Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32382e302f32342d3234203d3e203533303539.roa
File:                     3138392e34352e32382e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          XkZTyaYkC3blElHAAWFExgCUY5ckdcUzhrt9cm3YsuQ=
Subject key identifier:   99:FB:8A:C3:09:4A:32:DF:A1:F5:F4:9F:A5:24:96:66:31:9E:E4:09
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       0CCC33304F97BB945139D2611D5F9974C97B51F0
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32382e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:24 +0000
ROA not before:           Tue 12 Mar 2024 19:46:24 +0000
ROA not after:            Tue 11 Mar 2025 19:51:24 +0000
asID:                     53059
IP address blocks:        189.45.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cc:33:30:4f:97:bb:94:51:39:d2:61:1d:5f:99:74:c9:7b:51:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:24 2024 GMT
            Not After : Mar 11 19:51:24 2025 GMT
        Subject: CN=99FB8AC3094A32DFA1F5F49FA5249666319EE409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:2c:41:3a:10:27:0e:d5:83:f0:5e:f0:22:
                    22:d3:7c:24:e8:4a:2a:e1:14:0c:61:d7:2c:a7:34:
                    6b:63:11:01:3e:c6:8b:07:ff:d2:b9:2c:ee:a8:9c:
                    61:50:63:d7:27:fd:77:d3:4c:0e:ee:e7:d4:e8:83:
                    cd:4f:8e:0f:50:97:86:1c:55:f6:c2:cf:80:18:c6:
                    43:5e:3c:92:7f:a0:7a:4a:32:76:ec:56:a8:b6:45:
                    eb:e0:30:94:28:a5:52:8d:b0:51:75:c6:fb:65:60:
                    fb:40:8f:6a:6f:75:f0:4c:89:97:52:7e:8c:0f:74:
                    38:dc:06:1a:0a:0a:42:c6:20:67:6c:af:c2:d5:93:
                    c6:82:31:d3:49:5e:76:04:85:6f:e8:bb:8f:e5:0d:
                    a7:b8:70:3b:26:e4:a9:29:83:6e:6d:25:e7:4e:bb:
                    df:25:fa:bb:52:d8:2c:90:15:da:4a:19:27:35:83:
                    83:2a:ba:24:1b:97:f6:84:f5:ce:3d:dd:a9:d3:f5:
                    c5:ee:af:9c:03:b1:fd:ac:a1:72:c7:4b:61:83:73:
                    ce:41:7a:b8:66:ca:43:61:da:61:40:71:3e:7a:a0:
                    b0:58:d6:2b:90:2e:9f:ce:c2:ba:90:6d:a2:11:91:
                    cc:d4:a4:04:a2:ab:1e:f0:ac:8d:70:fa:3e:db:f7:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:8A:C3:09:4A:32:DF:A1:F5:F4:9F:A5:24:96:66:31:9E:E4:09
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e32382e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:92:66:37:12:d8:16:5c:84:b2:bb:41:a8:00:f6:6c:5f:91:
         7e:d1:45:0f:97:6f:5e:72:13:7d:b9:32:66:1a:d5:89:18:68:
         9c:23:26:ad:b9:6e:7e:67:be:7f:4c:7c:e0:03:92:ee:21:9b:
         e1:b8:cf:77:5b:81:b8:0e:0b:a7:6d:26:49:28:64:f9:2d:12:
         1f:6b:9b:c2:39:32:f7:65:a2:00:82:ca:4e:b7:d6:f9:47:0e:
         7c:de:b7:20:fd:7f:c0:56:9b:c9:70:dd:e8:ae:56:88:e3:19:
         5d:79:95:72:24:cc:b8:34:0f:f9:28:98:82:1e:f4:37:c9:ce:
         d8:f6:42:4f:54:e4:8d:21:6f:f6:30:fb:20:18:b0:4f:3e:d1:
         29:7b:a9:cf:59:57:3f:3b:69:d2:09:03:b4:5c:9c:bd:bd:b4:
         4d:e6:f0:00:4b:6b:5e:94:8a:90:7b:36:16:97:95:b7:e8:f2:
         6f:37:c4:d9:b1:71:5c:8f:48:dd:35:b4:8b:51:82:49:09:e6:
         93:df:ec:55:18:98:69:54:d4:4f:3f:75:86:6c:9b:ce:46:9a:
         97:92:bb:95:0b:eb:fb:9b:52:15:ed:d4:bc:44:ac:09:97:6f:
         e5:f3:1d:79:56:f8:05:e7:4b:35:ed:95:ca:ca:bc:90:c0:56:
         cf:43:2e:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDMwzME+Xu5RROdJhHV+ZdMl7UfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MjRaFw0yNTAzMTExOTUxMjRaMDMxMTAvBgNV
BAMTKDk5RkI4QUMzMDk0QTMyREZBMUY1RjQ5RkE1MjQ5NjY2MzE5RUU0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxixBOhAnDtWD8F7wIiLTfCTo
SirhFAxh1yynNGtjEQE+xosH/9K5LO6onGFQY9cn/XfTTA7u59Tog81Pjg9Ql4Yc
VfbCz4AYxkNePJJ/oHpKMnbsVqi2RevgMJQopVKNsFF1xvtlYPtAj2pvdfBMiZdS
fowPdDjcBhoKCkLGIGdsr8LVk8aCMdNJXnYEhW/ou4/lDae4cDsm5Kkpg25tJedO
u98l+rtS2CyQFdpKGSc1g4MquiQbl/aE9c493anT9cXur5wDsf2soXLHS2GDc85B
erhmykNh2mFAcT56oLBY1iuQLp/OwrqQbaIRkczUpASiqx7wrI1w+j7b95hxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUmfuKwwlKMt+h9fSfpSSWZjGe5AkwHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzNDM1MmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0tHDANBgkqhkiG9w0BAQsFAAOCAQEAgZJmNxLYFlyE
srtBqAD2bF+RftFFD5dvXnITfbkyZhrViRhonCMmrblufme+f0x84AOS7iGb4bjP
d1uBuA4Lp20mSShk+S0SH2ubwjky92WiAILKTrfW+UcOfN63IP1/wFabyXDd6K5W
iOMZXXmVciTMuDQP+SiYgh70N8nO2PZCT1TkjSFv9jD7IBiwTz7RKXupz1lXPztp
0gkDtFycvb20TebwAEtrXpSKkHs2FpeVt+jybzfE2bFxXI9I3TW0i1GCSQnmk9/s
VRiYaVTUTz91hmybzkaal5K7lQvr+5tSFe3UvESsCZdv5fMdeVb4BedLNe2Vysq8
kMBWz0MuVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org