Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130302e302f32322d3232203d3e203533303539.roa
File:                     3138372e38362e3130302e302f32322d3232203d3e203533303539.roa (raw, json)
Hash identifier:          42aU4E5HaQRc7VewZTguWc22Y4A2zcAILaJib4K0xqI=
Subject key identifier:   F4:4B:CF:E8:E6:89:F1:AB:BD:A4:2A:D2:3F:06:B5:F8:65:0E:46:09
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       31BD56BC47F2279F30FA8967448D84A913CAF931
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130302e302f32322d3232203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:26 +0000
ROA not before:           Tue 12 Mar 2024 19:46:26 +0000
ROA not after:            Tue 11 Mar 2025 19:51:26 +0000
asID:                     53059
IP address blocks:        187.86.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bd:56:bc:47:f2:27:9f:30:fa:89:67:44:8d:84:a9:13:ca:f9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:26 2024 GMT
            Not After : Mar 11 19:51:26 2025 GMT
        Subject: CN=F44BCFE8E689F1ABBDA42AD23F06B5F8650E4609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:07:f8:f1:8b:ca:30:40:08:c3:39:a2:53:
                    f0:2b:22:ce:ca:9f:e3:e9:0f:44:db:ce:5a:b2:da:
                    7e:39:fe:1a:6b:b8:73:c8:84:58:3f:c0:e6:f6:82:
                    04:8a:3d:58:85:e4:67:e6:2f:1d:57:09:03:4f:d5:
                    3f:b0:87:b3:ea:d8:50:74:da:01:12:60:78:6e:ab:
                    fc:6d:71:7d:b9:c3:7f:fc:6d:58:6e:29:96:88:3d:
                    71:d9:6b:3d:e5:f6:cb:53:ee:c8:53:c4:01:12:b3:
                    8b:a6:53:f1:68:f6:f6:a4:69:36:d8:66:f8:c3:25:
                    6a:31:c7:f7:f3:77:08:a0:fb:45:0d:ca:85:b1:7f:
                    fd:c7:10:81:af:a9:49:81:28:8c:52:58:86:b9:39:
                    77:9a:21:c9:fd:0a:18:ba:df:17:f2:ae:3f:27:53:
                    4c:6c:84:c3:60:45:1b:7e:be:87:b7:fb:e4:11:9a:
                    86:0d:31:8e:8c:c3:64:c1:7b:dd:c9:d7:5b:a5:ed:
                    59:ae:7d:cc:04:90:96:cf:0f:ac:df:c5:7e:38:02:
                    68:9b:f2:71:16:01:10:bf:dd:7e:49:31:d8:ce:db:
                    d4:b8:10:c3:a7:e9:75:2c:b1:1b:51:5b:26:43:99:
                    cb:c2:0e:fc:04:18:ba:ba:06:45:c8:95:8d:17:e4:
                    52:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4B:CF:E8:E6:89:F1:AB:BD:A4:2A:D2:3F:06:B5:F8:65:0E:46:09
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e3130302e302f32322d3232203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:6a:1a:ed:ae:d1:bc:e8:ec:c3:e4:5c:25:c4:19:2e:0c:30:
         75:95:f6:b9:24:a9:42:d7:89:48:96:8c:95:23:7b:44:59:ef:
         94:34:ae:a8:a2:16:3c:6b:7d:fc:88:71:88:7c:7b:a7:35:26:
         28:52:f7:b0:5a:74:e6:15:6c:7d:c0:5c:ea:2f:5f:da:d4:42:
         46:9d:70:e5:b1:78:b7:03:80:31:4d:24:0a:bd:17:72:e7:b2:
         63:b2:09:57:e4:49:9d:a3:e0:62:1f:0a:a7:48:4e:c4:ad:65:
         b1:da:f0:b4:03:20:a7:fa:95:41:42:42:3a:8b:04:45:e6:be:
         bf:c1:0b:e5:8a:7b:73:dd:89:a6:42:75:eb:c3:25:c2:14:ae:
         f8:a1:57:83:3a:23:97:fa:fa:44:5e:aa:66:c7:a8:e6:b9:1b:
         3e:3c:d5:de:bc:37:6e:52:12:69:9a:78:82:03:7c:6a:59:81:
         79:37:d7:23:c0:c1:b6:7d:46:ed:3f:0b:22:97:c6:96:ef:7f:
         5a:48:6c:21:9b:88:11:e0:f0:d3:7c:dd:a3:77:37:cb:f8:ae:
         b1:ac:1a:47:3d:0f:f8:c1:63:6f:9a:ab:f1:43:c8:ff:4f:a1:
         08:b7:70:e7:77:c0:5b:40:2b:00:87:94:e1:83:f9:8e:e7:9c:
         ae:cb:21:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMb1WvEfyJ58w+olnRI2EqRPK+TEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MjZaFw0yNTAzMTExOTUxMjZaMDMxMTAvBgNV
BAMTKEY0NEJDRkU4RTY4OUYxQUJCREE0MkFEMjNGMDZCNUY4NjUwRTQ2MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPFQf48YvKMEAIwzmiU/ArIs7K
n+PpD0Tbzlqy2n45/hpruHPIhFg/wOb2ggSKPViF5GfmLx1XCQNP1T+wh7Pq2FB0
2gESYHhuq/xtcX25w3/8bVhuKZaIPXHZaz3l9stT7shTxAESs4umU/Fo9vakaTbY
ZvjDJWoxx/fzdwig+0UNyoWxf/3HEIGvqUmBKIxSWIa5OXeaIcn9Chi63xfyrj8n
U0xshMNgRRt+voe3++QRmoYNMY6Mw2TBe93J11ul7VmufcwEkJbPD6zfxX44Amib
8nEWARC/3X5JMdjO29S4EMOn6XUssRtRWyZDmcvCDvwEGLq6BkXIlY0X5FKzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9EvP6OaJ8au9pCrSPwa1+GUORgkwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM3MmUzODM2MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCu1ZkMA0GCSqGSIb3DQEBCwUAA4IBAQCZahrtrtG8
6OzD5FwlxBkuDDB1lfa5JKlC14lIloyVI3tEWe+UNK6oohY8a338iHGIfHunNSYo
UvewWnTmFWx9wFzqL1/a1EJGnXDlsXi3A4AxTSQKvRdy57JjsglX5Emdo+BiHwqn
SE7ErWWx2vC0AyCn+pVBQkI6iwRF5r6/wQvlintz3YmmQnXrwyXCFK74oVeDOiOX
+vpEXqpmx6jmuRs+PNXevDduUhJpmniCA3xqWYF5N9cjwMG2fUbtPwsil8aW739a
SGwhm4gR4PDTfN2jdzfL+K6xrBpHPQ/4wWNvmqvxQ8j/T6EIt3Dnd8BbQCsAh5Th
g/mO55yuyyED
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org