Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235322e302f32322d3232203d3e203238323630.roa
File:                     3138372e31362e3235322e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier:          VBz3SDg+78mxSi17Jy6zrk6UN/UXM8zVp5Wx4KZqcpA=
Subject key identifier:   F4:B4:D6:30:C4:5E:96:33:EC:17:BF:84:DB:45:39:CC:B2:BB:24:14
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       329974CA37CA04839DB3EACF2B0F11D56EBFDB70
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235322e302f32322d3232203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:45 +0000
ROA not before:           Thu 09 Mar 2023 20:12:45 +0000
ROA not after:            Thu 07 Mar 2024 20:17:45 +0000
asID:                     28260
IP address blocks:        187.16.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:99:74:ca:37:ca:04:83:9d:b3:ea:cf:2b:0f:11:d5:6e:bf:db:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:45 2023 GMT
            Not After : Mar  7 20:17:45 2024 GMT
        Subject: CN=F4B4D630C45E9633EC17BF84DB4539CCB2BB2414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:b1:c0:5d:ee:0e:47:21:0c:a1:4a:51:b2:
                    1a:40:c6:fa:27:5a:0f:7e:c0:ef:da:24:ad:60:7c:
                    3b:a7:29:ab:6f:49:82:f7:8a:f4:24:30:85:7f:43:
                    ae:2d:10:1b:26:4d:90:2d:f5:75:8a:23:21:34:ce:
                    dc:1c:1c:ee:df:f9:15:75:b6:63:9e:16:87:e5:9b:
                    16:d2:5a:2f:16:51:5a:4e:c0:a5:70:3c:06:6d:85:
                    9a:87:c8:93:db:8e:e5:16:45:17:e6:bf:b9:36:c1:
                    75:61:74:87:2a:ce:e1:92:dd:19:88:d8:cc:7c:ce:
                    b6:73:94:2d:da:1a:9e:19:ec:98:1d:1d:13:e8:c9:
                    65:5c:7b:6b:47:6d:42:fa:2f:01:81:70:79:58:64:
                    84:6b:83:16:28:eb:5a:d3:bb:d8:e1:4d:90:47:58:
                    68:5f:50:8b:12:b2:23:1f:ec:10:61:94:c3:09:e7:
                    8e:fd:46:d5:6b:f4:51:91:52:8f:74:05:f9:4d:43:
                    26:d5:bd:d0:0f:72:9e:61:54:2b:92:b4:ed:d7:e6:
                    aa:37:5c:d4:88:cc:06:b5:66:6a:80:c5:05:50:9a:
                    fd:e7:86:f8:59:48:6e:72:04:10:18:b4:9b:fd:46:
                    b4:77:90:cb:d9:83:be:dd:17:4a:14:3d:62:c9:19:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B4:D6:30:C4:5E:96:33:EC:17:BF:84:DB:45:39:CC:B2:BB:24:14
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235322e302f32322d3232203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:15:ab:3f:d1:8f:39:cb:c4:11:64:86:e2:e8:76:87:34:
         40:8f:5b:b6:99:75:64:be:08:a9:ac:1b:aa:23:22:5d:a4:62:
         e8:0e:2e:65:fc:a4:27:b2:3d:53:2a:e4:29:bf:21:bb:98:ad:
         89:25:6d:3f:41:e3:1b:a1:fa:49:68:6f:75:3d:95:02:27:85:
         1d:9c:40:52:cd:8e:5f:fe:65:41:f7:91:d0:5f:71:77:43:12:
         f2:a4:5d:46:44:b0:60:8f:3f:c7:d0:46:59:44:3b:f4:e5:ee:
         9c:8c:cf:ee:37:4d:8d:e6:69:bf:3a:29:21:79:a5:65:61:dd:
         1c:f6:83:e2:74:87:e1:51:ea:af:16:e9:93:b1:04:af:25:04:
         4d:ab:ce:23:a0:98:3b:01:5c:35:34:40:c8:26:d8:e2:14:a8:
         88:34:40:62:c5:8b:61:73:4f:a7:47:db:07:45:c5:89:e0:10:
         ea:10:db:e5:eb:94:34:dc:42:e1:2f:95:6e:ca:89:e9:81:98:
         b9:ce:82:81:0f:b5:d1:8c:00:69:2f:47:61:0e:2c:04:ac:e7:
         b4:01:22:33:05:01:37:50:6a:79:64:15:fa:39:d1:dd:57:4d:
         8b:93:be:5d:a7:a7:95:b9:22:53:0a:6d:ce:62:6a:7b:54:fc:
         5a:5a:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org