Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235332e302f32342d3234203d3e203238323630.roa
File:                     3138372e31362e3235332e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier:          15kVXTvTt5leNC/xK/WPCA7aEZfQdwHj9zYJGg6CIs8=
Subject key identifier:   F2:ED:CA:A7:18:A6:62:1C:FF:75:FE:18:D3:C7:D9:C5:73:BB:30:7A
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       47EA87888E97A7B7B8EB3D80E35FA9A7DF6C6A80
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235332e302f32342d3234203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:51 +0000
ROA not before:           Thu 09 Mar 2023 20:12:51 +0000
ROA not after:            Thu 07 Mar 2024 20:17:51 +0000
asID:                     28260
IP address blocks:        187.16.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ea:87:88:8e:97:a7:b7:b8:eb:3d:80:e3:5f:a9:a7:df:6c:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:51 2023 GMT
            Not After : Mar  7 20:17:51 2024 GMT
        Subject: CN=F2EDCAA718A6621CFF75FE18D3C7D9C573BB307A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:af:9c:43:e7:ab:8e:9e:0b:96:77:8e:7b:
                    cd:76:54:b0:2c:c9:57:9b:53:3e:65:a8:a6:39:4c:
                    a4:dd:74:dd:45:9d:ed:12:65:6c:42:f7:76:d2:19:
                    a8:3a:e3:68:19:67:b5:51:e2:35:c5:24:26:d1:07:
                    d2:c1:14:3f:04:b6:36:fd:15:63:d0:79:97:21:19:
                    7d:5a:60:7b:74:88:f6:9d:e3:5b:e9:a0:ac:a5:f3:
                    7d:f8:d7:93:d3:28:b6:b6:6c:24:ff:09:c4:bd:ee:
                    ea:ff:eb:cf:0f:2f:24:cf:28:6d:94:82:68:95:e7:
                    47:98:60:6b:c8:32:05:85:f9:31:6e:71:3a:d1:36:
                    19:83:cf:d1:f8:8b:55:c8:0d:2b:61:5b:a7:22:e9:
                    af:75:e0:86:44:71:e6:d2:12:7a:5b:05:a2:eb:ab:
                    55:2b:18:45:8e:6c:bd:fb:6c:05:15:f4:96:ea:72:
                    a4:96:3f:fa:f1:62:85:6d:99:63:28:39:84:3d:aa:
                    e1:7d:86:a2:80:5e:0c:7c:14:12:a0:6d:76:d0:ff:
                    0f:00:0f:9c:5f:75:8a:a3:25:8c:ec:3a:58:68:d2:
                    c0:0d:c8:ad:5f:87:e4:97:41:14:10:83:58:f4:19:
                    91:d4:3f:2a:bb:d4:44:99:89:db:8c:df:a2:01:68:
                    9f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:CA:A7:18:A6:62:1C:FF:75:FE:18:D3:C7:D9:C5:73:BB:30:7A
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235332e302f32342d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:b5:77:05:6c:01:30:ea:6a:ed:8d:d6:cb:7e:00:c4:b4:
         f1:90:9e:cb:e9:a3:df:6d:cf:66:a8:ac:e9:6d:39:1d:e8:f0:
         63:dc:28:17:b4:54:22:a6:1a:5c:e5:4d:f6:c6:f3:9a:6b:8d:
         ae:23:35:cc:ed:2b:1e:8f:d3:46:0c:0a:ea:ae:99:23:c8:64:
         a3:f6:3a:1b:bb:16:93:3b:f8:25:9f:8c:6a:0c:0a:bd:d9:ff:
         ce:63:ce:4e:52:ae:b8:44:a5:e8:08:99:82:3b:d2:0b:8e:ee:
         8c:89:c0:32:6e:c2:f8:c8:24:4d:8d:e6:c8:f9:bc:67:e3:79:
         0b:92:b4:4f:c4:3e:ff:e1:59:76:41:59:70:2d:54:f1:58:ab:
         ba:71:d9:91:41:a8:48:88:7e:4a:eb:dc:a4:cd:c7:a8:ae:02:
         8c:12:df:6a:64:bd:56:5b:22:d7:52:02:c3:5c:6d:19:a0:28:
         ea:94:07:db:7f:a1:8e:16:f5:66:ea:aa:40:1a:e4:ff:8d:f2:
         2f:cc:81:f7:c1:d5:6b:bf:4f:b1:a5:e7:42:25:52:60:83:f9:
         0b:e8:a9:e9:7e:1f:c6:b0:7c:bd:df:1e:ca:6a:69:c6:40:be:
         57:6c:8c:2e:d9:2f:75:11:78:7e:17:58:c5:49:09:dc:a9:81:
         e7:fc:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org