Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33332e302f32342d3234203d3e203238323630.roa
File:                     3138372e39352e33332e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier:          PduJGvCjE5n1dB7DQYuRbY+7TCGU3VaXfZ1/EB4ZMA8=
Subject key identifier:   CA:56:8B:AB:E2:43:58:09:3E:A4:59:D1:4A:2C:2F:DA:04:00:93:1C
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       1BBBD52E677F8B08470F990296FD2B9EC46A51C5
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33332e302f32342d3234203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:52 +0000
ROA not before:           Thu 09 Mar 2023 20:12:52 +0000
ROA not after:            Thu 07 Mar 2024 20:17:52 +0000
asID:                     28260
IP address blocks:        187.95.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bb:d5:2e:67:7f:8b:08:47:0f:99:02:96:fd:2b:9e:c4:6a:51:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:52 2023 GMT
            Not After : Mar  7 20:17:52 2024 GMT
        Subject: CN=CA568BABE24358093EA459D14A2C2FDA0400931C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:20:ab:3f:f6:f1:77:70:46:41:9c:28:8d:09:
                    68:bb:98:5a:69:60:ad:a2:e7:6d:05:bf:fe:c9:a1:
                    6e:7f:6c:05:c6:5d:be:c2:dd:fc:9b:56:fa:af:30:
                    d9:a0:ef:39:79:38:4a:b5:a9:c9:01:b7:e5:04:6e:
                    61:be:42:86:18:be:7a:e2:a7:94:68:8b:29:8f:78:
                    43:07:a6:25:ec:f0:0a:dd:78:be:a5:fa:3c:1b:cf:
                    69:cc:72:87:c0:ed:b7:a3:7b:c6:d8:50:7a:d8:1b:
                    22:5a:41:e3:a7:5d:b4:4f:b3:7a:90:cc:0f:1f:96:
                    e6:d7:70:f0:62:02:14:36:0e:c2:8b:00:66:e5:be:
                    45:02:dd:48:d2:f3:c7:17:30:02:2c:e4:e5:9b:bb:
                    a1:87:a5:52:49:f6:32:b9:01:ab:c3:8e:b8:47:8c:
                    c0:9b:96:4f:80:06:d4:1f:3e:ac:0c:56:de:33:44:
                    69:7d:b9:f2:0f:bc:36:67:b1:2d:5e:c9:5f:76:57:
                    c8:6f:58:e5:a6:0e:c5:f3:f1:b0:90:fd:3d:46:5d:
                    93:63:cb:e2:0e:61:5f:aa:9a:6b:eb:a5:b0:82:5e:
                    2d:80:5b:fc:90:d4:80:25:b5:64:11:91:1d:41:17:
                    d2:82:d0:a0:49:56:1d:72:f8:b2:56:5c:ec:de:f1:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:56:8B:AB:E2:43:58:09:3E:A4:59:D1:4A:2C:2F:DA:04:00:93:1C
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33332e302f32342d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:6c:74:0f:84:84:21:48:bc:39:e2:8d:0c:fd:e6:45:78:
         4c:f0:16:77:7c:a0:0e:49:0d:99:66:79:85:f2:9e:45:61:72:
         e5:48:23:9e:79:1f:05:41:12:d5:df:fb:10:de:56:2d:9c:88:
         50:2f:d9:08:1b:42:cd:f9:02:07:a0:72:81:1b:e8:a6:e9:b0:
         f7:7d:9e:71:df:0b:2b:0f:5f:83:2e:3b:a2:ba:a7:b3:47:b0:
         8d:d3:89:70:fd:f7:95:12:1b:1b:63:a8:43:43:fd:62:72:50:
         90:c0:8d:d0:7e:49:f2:24:e0:d3:ec:53:e6:ec:96:6c:83:d5:
         74:b2:c7:1c:3b:14:56:72:04:e8:d5:4d:64:a7:e9:ce:96:5e:
         8c:49:de:3c:2b:eb:99:cd:6a:da:48:1d:be:22:cc:7e:1b:fe:
         04:1f:ab:42:62:9f:92:cd:b1:54:60:f0:23:61:e4:63:2d:d9:
         c2:a9:2c:d6:9d:33:de:cc:53:2f:82:21:71:bf:16:cd:16:b5:
         65:b3:f9:f3:94:7c:31:e3:35:5b:1e:56:59:c9:4f:25:f3:83:
         bd:13:66:aa:c0:68:0e:15:f8:13:23:61:72:b7:a0:b0:7a:5d:
         84:65:05:de:29:0e:7b:c7:00:52:dd:39:1f:68:91:b9:65:6b:
         50:17:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org