Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235352e302f32342d3234203d3e203238323630.roa
File:                     3138372e31362e3235352e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier:          q6MRWXhnjJWDnwbrEYJxc235bsbrF1rAR0mWO9lbAy0=
Subject key identifier:   26:B5:87:16:DF:C4:7C:B0:DC:28:CF:65:AD:1E:67:9D:26:6D:17:61
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       6950D369E839689F315B18A78BC31444076F714B
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235352e302f32342d3234203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:48 +0000
ROA not before:           Thu 09 Mar 2023 20:12:48 +0000
ROA not after:            Thu 07 Mar 2024 20:17:48 +0000
asID:                     28260
IP address blocks:        187.16.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:50:d3:69:e8:39:68:9f:31:5b:18:a7:8b:c3:14:44:07:6f:71:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:48 2023 GMT
            Not After : Mar  7 20:17:48 2024 GMT
        Subject: CN=26B58716DFC47CB0DC28CF65AD1E679D266D1761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:98:57:77:fe:0c:b7:45:d2:fb:30:c1:14:
                    da:af:f3:e7:6d:93:91:4c:2f:47:26:ed:c2:a3:61:
                    0d:c6:9c:21:43:91:17:a6:66:e0:53:c0:de:4a:da:
                    c4:7e:57:57:59:5e:56:14:2e:58:34:fc:97:11:54:
                    01:0c:63:44:4a:8f:39:72:27:ae:a2:f4:d9:1f:7b:
                    37:0d:f6:8b:40:f9:0e:41:77:cc:ab:c8:61:5b:0a:
                    da:15:85:78:be:1c:e6:a5:cf:77:55:ba:57:98:d9:
                    3f:a9:f8:38:94:f6:cc:39:9a:21:f8:28:aa:60:a2:
                    a5:95:f6:70:74:a4:03:2c:3c:a8:af:70:76:ba:9a:
                    35:d6:7a:32:5a:f3:d4:71:38:9e:b4:fb:72:2a:21:
                    1f:fa:01:96:61:4a:50:04:a3:73:57:43:01:91:d0:
                    00:2b:73:43:23:97:ab:17:ea:ee:1c:40:67:69:45:
                    b9:15:77:aa:0b:34:cf:a6:20:1a:76:e4:37:51:8f:
                    0c:3f:b5:aa:60:c4:54:67:4d:a3:1c:63:97:b1:cd:
                    65:03:d7:3b:80:d1:38:3e:12:8b:92:c8:1d:9d:dd:
                    d5:59:42:79:f1:b3:81:17:c0:6d:5b:8e:29:34:46:
                    eb:f1:f7:2d:28:c0:d1:54:53:1a:d7:f0:aa:f2:26:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B5:87:16:DF:C4:7C:B0:DC:28:CF:65:AD:1E:67:9D:26:6D:17:61
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e31362e3235352e302f32342d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:4c:ee:b2:72:d1:af:f6:5b:99:6d:ae:a0:56:a9:af:c9:18:
         7a:5c:35:2f:7a:51:41:d0:b0:87:9f:3b:92:82:c9:50:14:ae:
         46:a1:1c:5e:b3:3b:e7:53:bc:2f:21:b5:31:10:a8:57:a1:78:
         78:48:6f:8d:9f:aa:84:36:15:01:70:0a:e2:ed:58:8b:dd:ae:
         05:77:41:be:de:7e:3e:9b:cd:f9:c1:fa:3c:fd:74:a2:0a:de:
         94:52:1a:58:aa:2c:ba:37:78:3b:48:e1:00:79:7d:54:b7:33:
         10:db:4f:75:8d:7a:53:37:5a:eb:3d:a6:37:90:54:ca:4a:70:
         45:85:36:12:8b:9e:dc:ff:9b:a0:fe:1f:92:72:4a:a0:86:d6:
         53:25:83:cc:47:45:af:3b:2e:b5:78:72:38:06:f5:57:0e:e2:
         e8:5f:65:b8:fb:64:c5:39:8f:32:e6:4c:7d:19:ff:f7:9e:4b:
         d3:a0:0b:33:77:70:9a:ae:4d:dc:f6:96:06:0d:ef:c3:ec:a9:
         9d:47:25:e0:77:2b:d5:da:f0:fa:24:c9:9d:ad:14:65:d7:5a:
         89:c9:17:8a:5f:7b:e1:4a:b1:0a:24:ca:11:89:e0:44:94:44:
         99:af:73:dd:59:fb:63:bb:8e:2a:d5:3d:40:97:c7:a0:d5:b3:
         bb:13:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org