Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa
File:                     3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          KME8s4wIkX7ybR3xcY7f9yBPk8iqZalqKIpCVWnBj6Y=
Subject key identifier:   0B:99:77:06:77:97:2D:4F:0F:90:54:BB:86:B9:7D:CB:BF:10:EA:2E
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       3A1DC937DCC2FFAFC09FB2080FEBE01533328B88
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:13 +0000
ROA not before:           Tue 12 Mar 2024 19:46:13 +0000
ROA not after:            Tue 11 Mar 2025 19:51:13 +0000
asID:                     28220
IP address blocks:        201.148.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1d:c9:37:dc:c2:ff:af:c0:9f:b2:08:0f:eb:e0:15:33:32:8b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:13 2024 GMT
            Not After : Mar 11 19:51:13 2025 GMT
        Subject: CN=0B99770677972D4F0F9054BB86B97DCBBF10EA2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:1a:90:d3:49:a3:09:ff:77:73:ca:fe:21:
                    f7:ae:ae:a4:0c:e1:18:d7:d9:fa:50:0e:20:37:50:
                    b1:a3:6d:bf:6e:99:c7:c2:13:7f:4f:cb:bb:ce:2d:
                    8a:d8:b0:12:90:2d:a1:df:42:51:df:e9:6a:31:07:
                    71:9e:62:9f:aa:94:8f:3f:fd:bf:57:27:90:79:2f:
                    1c:2b:2e:35:0d:40:7d:78:4d:0b:56:28:ae:b2:c1:
                    9d:40:c1:31:7d:28:59:a8:6d:1e:5b:c3:a9:1d:df:
                    a7:86:02:68:a2:1c:3a:68:e9:60:47:0a:9f:9a:0f:
                    38:b9:b3:20:b0:d0:55:0e:60:d0:37:c7:e0:aa:ad:
                    3c:88:ed:bb:51:10:8d:92:9e:af:e4:ef:e6:4d:a9:
                    68:cf:4f:97:01:f2:6a:84:b2:e5:d0:4d:e8:05:9b:
                    60:7b:1e:fc:92:15:a3:3d:26:38:05:89:10:14:b1:
                    ca:1a:ad:f4:fd:a4:1c:25:5b:b1:6c:32:f7:d2:3d:
                    f1:ef:12:6d:1b:a2:2e:22:00:82:47:b1:8a:d3:21:
                    b8:e3:eb:9f:a4:18:51:6d:f5:29:ab:5c:d2:4f:de:
                    39:d3:c9:f3:1c:5d:f8:2c:d7:af:c3:4e:42:c9:5d:
                    27:4a:47:70:2b:a3:b6:14:50:7f:76:b9:10:95:9f:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:99:77:06:77:97:2D:4F:0F:90:54:BB:86:B9:7D:CB:BF:10:EA:2E
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3230312e3134382e3138382e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:12:f6:1e:25:65:e0:f6:07:ad:ea:c1:3b:61:b2:54:11:
         fd:8c:b1:0b:b3:09:32:0f:4d:24:6e:0d:8e:97:f3:c3:d1:e5:
         3f:0a:ca:b1:07:8e:cd:47:a7:6e:0d:d7:10:77:20:03:56:f6:
         0a:02:13:ed:5b:b9:8e:67:70:5d:af:c8:db:fd:04:57:49:61:
         2b:28:69:91:d1:a0:de:46:b6:9b:5c:ee:90:80:51:bf:29:f8:
         30:cd:07:04:dc:d2:24:f2:40:3c:71:6b:f2:a1:f9:84:29:6e:
         41:24:26:e3:8f:2b:9c:1f:fe:6d:e8:74:73:f8:d2:8d:3d:d7:
         59:e4:ed:b1:86:40:08:7e:51:72:98:16:b9:bb:c8:e6:0f:53:
         53:c3:36:7f:22:1e:15:56:ea:3c:cc:2e:8e:e3:70:9c:25:80:
         cf:f3:96:76:86:bb:30:40:5d:1f:50:5a:36:89:aa:c1:27:14:
         50:9d:bb:fb:51:2f:e9:05:8a:c3:02:f4:60:eb:c7:de:27:85:
         b2:4e:b3:18:c1:23:86:a3:fd:87:a8:6a:4b:d4:42:ec:a3:89:
         0a:d7:6f:bc:5d:c2:ec:4c:eb:9b:69:36:57:65:04:9a:fc:81:
         67:da:13:4c:a7:d7:8c:fc:ea:1f:cc:f7:99:e8:39:2c:a9:7c:
         f9:ca:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org