Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234322e302f32342d3234203d3e203238323630.roa
File:                     3138372e31362e3234322e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier:          6Ojhie6tkI1uxrVQ/yKlyoJNNP1QLmKPC/TgOAGoFQk=
Subject key identifier:   7B:19:58:12:DF:49:DE:07:DA:37:02:88:8C:77:E5:6E:6E:CB:00:EC
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       38BD5B3692DD12DD1507C0B2B2EC73BD4219B1DF
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234322e302f32342d3234203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:45 +0000
ROA not before:           Thu 09 Mar 2023 20:12:45 +0000
ROA not after:            Thu 07 Mar 2024 20:17:45 +0000
asID:                     28260
IP address blocks:        187.16.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bd:5b:36:92:dd:12:dd:15:07:c0:b2:b2:ec:73:bd:42:19:b1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:45 2023 GMT
            Not After : Mar  7 20:17:45 2024 GMT
        Subject: CN=7B195812DF49DE07DA3702888C77E56E6ECB00EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:78:40:ed:48:8c:57:d1:60:98:7e:7f:4d:
                    9a:a5:39:b6:83:f6:6c:9b:20:80:1b:8e:94:62:13:
                    63:53:44:85:fc:cb:0b:b1:94:1c:75:e5:be:0a:68:
                    79:f7:9f:49:1c:d0:df:7c:ed:ba:c3:3e:ad:67:e8:
                    d1:79:a3:23:19:6f:ef:be:b6:c5:0d:71:2f:b0:13:
                    0c:ea:98:9c:0d:03:e3:b6:e9:d3:29:d4:ca:19:c9:
                    71:b2:ca:ac:82:5b:ef:3e:20:f8:b3:8d:08:61:dd:
                    fa:ac:7c:c2:62:ed:5e:d4:3e:87:c9:98:c8:ce:66:
                    cd:2d:3c:58:4f:26:15:ab:75:ea:2a:dc:a7:54:b2:
                    59:33:87:d9:38:08:33:5a:c6:fc:2c:23:71:3c:0d:
                    ff:73:b2:97:23:69:71:31:7a:7c:2e:fc:7c:3c:12:
                    d2:3c:c9:0a:54:07:ef:6d:9f:7f:c9:2b:6d:09:56:
                    4e:b2:9d:8d:67:cc:41:28:09:86:c4:b2:aa:93:95:
                    27:33:a7:ea:60:f5:d7:59:ab:a2:d8:22:91:24:13:
                    6a:8f:00:d4:b1:fc:c5:83:e5:cb:c2:e6:e2:0d:60:
                    fb:00:5c:43:46:67:5c:e0:6b:f6:50:b3:1b:06:ec:
                    15:0b:d1:ad:af:db:49:5a:7b:c7:ff:2c:5b:7f:7b:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:58:12:DF:49:DE:07:DA:37:02:88:8C:77:E5:6E:6E:CB:00:EC
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234322e302f32342d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:78:38:1f:90:74:2c:52:6b:bc:85:52:08:91:91:e0:39:cb:
         b6:79:f9:55:6c:20:e4:71:e5:33:87:81:10:d1:bc:b6:6c:a0:
         bc:ea:af:10:67:7f:97:76:29:f8:49:f2:d8:c3:ba:7b:fc:91:
         7a:b4:dd:0d:fc:1c:69:17:db:89:18:5e:a4:27:99:6d:d2:0a:
         e4:eb:56:01:65:56:13:5e:5c:85:9e:bf:9b:1c:23:dd:e5:32:
         98:5a:24:08:33:50:83:d9:bd:6b:77:8b:b6:de:00:73:8d:06:
         08:23:16:66:15:d0:43:67:74:34:5a:69:7c:2c:11:fd:37:34:
         7d:77:6a:33:f6:93:19:17:a5:6c:a8:41:6f:e4:e9:60:5c:7e:
         d4:d1:c9:da:0e:cb:d9:21:a2:9d:69:0a:56:63:26:f8:04:9d:
         9d:f9:ee:45:08:28:2a:eb:f2:71:27:67:f9:37:33:2c:b0:ad:
         a5:9a:80:c1:8e:29:e8:33:02:a5:4c:c2:55:39:7a:9c:28:5b:
         16:e3:5c:3c:74:1a:b7:ea:06:f1:e7:bd:06:73:d2:99:a6:79:
         f4:4e:f9:20:79:fb:87:c4:94:12:2d:2d:d9:7e:3a:e8:a0:66:
         57:d5:19:43:35:cf:65:2f:31:f9:db:89:de:d2:7b:95:15:78:
         04:06:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org