Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3139322e302f31382d3138203d3e203238323230.roa
File:                     3138372e36312e3139322e302f31382d3138203d3e203238323230.roa (raw, json)
Hash identifier:          8aA+Mo94ZRjD82XxQ7n+GVEc6sZDG17V3IP4a7tvPWo=
Subject key identifier:   49:74:2B:04:71:16:16:3B:6A:B8:CF:F5:EF:E8:45:61:66:97:C5:BF
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       035CDDFD2EB43CAFB51233598EE3660262DFF3CB
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3139322e302f31382d3138203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:23 +0000
ROA not before:           Tue 12 Mar 2024 19:46:23 +0000
ROA not after:            Tue 11 Mar 2025 19:51:23 +0000
asID:                     28220
IP address blocks:        187.61.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5c:dd:fd:2e:b4:3c:af:b5:12:33:59:8e:e3:66:02:62:df:f3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:23 2024 GMT
            Not After : Mar 11 19:51:23 2025 GMT
        Subject: CN=49742B047116163B6AB8CFF5EFE845616697C5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:fa:fc:8f:51:8f:5b:00:77:95:d7:fa:e6:
                    8e:96:5d:02:bd:47:02:38:19:79:4b:4a:c1:98:4f:
                    09:b8:e4:fc:f5:ca:6b:85:07:17:c6:71:34:2c:91:
                    80:2d:d8:88:cf:ea:65:70:8d:83:2a:08:af:4e:36:
                    8e:63:01:0f:c1:9a:8d:84:ff:ad:21:3e:3f:04:d0:
                    03:7e:32:9b:34:1e:56:9d:51:3d:ab:56:b1:86:62:
                    de:48:c5:20:9e:d3:84:08:ea:8d:17:bb:57:ed:40:
                    6c:95:48:8f:2c:0e:62:8d:2e:a1:66:67:52:d5:af:
                    d8:46:5e:46:c7:57:ef:49:8d:c1:f5:0b:23:cc:1a:
                    89:4a:19:2d:5a:ac:10:83:09:70:7b:92:3c:44:50:
                    50:fa:3b:e4:17:5e:1c:f8:32:12:2a:46:f0:5f:ad:
                    c9:af:2e:3b:e8:0f:52:ef:57:8a:eb:33:70:57:e6:
                    80:09:c1:7f:f1:dd:d1:99:1e:88:4a:fb:2d:70:38:
                    ee:1f:d9:17:9f:f1:53:b2:bf:c1:23:77:e7:88:92:
                    d8:f0:e2:4e:11:35:6c:fe:4b:04:97:23:7e:b1:d3:
                    bc:01:d2:8d:c1:da:57:5e:d9:89:43:ea:b0:6a:2c:
                    ff:85:49:40:a4:34:7c:93:3c:78:1d:b3:fe:33:fe:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:74:2B:04:71:16:16:3B:6A:B8:CF:F5:EF:E8:45:61:66:97:C5:BF
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3139322e302f31382d3138203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:82:af:eb:07:6d:6b:80:c3:3a:f3:78:2d:dc:a8:5b:26:
         04:37:62:4f:e3:f3:cd:da:1c:3f:cb:4c:95:55:30:a0:df:8d:
         e9:3d:6f:3e:6e:35:76:e4:ef:b8:aa:a6:17:50:0a:29:c5:f6:
         83:75:19:cd:80:23:f8:05:3b:7a:be:4d:24:55:29:cd:26:02:
         2a:1b:60:b9:2f:36:36:7f:f5:15:cb:78:56:21:c3:93:9a:71:
         2a:8b:81:f0:6f:1f:20:27:fb:71:d4:b0:24:4d:b1:ce:cd:a6:
         a7:01:a4:6c:83:91:d6:85:86:60:71:66:fe:d3:4f:f9:c9:9a:
         c0:22:70:97:89:00:fc:9a:4f:a9:4e:a4:c0:fe:a1:81:6b:29:
         5f:8e:d7:25:83:74:35:76:f2:ec:3e:91:3b:6d:28:74:70:ba:
         3c:4f:99:5a:52:18:9b:22:0e:12:13:01:a4:00:61:9b:ce:e9:
         b8:04:5b:61:d6:49:9b:25:5e:ae:5e:03:40:29:88:ea:a5:6b:
         1f:2b:bf:43:df:d4:a2:b6:e3:2d:92:69:8e:4e:14:b0:ff:01:
         01:c3:91:57:8e:1d:4c:85:9d:99:c7:9b:41:9c:0e:d3:64:d8:
         1e:0e:1f:bf:b3:b3:4b:a3:b7:50:86:1f:ee:9c:2d:5a:53:e7:
         74:fa:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org