Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32322d3232203d3e203238323630.roa
File:                     3138372e31362e3234302e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier:          mOHPQthRsx34hSRf7QRJCDZZP7U674kplBngwb2ekx4=
Subject key identifier:   54:F4:9D:17:1A:8B:AB:33:DA:B4:B7:28:7C:00:8A:19:97:2C:A5:A7
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       5DCB6BEB614E934E906117296141A4F96448B83E
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32322d3232203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:56 +0000
ROA not before:           Thu 09 Mar 2023 20:12:56 +0000
ROA not after:            Thu 07 Mar 2024 20:17:56 +0000
asID:                     28260
IP address blocks:        187.16.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cb:6b:eb:61:4e:93:4e:90:61:17:29:61:41:a4:f9:64:48:b8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:56 2023 GMT
            Not After : Mar  7 20:17:56 2024 GMT
        Subject: CN=54F49D171A8BAB33DAB4B7287C008A19972CA5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:f2:78:f5:b3:c9:7c:9b:73:77:3b:29:18:
                    e3:37:64:a1:a5:a2:3b:84:97:08:56:38:52:63:92:
                    fc:0a:49:ec:ff:db:a3:46:75:02:9a:52:df:ed:1c:
                    ed:4a:cf:8b:90:4f:c6:13:77:4d:81:a0:09:de:ab:
                    15:85:ae:b2:9d:db:74:28:39:23:9b:0f:ee:b1:90:
                    ba:b4:c3:c9:e5:2a:20:71:92:b7:bf:33:bf:33:ae:
                    b2:4e:8c:5d:4f:ba:55:6f:21:5d:63:54:35:5c:ef:
                    99:67:1a:5b:59:41:cc:a8:67:11:53:76:40:a3:b3:
                    49:6c:69:37:de:ea:e8:ae:57:57:ac:30:fd:f6:fb:
                    5e:61:e3:15:42:48:4f:7c:fd:1f:fa:ce:b1:7f:76:
                    4a:f2:e1:53:3f:83:be:5d:7d:cb:44:1e:b1:9f:2d:
                    49:df:3d:3b:b5:1b:34:dc:3a:ba:cf:3b:1d:83:d3:
                    96:19:d0:16:44:7d:87:14:a9:1c:64:4f:d6:b6:e3:
                    d3:76:0c:54:65:67:df:8b:4b:85:15:75:97:85:83:
                    30:29:fb:f0:ea:f3:e1:6a:eb:d3:ad:9c:be:cc:00:
                    6c:b6:06:b1:a3:b1:4f:ca:90:28:7f:cd:e8:6a:7d:
                    06:a4:19:5a:4e:aa:e1:5d:3b:14:31:c5:bb:20:48:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:9D:17:1A:8B:AB:33:DA:B4:B7:28:7C:00:8A:19:97:2C:A5:A7
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234302e302f32322d3232203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:b7:2a:ee:4b:57:67:ac:25:0a:d5:92:db:cd:3f:50:38:
         3c:67:f7:a2:9f:0e:41:af:55:ce:df:41:05:5e:e2:f4:fc:bb:
         78:e6:4c:02:78:80:d4:0b:01:76:5e:2e:05:6a:50:da:3b:14:
         a0:d1:1e:8b:2e:c1:91:ed:1f:e7:11:17:ae:4d:0b:df:1d:a9:
         90:b2:86:5e:a6:98:9a:06:c8:42:d1:b7:2a:16:f9:21:78:fb:
         96:3e:e5:69:9b:68:eb:8c:69:9c:13:74:57:ae:c6:f4:46:b5:
         a4:ca:af:6a:ce:cc:4d:93:b7:6a:da:38:f3:91:30:34:3e:a9:
         ed:05:93:41:48:66:47:cb:78:04:28:25:9b:7b:05:c8:75:ff:
         fb:35:6c:99:7a:69:77:6e:eb:83:a6:55:d4:8e:b0:d8:8f:ec:
         a3:5b:8a:c4:e8:05:d5:2d:e5:b2:8a:72:e9:77:09:26:15:e5:
         5c:99:21:cd:83:6a:eb:7c:31:0e:b1:1c:b1:2d:6f:9a:40:66:
         fe:ea:69:a5:2a:87:55:67:7a:9b:15:3d:ff:18:39:6d:e3:54:
         16:c2:89:71:35:bb:75:35:95:9d:ec:40:e2:c5:c1:7b:10:3a:
         d4:ac:03:09:ed:ce:f5:4b:60:13:ab:fe:d2:4e:af:06:0e:2d:
         d4:08:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org