Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3134302e302f32342d3234203d3e203238323230.roa
File:                     3138392e3132342e3134302e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          7FAA+f50Byx15EDxe7UC+dsIfq3J00E4wWDhSX6zZzw=
Subject key identifier:   46:F7:E0:50:D4:62:63:72:E4:CC:29:CB:1E:58:D6:95:4C:62:AA:F4
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       2C47AE0AC747099E1D43B53B590A039960125021
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3134302e302f32342d3234203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:13 +0000
ROA not before:           Tue 12 Mar 2024 19:46:13 +0000
ROA not after:            Tue 11 Mar 2025 19:51:13 +0000
asID:                     28220
IP address blocks:        189.124.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:47:ae:0a:c7:47:09:9e:1d:43:b5:3b:59:0a:03:99:60:12:50:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:13 2024 GMT
            Not After : Mar 11 19:51:13 2025 GMT
        Subject: CN=46F7E050D4626372E4CC29CB1E58D6954C62AAF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:03:a7:29:ad:05:7b:50:6e:72:90:a2:d8:
                    e9:58:ce:af:67:d5:82:a6:75:d7:ec:ee:79:46:f0:
                    78:4d:cc:62:56:5d:44:c4:ea:14:4f:87:14:1d:8f:
                    bd:63:d1:ec:7f:d6:ae:9b:85:7d:ad:c5:9c:3e:e2:
                    81:ef:dd:33:ff:e8:7e:43:97:2d:9c:31:86:02:b0:
                    9e:44:1a:72:69:54:48:91:8c:57:bd:61:15:16:ba:
                    7b:9d:1a:8c:f8:40:12:79:22:75:1c:ef:e3:01:dd:
                    55:a3:e4:fe:8b:b7:d0:c4:60:98:0c:40:7a:2d:84:
                    97:6a:25:cc:c1:9a:60:36:ba:d4:fc:f6:0e:ea:89:
                    93:52:24:85:59:d8:7b:c2:a4:c4:d5:14:cb:9b:56:
                    38:4b:67:ac:18:74:35:60:a1:5c:be:b2:e1:a8:c1:
                    89:d6:ff:13:eb:be:2e:10:18:1d:09:8b:83:a6:29:
                    2c:7a:4b:b1:3f:54:9f:4f:3b:8a:64:9b:c1:73:46:
                    71:63:54:ae:c4:88:a2:f4:ac:99:7e:d7:2f:ee:b9:
                    e1:08:41:2f:27:2b:bc:2a:3b:c6:df:27:7f:61:fe:
                    b5:af:3c:27:73:21:e9:b1:ff:01:1a:57:1f:e2:44:
                    c8:1e:54:b1:80:ed:c3:eb:73:d9:0a:58:c8:95:a2:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F7:E0:50:D4:62:63:72:E4:CC:29:CB:1E:58:D6:95:4C:62:AA:F4
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3134302e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:62:fc:9e:5c:14:81:c2:3e:03:55:8c:3e:41:58:86:e0:
         38:92:ec:1e:30:62:79:96:ef:de:a8:a5:41:1f:3e:15:97:23:
         41:84:3e:c1:de:03:fb:94:c5:6c:50:c5:30:e7:88:ba:ed:7c:
         ed:83:4f:6c:c8:61:e1:f6:b9:1a:1d:a3:c2:c5:20:57:7a:fd:
         c5:9e:f9:05:ff:1e:a9:d3:4b:5e:2f:81:4f:12:db:10:84:bc:
         23:12:d1:0f:4c:d5:6d:0d:ab:14:db:fa:d1:0a:f2:e8:b1:16:
         07:23:6d:28:13:94:c1:8a:d8:31:58:b0:3e:84:c9:14:f8:36:
         13:5c:54:7f:d9:dd:bf:03:1f:7b:a2:47:f4:fe:60:85:28:44:
         a1:e0:a4:b9:8e:4d:ab:34:1e:33:0e:f4:8a:6a:61:0e:be:3b:
         88:a8:49:b0:02:4f:57:24:25:51:7c:70:5e:69:da:77:fc:24:
         2b:b4:cd:2e:0c:42:37:3e:99:a4:98:de:33:58:6d:66:1e:bd:
         a3:99:21:3c:90:d4:e5:d2:df:04:ac:be:5b:e4:13:82:c8:cb:
         e9:d8:84:ca:8f:05:10:b7:08:85:59:b6:40:6f:8e:7d:0a:04:
         75:f3:b5:11:7a:d9:9b:31:cb:82:a6:7c:c8:ae:ba:ee:90:96:
         dd:a1:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org