Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa
File:                     3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          Bf7dqUn/nAnpf2Va5aI6nUi/1IycHk6c2sg+WHXC8k4=
Subject key identifier:   0F:90:FB:0D:D5:C7:0D:29:A8:1C:C3:5C:2A:D1:BC:7E:85:F6:06:D1
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       57F9C0A14D2F52CEB0F1317CC32D6A88C33F05D5
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:11 +0000
ROA not before:           Tue 12 Mar 2024 19:46:11 +0000
ROA not after:            Tue 11 Mar 2025 19:51:11 +0000
asID:                     28220
IP address blocks:        189.124.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f9:c0:a1:4d:2f:52:ce:b0:f1:31:7c:c3:2d:6a:88:c3:3f:05:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:11 2024 GMT
            Not After : Mar 11 19:51:11 2025 GMT
        Subject: CN=0F90FB0DD5C70D29A81CC35C2AD1BC7E85F606D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:55:85:ad:f0:e2:08:85:77:11:15:37:94:13:
                    18:70:99:b9:26:36:12:e0:ac:45:1f:d3:7c:4f:95:
                    6e:2a:eb:1a:cc:01:5f:99:4b:c2:90:92:23:8d:20:
                    c5:bb:43:5a:8d:65:71:e8:67:c0:8f:52:86:83:05:
                    71:e1:67:ea:69:ce:98:2d:84:52:28:ae:62:13:1f:
                    70:f5:86:e7:d1:9c:a5:aa:3a:e0:9b:8b:bb:d9:fd:
                    46:f1:51:b3:57:94:b7:75:05:3b:c8:68:1c:37:86:
                    38:4d:71:6b:1f:49:22:70:87:6e:c2:cf:da:00:05:
                    6c:c0:5f:f8:c6:c8:f3:b0:27:30:a0:51:a3:cb:21:
                    9f:80:b4:0e:17:22:b0:7e:48:1c:a9:1e:69:be:8d:
                    76:69:43:46:90:4c:3a:84:20:17:44:c0:58:32:e9:
                    f8:d2:68:a4:3c:56:7f:0b:28:fb:eb:14:90:18:79:
                    0e:8b:01:4b:6b:8c:0c:09:1a:cd:81:3a:ff:d4:ac:
                    a3:12:21:ed:f1:8e:9e:6c:ef:1b:ab:dc:11:27:65:
                    04:3b:59:3a:e8:f9:bd:ec:b7:d0:b3:b3:e1:b3:62:
                    14:07:9e:69:29:0f:c6:e6:a5:c8:6c:f3:fc:8b:74:
                    00:35:af:72:16:85:1d:14:d8:5f:14:d2:d3:a5:fb:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:90:FB:0D:D5:C7:0D:29:A8:1C:C3:5C:2A:D1:BC:7E:85:F6:06:D1
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3133372e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e0:2f:57:d8:32:be:c8:1b:28:19:d6:4a:5e:e5:9f:4b:e8:
         94:24:fa:c2:12:93:b2:90:0d:c5:88:8c:dc:60:65:c4:20:53:
         ba:69:df:6a:cf:3b:d1:7a:a1:3f:00:bf:27:2e:fa:91:e1:45:
         00:bf:4e:ed:fe:19:94:7a:d6:eb:5e:07:e6:ae:d5:39:ce:3c:
         fc:63:a3:f5:f3:6c:cf:10:5b:a5:18:fb:4b:7d:54:2b:48:70:
         c9:c7:f8:d6:87:13:a1:31:5f:b9:e9:60:20:31:d6:2d:37:59:
         01:9e:22:43:d1:91:0f:0a:cb:b5:e0:4f:06:b5:28:09:f4:82:
         a0:20:14:39:b8:73:3a:ea:84:82:6f:58:94:30:59:f2:f9:90:
         fd:cb:3c:00:cc:39:fd:6a:fc:a0:21:82:78:a6:1f:af:e5:69:
         1f:a3:73:d1:6a:dd:3e:39:b8:55:bd:3d:1b:f4:d2:8f:28:78:
         5e:94:c8:da:05:c0:95:e1:17:7d:50:dc:0d:39:ca:a3:24:3f:
         a6:6c:51:93:90:8f:0b:c2:50:77:ad:b5:bb:98:f1:e7:08:d9:
         b3:57:9a:25:84:10:1f:7f:3a:ca:a5:52:05:46:38:e9:db:e7:
         57:0d:97:d8:e4:43:9f:9d:d9:ba:da:31:f4:ca:45:c0:2f:6b:
         be:4e:6f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org