Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31372e302f32342d3234203d3e203533303539.roa
File:                     3138392e34352e31372e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          We5BDlLfBwdCGOccNiIq2QDfKtbrwN7kU7LCitDpwtM=
Subject key identifier:   E3:4F:BB:59:E1:57:0E:7A:53:DA:2A:9D:D1:45:76:83:63:90:4C:42
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       02CA6233B1497AC25F606900FD7560A8C0E424A4
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31372e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:23 +0000
ROA not before:           Tue 12 Mar 2024 19:46:23 +0000
ROA not after:            Tue 11 Mar 2025 19:51:23 +0000
asID:                     53059
IP address blocks:        189.45.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ca:62:33:b1:49:7a:c2:5f:60:69:00:fd:75:60:a8:c0:e4:24:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:23 2024 GMT
            Not After : Mar 11 19:51:23 2025 GMT
        Subject: CN=E34FBB59E1570E7A53DA2A9DD145768363904C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:bd:ef:a7:cd:60:51:99:ba:e2:a1:c4:c7:
                    90:50:8b:44:d4:54:b2:c7:09:30:44:e0:ae:e0:7e:
                    68:fb:b9:1b:7e:55:ef:8d:6f:1b:1a:0a:a0:3f:4b:
                    0b:15:72:c8:c6:47:79:0c:0a:69:b8:a5:8b:11:aa:
                    00:e8:2d:5b:7e:37:c0:60:b2:f8:0b:7d:cd:11:eb:
                    aa:5d:1c:a9:26:c3:0f:ae:4b:1f:b6:0c:33:88:3e:
                    01:1c:15:34:ac:eb:46:28:02:d0:c8:8f:3f:3e:cb:
                    47:a0:6a:bd:59:cc:89:59:11:b5:b3:97:b3:3a:9e:
                    07:b6:08:fa:43:9e:eb:03:4a:73:15:1c:11:07:66:
                    00:6d:b6:e7:8f:d3:8d:d5:73:99:a6:72:4e:4c:06:
                    30:aa:03:69:c4:1e:00:dc:68:f1:60:14:6c:9e:4c:
                    13:db:ab:d9:43:b7:7d:08:ac:be:11:b3:fa:ad:3e:
                    70:cc:14:5c:dc:31:fe:79:be:dc:7a:09:4f:59:c6:
                    dd:3e:1d:f6:7c:a3:35:2b:58:df:b5:5f:34:60:c7:
                    ac:dc:b4:61:19:bd:41:92:54:c4:4d:55:e9:b3:9b:
                    0e:e5:58:26:ed:b1:f2:98:15:8f:8b:26:b1:77:0c:
                    ed:ff:86:9e:a7:5b:64:63:f6:56:4b:49:8b:b1:a4:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4F:BB:59:E1:57:0E:7A:53:DA:2A:9D:D1:45:76:83:63:90:4C:42
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e31372e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:80:a7:47:6c:d7:aa:3f:24:2a:35:7e:64:8a:37:7c:cd:47:
         ab:af:cb:f7:29:30:e4:f7:69:5d:c7:69:04:7f:9c:64:11:6b:
         ca:00:06:d2:42:d6:f2:80:95:b1:1f:aa:2b:78:92:53:48:90:
         b7:60:28:b7:01:7b:66:1b:ce:31:9f:5b:4b:7e:51:37:2a:6a:
         a2:52:93:14:ac:49:df:a3:80:4c:48:af:41:1e:fb:f7:3d:ac:
         46:16:4f:e7:14:d5:64:0b:d9:20:77:f8:d6:11:64:d3:34:27:
         3e:59:fe:06:a4:d0:7d:4c:25:13:95:db:cb:2f:f8:bc:d2:d9:
         74:f4:35:bf:e3:c9:22:6d:dc:bc:8f:27:6a:8b:d5:4d:08:29:
         a9:b0:1f:5e:ca:0f:f4:ab:35:6a:45:e4:12:ca:d3:3f:ed:20:
         4a:a5:95:16:51:ae:3f:5a:b7:61:fd:67:f8:2e:7b:a3:0d:94:
         31:28:d5:3b:77:2e:a1:b2:5a:19:70:34:e1:2a:5e:4f:8e:15:
         92:50:85:e1:20:58:29:97:3c:d9:55:0b:e2:de:cd:f5:fd:a0:
         bb:1b:4d:80:17:73:26:cd:81:79:2e:82:e4:91:e4:bb:38:17:
         0a:4e:e5:35:2f:32:30:85:63:a2:58:65:fa:c6:fd:e1:f6:ca:
         ef:44:d5:53
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAspiM7FJesJfYGkA/XVgqMDkJKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MjNaFw0yNTAzMTExOTUxMjNaMDMxMTAvBgNV
BAMTKEUzNEZCQjU5RTE1NzBFN0E1M0RBMkE5REQxNDU3NjgzNjM5MDRDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKb3vp81gUZm64qHEx5BQi0TU
VLLHCTBE4K7gfmj7uRt+Ve+NbxsaCqA/SwsVcsjGR3kMCmm4pYsRqgDoLVt+N8Bg
svgLfc0R66pdHKkmww+uSx+2DDOIPgEcFTSs60YoAtDIjz8+y0egar1ZzIlZEbWz
l7M6nge2CPpDnusDSnMVHBEHZgBttueP043Vc5mmck5MBjCqA2nEHgDcaPFgFGye
TBPbq9lDt30IrL4Rs/qtPnDMFFzcMf55vtx6CU9Zxt0+HfZ8ozUrWN+1XzRgx6zc
tGEZvUGSVMRNVemzmw7lWCbtsfKYFY+LJrF3DO3/hp6nW2Rj9lZLSYuxpAC9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU40+7WeFXDnpT2iqd0UV2g2OQTEIwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzNDM1MmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0tETANBgkqhkiG9w0BAQsFAAOCAQEAAoCnR2zXqj8k
KjV+ZIo3fM1Hq6/L9ykw5PdpXcdpBH+cZBFrygAG0kLW8oCVsR+qK3iSU0iQt2Ao
twF7ZhvOMZ9bS35RNypqolKTFKxJ36OATEivQR779z2sRhZP5xTVZAvZIHf41hFk
0zQnPln+BqTQfUwlE5Xbyy/4vNLZdPQ1v+PJIm3cvI8naovVTQgpqbAfXsoP9Ks1
akXkEsrTP+0gSqWVFlGuP1q3Yf1n+C57ow2UMSjVO3cuobJaGXA04SpeT44VklCF
4SBYKZc82VUL4t7N9f2guxtNgBdzJs2BeS6C5JHkuzgXCk7lNS8yMIVjolhl+sb9
4fbK70TVUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org