Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39372e302f32342d3234203d3e203533303539.roa
File:                     3138372e38362e39372e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          JHLIIYudKW+IdQpKLlcslcD/agrfB02Oy8BMD38jDtU=
Subject key identifier:   D4:10:D3:89:7C:9B:BB:E5:02:CE:00:0A:E7:CA:02:E7:13:80:81:96
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       51A0380FD28E682EF8B843A3091F7D8AA1368AC1
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39372e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:26 +0000
ROA not before:           Tue 12 Mar 2024 19:46:26 +0000
ROA not after:            Tue 11 Mar 2025 19:51:26 +0000
asID:                     53059
IP address blocks:        187.86.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a0:38:0f:d2:8e:68:2e:f8:b8:43:a3:09:1f:7d:8a:a1:36:8a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:26 2024 GMT
            Not After : Mar 11 19:51:26 2025 GMT
        Subject: CN=D410D3897C9BBBE502CE000AE7CA02E713808196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:82:13:55:37:b6:d2:cd:69:41:75:ef:05:
                    de:36:43:6d:30:d1:49:c9:82:ac:8c:59:00:bc:53:
                    80:fd:fe:77:b7:bc:cd:2f:54:ed:97:c3:cf:65:97:
                    c2:d4:ab:09:17:a1:a0:7c:2a:7f:70:07:ff:40:38:
                    c2:c0:8c:b0:da:a1:5e:13:90:81:ad:00:5b:1e:4e:
                    80:70:0f:e1:44:ec:73:d7:63:7e:a8:f0:f3:b2:45:
                    6f:28:80:ca:13:6d:84:65:c5:67:4d:bc:a9:e0:4c:
                    f4:9f:e0:88:53:6c:ed:fd:28:cf:6e:4a:78:f6:29:
                    78:46:5c:e7:17:66:6d:3c:89:78:50:89:29:16:41:
                    be:7a:90:bd:5b:17:ea:93:be:fe:c4:39:f7:23:95:
                    ce:f9:de:aa:5f:8a:17:45:e9:23:e1:af:41:e9:52:
                    59:36:ff:59:03:ad:83:c0:85:23:0b:01:56:74:76:
                    31:07:78:ce:8d:2c:73:06:f8:be:c9:b9:27:15:ac:
                    44:b0:ae:c7:55:2e:ad:8f:0a:84:58:6f:f6:a2:f6:
                    b3:96:3d:a9:84:b9:54:64:f8:ad:fe:5f:d2:87:8c:
                    a4:20:7c:eb:1c:d3:de:4a:fd:1e:38:b0:5a:96:87:
                    05:24:a7:c8:ae:c7:92:1b:cd:c4:a6:08:99:79:29:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:10:D3:89:7C:9B:BB:E5:02:CE:00:0A:E7:CA:02:E7:13:80:81:96
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39372e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:2d:a2:c2:f7:3f:94:d7:cb:d4:60:93:6e:1d:aa:08:68:
         2d:39:c7:ec:1a:05:51:07:f2:5d:dd:01:ef:ae:17:c6:6a:06:
         b2:f9:d3:d9:e6:4f:ff:1b:48:d3:94:a6:f9:b5:ef:f8:78:2d:
         88:77:70:04:0e:b2:eb:8b:17:b5:5d:42:65:a1:96:9a:c6:be:
         95:06:af:f4:fd:77:43:dd:ce:c4:b3:89:d3:c5:fa:9a:d2:f6:
         b4:f3:48:02:c3:65:c8:0c:1c:3d:86:c3:f6:a5:a8:55:b0:15:
         fd:d3:a4:1c:87:bc:d1:7a:68:83:d1:b9:5c:92:89:c9:91:0c:
         a3:7e:b1:e1:72:6f:ea:2e:41:e1:07:17:c9:a1:71:78:20:16:
         9f:ec:8e:c1:39:43:f4:a0:05:2a:18:3a:25:2a:67:06:3c:4f:
         ef:f0:7b:b3:b7:1d:d1:77:dc:a8:1f:b9:54:2a:ac:ed:e9:69:
         be:9b:fd:91:5e:fc:9c:83:38:40:08:66:67:db:9a:c2:99:7b:
         48:f3:9c:ca:df:94:28:12:3e:bf:6e:87:ed:c5:0d:08:67:5b:
         15:78:e3:53:43:3b:03:5a:bd:3f:76:0b:54:87:16:1b:e7:97:
         42:1c:e9:28:9a:aa:9d:62:21:13:2e:0b:8f:55:1d:e7:13:64:
         62:6c:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org