Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e33302e302f32342d3234203d3e203533303539.roa
File:                     3138392e34352e33302e302f32342d3234203d3e203533303539.roa (raw, json)
Hash identifier:          w5nkgvsPzlx5AQEO95yxCZIdRnytHENJqOvP26/eYsk=
Subject key identifier:   9E:6B:1A:E4:11:88:D2:A7:FD:ED:4A:25:18:A6:5A:58:35:69:B5:AF
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       28404546A7F39A18247BE95BD3AEE8A9BA6AEAA8
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e33302e302f32342d3234203d3e203533303539.roa
Signing time:             Tue 12 Mar 2024 19:51:15 +0000
ROA not before:           Tue 12 Mar 2024 19:46:15 +0000
ROA not after:            Tue 11 Mar 2025 19:51:15 +0000
asID:                     53059
IP address blocks:        189.45.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:40:45:46:a7:f3:9a:18:24:7b:e9:5b:d3:ae:e8:a9:ba:6a:ea:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:15 2024 GMT
            Not After : Mar 11 19:51:15 2025 GMT
        Subject: CN=9E6B1AE41188D2A7FDED4A2518A65A583569B5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:bf:6a:62:93:a0:cf:25:8e:e9:af:e8:d9:
                    03:b6:78:8f:75:a4:f8:e3:ec:ce:d6:40:ec:d8:82:
                    ae:95:0d:75:0d:5d:31:dc:70:1d:e8:28:ca:6e:56:
                    4a:ea:40:1b:56:17:10:96:7d:3d:43:20:c2:4a:f0:
                    ba:ab:41:db:9b:85:4d:ca:45:ce:64:96:1b:10:6b:
                    9a:08:33:68:d2:32:4e:83:74:1a:5d:cb:a8:38:54:
                    1e:47:0c:1d:98:ac:ef:ce:2f:15:a9:57:84:50:30:
                    83:8f:54:03:c5:70:1b:c3:12:47:08:30:39:5f:1a:
                    2d:b8:3b:97:06:4f:15:e5:58:65:d8:74:b5:0b:72:
                    b7:4a:d3:14:bc:79:48:83:25:f6:81:58:de:1e:89:
                    3c:71:0e:f2:c3:f7:4f:eb:01:cd:bc:98:f6:de:2e:
                    af:3a:c3:fc:56:81:c7:5d:a2:98:49:fc:8a:42:db:
                    a5:f6:fd:f3:e0:6e:25:7f:49:7e:87:cc:a9:d0:2a:
                    2e:ca:7d:98:67:88:e8:83:db:2a:a1:2d:f5:d6:b4:
                    a5:df:d8:61:71:5e:75:22:93:b1:cc:cd:32:80:0c:
                    e8:71:21:12:bb:fa:bd:4e:e6:12:da:52:04:8b:1a:
                    f9:b0:bc:04:e2:06:2c:82:22:5c:80:7c:a7:67:b9:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:1A:E4:11:88:D2:A7:FD:ED:4A:25:18:A6:5A:58:35:69:B5:AF
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138392e34352e33302e302f32342d3234203d3e203533303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:84:c8:4a:80:9b:9f:b2:48:44:eb:b6:c3:47:7e:01:4f:
         f6:90:ea:62:5e:73:68:0a:77:2d:21:29:5f:69:94:f2:d6:88:
         06:d4:c2:a0:eb:36:e6:bd:f2:99:01:f4:65:5e:33:64:92:fc:
         b1:95:ce:bd:e6:6f:aa:9e:1e:dc:a1:fe:90:bf:6f:6a:a4:d7:
         7a:3b:81:e9:80:9a:35:c7:68:ba:e4:a3:2f:b6:3c:04:cf:3b:
         6d:a7:f0:11:4e:33:49:d2:ae:2f:03:86:0c:c4:f9:3c:98:99:
         a6:93:bf:b1:ac:6a:d1:3f:af:b9:53:f9:36:06:46:5f:47:54:
         c4:c5:ee:48:8a:40:04:0d:48:f0:2c:f3:fd:ae:28:84:c1:30:
         04:ba:93:d9:d0:38:28:75:73:76:99:c3:50:fc:e2:b5:de:63:
         78:7f:b5:32:04:31:42:4d:03:72:07:37:bd:b2:30:3a:17:03:
         a4:c6:78:4c:1f:3b:56:90:b2:01:e4:be:79:0f:44:7d:12:55:
         49:60:57:1b:52:72:cf:7a:fa:94:a6:73:7e:49:9d:f1:8f:01:
         b5:1b:52:b7:c1:22:9d:dd:3e:46:2c:81:ef:d2:e4:18:dc:48:
         0a:0b:0a:69:bc:bc:df:99:94:2d:07:43:42:dd:13:0d:e2:6b:
         03:56:2d:4b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKEBFRqfzmhgke+lb067oqbpq6qgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAxRDIwRkM4RjQzNkMzRDY3NzI5OEZBNDEyQzhFMzFG
QUQwODRGODAeFw0yNDAzMTIxOTQ2MTVaFw0yNTAzMTExOTUxMTVaMDMxMTAvBgNV
BAMTKDlFNkIxQUU0MTE4OEQyQTdGREVENEEyNTE4QTY1QTU4MzU2OUI1QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Lb9qYpOgzyWO6a/o2QO2eI91
pPjj7M7WQOzYgq6VDXUNXTHccB3oKMpuVkrqQBtWFxCWfT1DIMJK8LqrQdubhU3K
Rc5klhsQa5oIM2jSMk6DdBpdy6g4VB5HDB2YrO/OLxWpV4RQMIOPVAPFcBvDEkcI
MDlfGi24O5cGTxXlWGXYdLULcrdK0xS8eUiDJfaBWN4eiTxxDvLD90/rAc28mPbe
Lq86w/xWgcddophJ/IpC26X2/fPgbiV/SX6HzKnQKi7KfZhniOiD2yqhLfXWtKXf
2GFxXnUik7HMzTKADOhxIRK7+r1O5hLaUgSLGvmwvATiBiyCIlyAfKdnuXfdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnmsa5BGI0qf97UolGKZaWDVpta8wHwYDVR0j
BBgwFoAUMB0g/I9DbD1ncpj6QSyOMfrQhPgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC8zMDFEMjBGQzhGNDM2QzNENjc3Mjk4RkE0MTJDOEUzMUZBRDA4NEY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMwMUQyMEZDOEY0MzZDM0Q2
NzcyOThGQTQxMkM4RTMxRkFEMDg0RjguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkR0FQSlA2NWVmZUNUVWE4NGh3NVJHUmJaR1BXMnFSeVR2Z2FoZ2p4RWVCLzAv
MzEzODM5MmUzNDM1MmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMzMw
MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0tHjANBgkqhkiG9w0BAQsFAAOCAQEAnc2EyEqAm5+y
SETrtsNHfgFP9pDqYl5zaAp3LSEpX2mU8taIBtTCoOs25r3ymQH0ZV4zZJL8sZXO
veZvqp4e3KH+kL9vaqTXejuB6YCaNcdouuSjL7Y8BM87bafwEU4zSdKuLwOGDMT5
PJiZppO/saxq0T+vuVP5NgZGX0dUxMXuSIpABA1I8Czz/a4ohMEwBLqT2dA4KHVz
dpnDUPzitd5jeH+1MgQxQk0Dcgc3vbIwOhcDpMZ4TB87VpCyAeS+eQ9EfRJVSWBX
G1Jyz3r6lKZzfkmd8Y8BtRtSt8Eind0+RiyB79LkGNxICgsKaby835mULQdDQt0T
DeJrA1YtSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org