Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234332e302f32342d3234203d3e203238323630.roa
File:                     3138372e31362e3234332e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier:          AbR9nhQ+8eTHk3osyCrypE3jXvZsW0tN4mif3J8eusM=
Subject key identifier:   A0:F4:35:13:B1:20:01:AA:02:6F:79:CF:E2:B9:46:F9:65:32:F6:22
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       291570AEDA7991E7E57678B492F5176EC778E5C2
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234332e302f32342d3234203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:46 +0000
ROA not before:           Thu 09 Mar 2023 20:12:46 +0000
ROA not after:            Thu 07 Mar 2024 20:17:46 +0000
asID:                     28260
IP address blocks:        187.16.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:15:70:ae:da:79:91:e7:e5:76:78:b4:92:f5:17:6e:c7:78:e5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:46 2023 GMT
            Not After : Mar  7 20:17:46 2024 GMT
        Subject: CN=A0F43513B12001AA026F79CFE2B946F96532F622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:ae:2d:4e:fa:ce:5c:2c:16:45:e6:a9:9f:
                    9a:38:93:34:2d:40:8e:ca:fb:60:97:9a:ec:14:f5:
                    4d:7a:4d:9e:83:85:aa:0d:4f:4b:24:48:0a:40:4d:
                    9c:17:51:ee:bf:d3:fd:83:a2:51:2d:dd:a2:99:c5:
                    ee:37:a8:99:34:7f:a5:15:fb:02:cf:4b:6e:21:f5:
                    8c:66:a9:85:c0:fe:17:a7:e7:93:66:9a:fe:18:b2:
                    30:68:1c:14:33:3f:3b:23:79:cb:3d:03:e7:f6:05:
                    09:0d:f3:28:f8:cc:71:6b:c1:63:c5:19:00:fa:0c:
                    60:7a:4e:57:a6:26:36:20:5c:d8:ce:a3:d4:62:1b:
                    41:9d:a2:16:af:d1:d3:77:c9:4c:93:76:4d:d1:58:
                    e9:4f:4e:1b:ee:36:59:2f:48:3f:4b:a7:ae:2b:40:
                    7b:f6:01:38:23:57:06:9d:6c:7c:d2:15:9e:1e:34:
                    b5:78:8f:a4:46:97:8e:f0:33:ae:17:c0:84:4d:b2:
                    37:19:a8:1f:d5:25:5e:4b:fc:fc:93:25:93:ee:38:
                    d4:e2:81:52:a1:10:93:fb:e2:12:79:d7:db:61:8a:
                    25:95:4f:eb:8c:26:28:bd:1d:e6:63:1d:77:72:8e:
                    f9:ac:ac:53:7c:82:8d:72:ba:cc:bb:c6:b1:9c:54:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F4:35:13:B1:20:01:AA:02:6F:79:CF:E2:B9:46:F9:65:32:F6:22
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3234332e302f32342d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:33:13:2a:e3:33:e3:84:db:c1:8e:2a:3a:c7:75:9e:79:
         fe:94:89:52:b9:fb:c7:12:f0:bf:75:0b:50:a6:54:8d:16:49:
         bf:0c:cb:b3:b8:73:6b:96:69:88:83:4a:98:a9:8a:d2:32:a1:
         48:a8:0e:ef:c7:11:75:21:20:5f:e5:8f:77:97:6e:29:8a:a9:
         56:7a:db:60:ce:88:05:fb:fd:07:ca:64:24:55:17:67:a3:71:
         53:84:b5:bd:af:04:5a:76:3a:05:e3:62:72:d7:0e:d8:59:ec:
         c1:31:df:93:76:fd:f7:34:2e:9b:7f:50:0e:1f:24:e1:9a:e1:
         f9:0c:d1:21:0b:cb:cb:77:26:94:a4:b2:d9:03:39:29:b8:da:
         e2:ed:9a:40:2f:28:ca:d7:0a:dd:f2:cc:5c:40:3a:b6:d3:ab:
         c3:fc:bd:f9:20:75:36:14:a7:f3:4b:80:12:6c:18:68:c7:b1:
         d1:2a:a7:09:7e:73:4d:ed:ba:2f:68:ed:c0:85:5d:33:7a:c6:
         02:46:05:c7:ee:8d:a3:7c:00:2c:69:bd:80:a7:88:8e:2c:0d:
         d5:45:10:6d:83:16:ae:8e:17:ec:43:67:81:ae:8e:43:e5:55:
         c5:4f:ff:1f:6b:d6:9e:fa:d8:8d:c4:d8:5f:4d:51:a3:a5:0e:
         b6:d9:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org