Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa
File:                     3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          TWqNoZRDB8ohsP3NrLDTKUq34cA1704Ewh0+ezCx7qQ=
Subject key identifier:   D1:BE:23:38:0B:2E:5A:B3:F8:E7:90:2F:03:9D:74:9B:E8:D7:E2:93
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       143CBC1714AA6A6F45C161C00320523B3DBD2AFA
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:19 +0000
ROA not before:           Tue 12 Mar 2024 19:46:19 +0000
ROA not after:            Tue 11 Mar 2025 19:51:19 +0000
asID:                     28220
IP address blocks:        189.124.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3c:bc:17:14:aa:6a:6f:45:c1:61:c0:03:20:52:3b:3d:bd:2a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:19 2024 GMT
            Not After : Mar 11 19:51:19 2025 GMT
        Subject: CN=D1BE23380B2E5AB3F8E7902F039D749BE8D7E293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:e7:e6:69:ad:4a:6e:c0:29:60:20:5c:53:
                    c7:76:b2:86:d8:6c:1a:7f:1e:84:43:f0:dd:83:6b:
                    94:f6:9f:3c:73:66:41:25:70:53:78:0f:2f:6a:4f:
                    2d:f9:1b:00:f6:fa:af:d4:d3:aa:87:ad:bf:55:3d:
                    ac:76:28:b4:1b:25:1d:09:a9:ba:3b:c5:43:45:e3:
                    b1:e8:f8:52:3e:3f:82:cc:12:a7:02:17:5d:b3:4f:
                    2b:7e:c5:af:c7:ab:c8:be:0a:8d:38:74:59:c0:94:
                    b3:66:03:29:3a:48:a3:8b:2d:38:05:ed:02:4c:00:
                    a7:22:2d:53:b7:a8:2e:22:0b:bc:8d:3e:cb:20:2d:
                    36:5f:cb:7b:25:74:c3:b2:e0:74:b5:f2:8d:17:b6:
                    8b:0f:45:6c:76:45:c7:87:bf:86:08:08:d5:6f:ea:
                    df:91:9a:81:73:5d:34:ac:4b:3c:b4:9a:e6:16:34:
                    b4:a8:19:50:7e:4b:6a:73:c9:af:39:9a:8d:df:9c:
                    57:45:37:5b:e6:57:93:cd:af:f7:74:4e:46:52:a5:
                    9b:62:57:66:68:46:6e:8d:1b:8e:8e:38:6d:f0:a2:
                    4a:6e:a5:c1:a7:62:a0:60:54:11:fc:8a:37:7c:32:
                    6d:a8:04:c3:a8:1b:c6:3c:70:fa:36:50:3d:85:e5:
                    ba:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BE:23:38:0B:2E:5A:B3:F8:E7:90:2F:03:9D:74:9B:E8:D7:E2:93
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3135362e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:ce:10:74:cc:8f:1c:88:9e:6a:a1:75:38:ab:87:e1:31:32:
         4a:1b:70:db:84:27:55:fe:4f:12:1a:2c:bd:21:ed:46:99:4a:
         0a:8d:a7:ea:2b:fb:8b:0b:36:16:d0:44:c3:0a:f1:e0:a4:d1:
         cf:f8:32:58:ab:bc:2e:86:67:9c:8f:f4:fa:02:5a:e2:ab:98:
         ce:43:0f:4f:f5:c9:28:57:5e:af:66:37:66:72:0a:11:32:0e:
         3a:ff:79:ca:b3:43:cd:6d:20:ff:e5:e1:8e:54:af:95:60:22:
         c2:69:c4:79:7a:c5:c7:d2:aa:eb:c1:01:f2:6a:42:64:75:a3:
         8b:1a:93:54:70:e0:47:9e:0e:6b:e6:1a:b7:e6:d6:52:07:d8:
         43:b0:55:7a:16:7e:96:b0:8d:5c:4a:0e:38:31:ed:ac:05:4b:
         ef:11:8a:86:14:be:fa:f2:ba:49:27:6c:92:13:eb:9a:29:7d:
         41:85:12:3a:66:7b:2b:10:c9:4c:65:4e:e5:54:fa:e7:cc:9c:
         ae:f4:e9:16:8c:d7:14:0a:ec:b3:5e:aa:72:31:ca:18:a1:29:
         65:ad:dd:00:69:04:cd:e3:61:bd:6a:b5:66:1f:9a:68:d7:64:
         d0:29:fa:6c:44:f0:06:b2:7a:30:f0:2b:0b:50:ed:6d:82:f1:
         29:b6:e9:d4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFDy8FxSqam9FwWHAAyBSOz29KvowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTlaFw0yNTAzMTExOTUxMTlaMDMxMTAvBgNV
BAMTKEQxQkUyMzM4MEIyRTVBQjNGOEU3OTAyRjAzOUQ3NDlCRThEN0UyOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJOfmaa1KbsApYCBcU8d2sobY
bBp/HoRD8N2Da5T2nzxzZkElcFN4Dy9qTy35GwD2+q/U06qHrb9VPax2KLQbJR0J
qbo7xUNF47Ho+FI+P4LMEqcCF12zTyt+xa/Hq8i+Co04dFnAlLNmAyk6SKOLLTgF
7QJMAKciLVO3qC4iC7yNPssgLTZfy3sldMOy4HS18o0XtosPRWx2RceHv4YICNVv
6t+RmoFzXTSsSzy0muYWNLSoGVB+S2pzya85mo3fnFdFN1vmV5PNr/d0TkZSpZti
V2ZoRm6NG46OOG3wokpupcGnYqBgVBH8ijd8Mm2oBMOoG8Y8cPo2UD2F5brzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0b4jOAsuWrP455AvA510m+jX4pMwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzMTMyMzQyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9fJwwDQYJKoZIhvcNAQELBQADggEBAKPOEHTM
jxyInmqhdTirh+ExMkobcNuEJ1X+TxIaLL0h7UaZSgqNp+or+4sLNhbQRMMK8eCk
0c/4MlirvC6GZ5yP9PoCWuKrmM5DD0/1yShXXq9mN2ZyChEyDjr/ecqzQ81tIP/l
4Y5Ur5VgIsJpxHl6xcfSquvBAfJqQmR1o4sak1Rw4EeeDmvmGrfm1lIH2EOwVXoW
fpawjVxKDjgx7awFS+8RioYUvvryukknbJIT65opfUGFEjpmeysQyUxlTuVU+ufM
nK706RaM1xQK7LNeqnIxyhihKWWt3QBpBM3jYb1qtWYfmmjXZNAp+mxE8AayejDw
KwtQ7W2C8Sm26dQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org