Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32302e302f32332d3233203d3e203533303539.roa
File:                     3138392e34352e32302e302f32332d3233203d3e203533303539.roa (raw, json)
Hash identifier:          yoKBeFZvyruqGupHhMW+SRqxi2E0bZgy0H8/URJd3UY=
Subject key identifier:   56:5D:24:85:FA:13:04:3E:5C:88:7A:24:79:06:38:B7:C3:7A:60:97
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       6D16E1EDF802FCC0249050D376D46D40EF3A51BB
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32302e302f32332d3233203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:15 +0000
ROA not before:           Tue 12 Mar 2024 19:46:15 +0000
ROA not after:            Tue 11 Mar 2025 19:51:15 +0000
asID:                     53059
IP address blocks:        189.45.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:e1:ed:f8:02:fc:c0:24:90:50:d3:76:d4:6d:40:ef:3a:51:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:15 2024 GMT
            Not After : Mar 11 19:51:15 2025 GMT
        Subject: CN=565D2485FA13043E5C887A24790638B7C37A6097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:4b:61:3c:07:c9:84:c7:16:8b:19:49:00:
                    ef:fb:68:02:db:a3:e6:1b:52:c3:6d:2d:41:02:fa:
                    af:48:45:19:82:9e:5e:c1:8d:f5:69:36:d7:56:d5:
                    40:bb:ba:39:06:4f:78:13:7b:1a:ee:60:b3:cc:98:
                    38:fc:d7:55:c8:32:4b:25:d7:1e:d4:63:b2:28:8b:
                    cf:00:bc:7a:cc:c5:b6:ce:59:15:29:e0:9b:4f:1b:
                    3a:1b:2e:73:32:f1:80:eb:f5:f8:a1:41:8a:39:38:
                    ca:cd:c9:6f:e4:64:e1:31:56:9c:53:67:05:2b:75:
                    d4:0f:5b:d1:d2:18:64:be:08:97:9a:6b:b1:ec:41:
                    81:73:25:ce:6d:16:4f:3b:33:cd:ba:98:7d:82:e1:
                    e6:92:76:ea:e2:e7:6a:91:7b:cc:5f:f5:55:33:5d:
                    25:ce:22:24:2c:a1:54:4b:1d:2e:0e:74:79:25:16:
                    83:13:ca:f3:0e:31:a7:ba:4d:29:d3:55:e2:fa:20:
                    15:a2:66:dd:57:5d:c4:2b:b1:e3:e5:68:f9:08:7b:
                    15:39:7d:f0:39:26:2f:18:36:0e:92:ce:36:dc:80:
                    ff:9e:71:8d:30:81:6a:f8:48:95:78:34:8f:3a:85:
                    44:ad:a8:b4:41:87:34:f6:8f:21:4e:70:84:b5:42:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:24:85:FA:13:04:3E:5C:88:7A:24:79:06:38:B7:C3:7A:60:97
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32302e302f32332d3233203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:45:e9:e9:d9:c0:b1:b8:bc:1a:76:8e:9f:17:b7:9a:16:e2:
         3c:7a:12:ea:76:44:39:72:f6:48:54:14:c7:76:4a:da:bb:fb:
         74:00:b7:50:2a:1d:0e:4d:ea:7b:9a:55:59:07:67:75:a0:19:
         ec:0f:8f:dc:82:1b:6c:90:ec:2f:79:57:bf:b7:de:26:51:92:
         fa:36:10:26:97:71:63:84:61:40:ef:e1:4f:11:f2:da:db:e2:
         a7:a6:99:3a:4e:2d:8c:fa:1e:8c:4b:f3:26:6c:f2:46:4a:aa:
         8c:a9:ba:73:8c:68:77:27:0a:1f:64:80:ff:f0:6a:e9:d9:ff:
         16:ad:7a:78:ad:29:8d:00:70:61:90:a6:aa:c4:da:09:de:b4:
         8b:37:6c:e7:df:7b:45:72:d5:33:82:53:88:06:5f:3a:75:bb:
         92:29:c6:b4:f7:e5:30:41:b0:4f:5b:dc:a4:25:38:89:fb:50:
         49:29:c0:6d:2e:da:57:d4:aa:dc:94:f1:27:7d:23:3f:4d:7b:
         df:db:03:b6:6f:7a:a3:e3:f5:fd:fe:5d:b1:de:ce:3d:33:97:
         39:11:5f:ff:a9:9a:94:72:17:f1:9c:2f:25:a4:8d:31:02:95:
         0b:c8:c9:a6:d4:2a:4b:01:e0:17:e5:fb:00:0f:fc:f8:93:8b:
         57:31:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org