e:de:f4:eb:d9:f6:37:21:18:d5:95:d9:12:84:74:
         6b:c6:41:6b:4e:fc:00:0b:a9:4a:23:cc:f1:99:fe:9a:97:aa:
         06:51:c3:c0:0a:8d:af:b2:60:0e:83:33:c9:2f:4b:ec:20:ca:
         66:c5:25:9f:65:b2:f0:80:fc:c8:aa:e8:37:9b:b5:5e:b5:04:
         22:b4:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org