Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39382e302f32332d3233203d3e203533303539.roa
File:                     3138372e38362e39382e302f32332d3233203d3e203533303539.roa (raw, json)
Hash identifier:          zL/aV+oBGnMh1XKLRvH9WEmQJbcsynn3QBT7QcvbikM=
Subject key identifier:   1C:F2:62:BA:13:F6:D2:2D:D2:5D:94:B6:FF:51:00:FF:49:30:23:EB
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       443A934DFD035ED6052ABDC2D03C690CA88AE8B0
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39382e302f32332d3233203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:24 +0000
ROA not before:           Tue 12 Mar 2024 19:46:24 +0000
ROA not after:            Tue 11 Mar 2025 19:51:24 +0000
asID:                     53059
IP address blocks:        187.86.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3a:93:4d:fd:03:5e:d6:05:2a:bd:c2:d0:3c:69:0c:a8:8a:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:24 2024 GMT
            Not After : Mar 11 19:51:24 2025 GMT
        Subject: CN=1CF262BA13F6D22DD25D94B6FF5100FF493023EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:fb:e4:0d:db:8c:13:8a:e8:5a:7c:1d:f9:
                    3b:ab:d9:7b:27:44:eb:bf:5d:33:1c:bc:f2:1f:41:
                    04:e7:dd:c5:10:1d:22:5b:f8:2f:56:2c:27:00:8e:
                    ce:aa:6a:ae:a1:c6:04:03:5b:8b:df:7b:85:64:a3:
                    67:1a:80:02:7e:28:43:56:36:03:bc:2c:bb:3c:a8:
                    d4:dd:96:a8:86:d5:e3:d5:07:d9:ba:b8:48:2f:f5:
                    c2:30:c4:26:d0:b3:7d:c6:9f:8f:37:fd:6a:35:e6:
                    4e:34:1f:6a:4c:e2:45:16:c2:0b:b6:a7:29:72:04:
                    e6:d7:dc:9b:a5:0b:3e:1b:d7:5b:4c:4a:c7:1f:a9:
                    de:e8:fb:38:36:d6:e8:97:69:6d:f5:43:00:18:21:
                    05:f3:0c:be:e1:cb:79:9b:eb:35:45:8b:74:4a:44:
                    e2:05:9d:db:df:8e:04:55:05:c6:39:0b:5e:c9:8f:
                    15:4d:79:a3:ca:4b:c7:eb:86:e7:f9:33:ae:93:f0:
                    7b:05:a2:36:ce:7e:c3:34:2f:6a:05:61:3e:1a:95:
                    b2:5f:70:0b:a3:0c:fe:7b:75:f5:97:76:0d:09:93:
                    1f:6b:93:51:25:b9:f1:21:f9:a3:1a:7c:fc:45:95:
                    b2:a9:ea:3d:ac:13:d2:76:52:57:6e:83:44:4e:56:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F2:62:BA:13:F6:D2:2D:D2:5D:94:B6:FF:51:00:FF:49:30:23:EB
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e38362e39382e302f32332d3233203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:39:01:91:03:60:21:c1:c0:21:6d:4f:1a:82:28:f6:2a:94:
         af:43:16:8c:3a:d7:34:8f:cd:8b:4e:cf:c9:e8:df:73:a1:7e:
         1a:e1:0f:62:69:b9:c6:7d:9e:59:a1:08:08:55:93:b8:fe:82:
         68:20:55:31:8e:81:eb:14:9b:bf:c4:08:06:7e:60:30:44:38:
         32:bc:b2:f2:03:92:a8:9f:c9:49:ae:e9:f7:31:03:5c:a1:9a:
         d9:46:7d:2a:1f:8c:e7:77:bd:b0:ea:1c:50:ab:3b:ff:57:49:
         2d:b8:c4:35:6f:2e:53:c0:34:6b:98:09:18:62:54:e9:ee:3b:
         20:2a:e1:52:97:87:f7:96:30:d6:67:ca:1b:f5:f1:29:49:aa:
         8f:8c:34:c8:9d:4e:78:33:a3:57:a3:00:6b:d5:f0:2a:79:26:
         56:e1:31:3e:98:9c:d7:94:23:c8:bd:b4:9b:5d:97:a4:65:66:
         84:07:33:58:16:04:37:fb:eb:04:c5:ff:b2:1c:95:ba:d7:ad:
         25:b4:39:5d:b4:de:28:ff:39:f4:c9:e3:f1:61:5e:87:98:9b:
         64:fc:bb:45:c0:3b:21:3c:ac:7f:b2:ea:29:b3:2e:32:dc:08:
         a2:3a:c7:aa:33:07:c8:ed:ec:03:8e:09:b2:0d:19:8f:a9:60:
         60:7b:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org