Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa
File:                     3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier:          Ex+x5etFYPcbzdhI+tVQ2/T6U/emb1Ty9qf15QZ3jls=
Subject key identifier:   A3:1E:0C:33:F5:6C:29:99:C1:66:52:31:EA:45:51:A2:D3:BE:23:8E
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       4613FA38EEB493E15D264C230678E58C3AD0DCEF
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:15 +0000
ROA not before:           Tue 12 Mar 2024 19:46:15 +0000
ROA not after:            Tue 11 Mar 2025 19:51:15 +0000
asID:                     28220
IP address blocks:        189.124.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:13:fa:38:ee:b4:93:e1:5d:26:4c:23:06:78:e5:8c:3a:d0:dc:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:15 2024 GMT
            Not After : Mar 11 19:51:15 2025 GMT
        Subject: CN=A31E0C33F56C2999C1665231EA4551A2D3BE238E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:e0:f6:bd:9c:a1:1d:48:02:f7:1e:88:31:
                    b8:74:3a:05:f2:6d:2a:38:01:73:95:6f:b7:05:94:
                    d6:db:40:75:cb:b5:b3:68:65:13:43:60:91:5a:bc:
                    c7:c9:a1:55:5a:92:af:a1:e5:45:3b:e1:a0:07:2c:
                    26:99:ac:84:64:5d:5a:ff:01:43:27:9e:fb:34:a0:
                    1c:f1:c8:4b:75:7e:8c:d1:99:e5:5a:be:5a:6d:db:
                    b8:fa:8c:72:c6:69:aa:88:54:fd:b9:f1:72:e6:9b:
                    5d:0a:a2:55:28:14:72:07:e2:4f:a9:ac:99:05:d3:
                    c0:ea:14:39:66:74:ab:d9:82:67:7b:a6:d0:1b:7c:
                    85:fb:eb:28:7a:d9:a1:41:41:85:44:f9:25:fa:24:
                    b1:7d:d6:1e:f6:aa:7d:4b:a3:2f:ac:2f:3f:48:30:
                    e0:aa:52:99:37:09:08:aa:50:e9:f9:31:25:90:d7:
                    b4:cd:69:e2:5b:8d:6c:9b:50:34:34:ba:ca:4b:db:
                    ce:7e:cf:e1:13:ff:3f:df:91:d5:3c:1a:66:b7:b3:
                    0c:b2:ff:13:68:ae:dd:bd:98:bd:b7:38:3a:0c:eb:
                    b9:05:33:0b:6f:85:44:60:f1:cd:14:b2:e1:14:02:
                    32:60:d9:dd:39:34:99:85:7f:07:98:4d:68:4f:ce:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:0C:33:F5:6C:29:99:C1:66:52:31:EA:45:51:A2:D3:BE:23:8E
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e3132342e3230302e302f32312d3231203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.124.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:2e:5d:d4:39:b2:38:5f:c8:bd:3f:bf:55:66:ff:44:5e:51:
         67:66:db:9a:be:bd:ce:e9:4c:c2:e5:21:4d:ee:51:46:af:d6:
         6f:ce:32:9f:cb:f5:9f:b5:e4:db:7c:e9:59:b9:27:61:16:ed:
         05:b7:7e:2c:4a:20:ec:9d:90:d2:2a:7d:b1:74:cf:96:af:39:
         8e:13:74:1f:45:b0:23:3c:f7:be:5f:56:47:99:68:09:d8:52:
         fd:86:fd:ed:ba:c3:30:bd:49:d2:f3:30:33:7f:81:5c:5c:21:
         8a:5a:1e:a8:95:85:3b:7f:1c:f8:6c:20:49:c4:48:b6:04:99:
         b6:fa:38:eb:68:1d:66:bf:35:1e:ac:66:3a:0a:1a:73:8b:1c:
         cb:89:26:51:67:31:18:09:2b:b3:b8:ad:21:cd:a2:50:ca:06:
         d8:19:ca:57:78:83:8b:0c:2a:c4:fb:9b:96:40:02:a2:5e:4d:
         7d:7d:cd:01:5e:70:82:44:f5:7e:75:84:6f:a3:ec:02:0b:e7:
         26:30:43:52:67:1a:f5:f6:04:ec:4c:63:3f:e9:77:90:5f:20:
         25:18:e9:6b:bc:f4:cd:cb:21:03:93:26:70:b8:f4:34:4e:c1:
         aa:ba:d5:af:87:eb:a3:ca:eb:aa:4b:f9:81:29:06:5a:1f:36:
         af:7e:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org