Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3232342e302f32312d3231203d3e203238323230.roa
File:                     3138372e36312e3232342e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          VMyhMJhuEMWoK4oh2KYzN3SJz3atGumutMX3It+UR/8=
Subject key identifier:   C1:C1:D4:64:84:93:95:D3:FC:7D:73:42:84:40:FD:33:CE:2D:76:DA
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       58C47083857AD5E63837E70B98C920BDB5B13ACC
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3232342e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:21 +0000
ROA not before:           Tue 12 Mar 2024 19:46:21 +0000
ROA not after:            Tue 11 Mar 2025 19:51:21 +0000
asID:                     28220
IP address blocks:        187.61.224.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:70:83:85:7a:d5:e6:38:37:e7:0b:98:c9:20:bd:b5:b1:3a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:21 2024 GMT
            Not After : Mar 11 19:51:21 2025 GMT
        Subject: CN=C1C1D464849395D3FC7D73428440FD33CE2D76DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:93:40:76:1a:70:0e:5a:11:7e:42:2f:79:
                    14:7b:b8:ef:a4:48:7d:07:45:79:7c:e7:ea:72:35:
                    7e:da:51:6d:af:03:c9:74:a4:19:55:b8:b4:a7:b9:
                    bf:cd:f1:7d:b0:70:27:9d:91:e8:4a:78:47:88:92:
                    f0:be:17:a2:fb:3a:af:c2:0e:12:f3:82:81:83:12:
                    fc:68:1e:06:af:5f:72:41:9e:e7:2a:f6:c9:49:ff:
                    8c:80:d4:03:32:5a:0d:57:c1:ab:e7:a4:f1:0d:c5:
                    7a:c1:16:4a:52:a6:00:8c:ae:4e:ae:0b:23:fb:17:
                    fc:e3:da:0e:bb:42:c2:1c:53:72:b3:51:59:ff:5a:
                    f9:62:2f:64:06:b4:da:e6:c4:9a:91:dc:63:b7:fb:
                    5e:be:a8:75:0e:e3:1b:97:b3:86:59:f5:e8:a5:75:
                    41:1b:d8:67:3a:9e:54:40:d4:bd:05:4f:57:76:de:
                    ce:c3:e4:be:4e:c7:79:8d:63:58:ab:0b:0f:aa:6c:
                    81:80:25:a4:b3:c5:19:89:71:84:b4:8a:3f:a3:8c:
                    17:aa:86:47:4f:a4:0f:8c:fa:dd:42:1b:a8:fc:60:
                    f6:21:01:b8:1a:be:35:94:93:e9:da:9f:cd:31:d5:
                    e9:fd:68:85:17:09:8f:49:26:38:f5:27:f1:ec:92:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C1:D4:64:84:93:95:D3:FC:7D:73:42:84:40:FD:33:CE:2D:76:DA
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3232342e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c0:40:b3:93:96:f4:86:4f:cc:fc:99:85:a1:e1:ae:ee:73:6a:
         06:9e:54:0f:91:04:3e:46:bb:6a:65:ba:74:19:ee:11:58:04:
         25:01:70:41:9a:c1:db:51:86:5c:38:69:cd:59:0d:cd:7d:db:
         be:01:5a:37:ed:81:92:64:36:84:99:dc:a3:03:dc:ac:da:d2:
         0d:32:0b:2e:fd:38:b9:c5:2d:00:2e:ba:3c:77:80:72:b4:7c:
         90:12:7a:ac:70:72:af:5e:90:3a:5e:8d:03:0d:8b:32:77:e3:
         e2:b9:60:73:bf:df:8d:8d:4f:59:c6:f4:90:f4:0c:c8:b0:a2:
         ff:f3:51:93:0c:52:36:23:fd:14:15:03:12:f6:72:e1:d0:2e:
         29:0c:07:e6:a6:04:ae:30:3d:32:e8:d6:a6:02:dc:83:e2:f8:
         04:e2:ae:69:0b:e2:b2:2a:e6:11:e6:78:cf:01:53:79:c6:eb:
         55:d4:d9:02:3e:6e:e4:f0:ac:1e:11:63:7c:90:47:1f:d8:f5:
         b3:4e:95:e1:24:d5:fc:a3:7a:d8:83:aa:58:99:55:93:10:dc:
         d3:73:92:bc:6d:40:80:38:1d:e0:bd:cb:4a:f2:1b:6e:0e:f5:
         c8:2b:41:25:0b:11:49:6d:54:e8:1b:76:87:8a:5b:74:9e:ff:
         65:9d:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org