Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32322d3232203d3e203238323630.roa
File:                     3138372e39352e33322e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier:          oC306LtsFRghsmEjh1qciGbJeUwWU9epw3BOMNaRtFw=
Subject key identifier:   BA:C5:4F:DE:39:C6:02:B2:39:F2:D8:CA:D7:63:F7:78:7E:77:90:B2
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       698DDC70010F24B81418789B6B3DA235FD377164
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32322d3232203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:53 +0000
ROA not before:           Thu 09 Mar 2023 20:12:53 +0000
ROA not after:            Thu 07 Mar 2024 20:17:53 +0000
asID:                     28260
IP address blocks:        187.95.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8d:dc:70:01:0f:24:b8:14:18:78:9b:6b:3d:a2:35:fd:37:71:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:53 2023 GMT
            Not After : Mar  7 20:17:53 2024 GMT
        Subject: CN=BAC54FDE39C602B239F2D8CAD763F7787E7790B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:d9:25:5c:0f:33:79:19:06:2c:ef:be:c5:
                    0c:5a:d3:78:23:81:8b:30:68:56:f3:a6:68:28:2c:
                    1c:7e:4a:9c:d4:25:a7:59:37:96:4c:92:0b:49:cb:
                    0b:ca:fb:4a:d6:94:3a:eb:8f:f5:bc:7e:29:94:0c:
                    99:6f:b0:12:b6:36:51:f4:9e:29:9f:2d:90:c4:de:
                    73:d2:c1:cf:3e:d8:86:26:d2:65:7e:80:f2:1f:7b:
                    7b:ee:be:b7:13:61:c5:55:44:12:62:ec:1c:d8:c0:
                    08:51:a9:5c:5f:4b:d6:07:d5:6b:6f:a0:1e:80:79:
                    de:37:9c:dc:b2:d9:87:51:cf:94:15:c1:5e:07:9d:
                    1e:32:4a:27:25:d2:2e:d2:ae:0f:6f:c6:2e:ac:81:
                    7b:ea:c5:0e:9c:ee:d8:1a:a3:11:16:30:a6:5f:b6:
                    74:a6:e3:91:93:2f:a6:92:db:36:e3:3e:0f:b3:08:
                    18:c5:09:dc:88:db:a3:55:e4:a3:78:f4:f6:af:54:
                    c3:fe:e3:ac:c9:c1:9e:e3:aa:e5:62:eb:20:4d:74:
                    bf:f2:79:9b:d2:1f:38:05:e4:4f:b8:8e:00:38:36:
                    ac:59:f4:bc:04:43:6f:c9:8f:b0:6a:4a:e5:08:69:
                    0e:ca:0f:fd:96:fd:50:46:6c:6f:77:40:29:c4:c0:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:4F:DE:39:C6:02:B2:39:F2:D8:CA:D7:63:F7:78:7E:77:90:B2
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33322e302f32322d3232203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:58:a2:21:a3:28:61:83:5e:84:05:27:b7:db:be:8b:c1:f2:
         73:6c:86:fa:f9:cd:25:c9:02:61:43:07:5f:4e:e3:05:76:6e:
         d3:85:ea:1d:d9:08:e5:16:1f:83:89:e1:38:4e:23:58:c4:f8:
         7a:d1:21:34:e8:fe:83:80:e7:db:e9:1d:b8:bc:32:9b:17:32:
         7a:29:5e:ef:f3:60:f8:bd:86:15:6c:01:43:1f:a2:33:b2:30:
         a1:7f:05:6a:5a:96:51:43:fc:f9:07:fc:f5:69:cb:9e:80:bd:
         89:fb:08:5b:18:64:4d:19:6b:9a:3e:f5:d5:26:a1:15:88:0b:
         92:a0:c2:72:cd:e9:ae:d1:fc:f2:f2:9b:9c:0d:0b:98:1d:8c:
         e6:38:45:77:04:de:68:46:21:56:50:5c:ec:56:4a:ec:fb:4b:
         81:d9:f9:17:64:ec:06:e8:5d:ac:de:fd:9f:b1:80:db:ee:ad:
         be:bd:0e:61:fe:17:1a:ff:47:ef:d6:2e:0c:07:ab:9d:77:57:
         9c:c2:12:e9:7d:b7:44:a9:9f:34:7c:c0:14:27:64:8e:bc:2c:
         24:be:ef:9f:e5:22:20:d2:6a:b8:69:31:8d:b1:d1:62:93:20:
         2f:ea:75:b4:b7:92:5b:41:f0:04:bb:dc:e2:d1:fd:84:96:78:
         b2:00:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org