Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33392e302f32342d3234203d3e203238323630.roa
File:                     3138372e39352e33392e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier:          49kHB6EQUy00kIlziu+NdOtB5+KPKlJVSV54a/j7Xcg=
Subject key identifier:   17:00:18:D8:52:BD:14:C9:94:2E:4E:00:C4:4B:1E:AC:E8:A0:10:1A
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       10E3A7CBA4DDE4581DD81FCD7E38FD44B67580DE
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33392e302f32342d3234203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:42 +0000
ROA not before:           Thu 09 Mar 2023 20:12:42 +0000
ROA not after:            Thu 07 Mar 2024 20:17:42 +0000
asID:                     28260
IP address blocks:        187.95.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:a7:cb:a4:dd:e4:58:1d:d8:1f:cd:7e:38:fd:44:b6:75:80:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:42 2023 GMT
            Not After : Mar  7 20:17:42 2024 GMT
        Subject: CN=170018D852BD14C9942E4E00C44B1EACE8A0101A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:14:2c:f8:a1:9f:47:ca:4f:ec:c2:cd:a7:e5:
                    9c:69:92:fe:e4:a3:31:be:10:db:0f:43:80:38:c6:
                    62:fa:81:2a:29:e1:9e:79:01:d8:5f:bd:f0:5e:2e:
                    63:6e:e9:d6:09:72:43:a2:48:b7:ac:f2:0f:68:f6:
                    69:0d:e4:47:95:4e:d8:66:02:9a:68:b2:6a:77:65:
                    89:94:78:83:17:ba:40:ec:f1:de:cf:e7:91:f0:89:
                    ea:98:8b:0d:64:94:88:d2:13:52:27:ee:d3:34:91:
                    02:c5:6a:f4:bb:96:f8:47:ef:a0:d0:86:d2:ca:f9:
                    14:d2:3f:93:eb:08:9a:a5:78:53:b8:29:2d:bd:01:
                    f8:06:32:67:08:2f:3c:4b:59:70:34:78:8e:27:36:
                    81:5b:11:b0:e1:5a:91:6c:78:f6:17:16:0d:1d:0c:
                    ff:59:d8:31:fe:1d:8e:a0:30:9e:3c:f3:bb:a9:4a:
                    7e:fd:e8:84:e2:95:3f:ac:a5:46:aa:07:b6:3e:05:
                    ad:6d:ff:1c:90:87:b8:a0:eb:bb:55:fc:4b:6e:74:
                    7f:43:90:23:c5:e9:31:e8:c4:5c:50:41:93:c3:cb:
                    d9:fb:aa:f4:d3:70:f2:da:17:ef:6d:f8:1f:f8:58:
                    6c:18:1a:50:c5:ad:b2:b0:9e:5e:83:8f:82:de:38:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:00:18:D8:52:BD:14:C9:94:2E:4E:00:C4:4B:1E:AC:E8:A0:10:1A
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33392e302f32342d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:30:30:1f:36:ca:52:3c:d5:48:87:ee:f8:4f:e3:80:66:
         ed:ba:23:79:24:ea:27:dc:aa:b8:a8:90:57:a4:7a:ff:95:5d:
         80:53:f6:6e:32:8c:0a:55:9e:ec:78:29:17:cf:68:3b:4a:85:
         ac:d3:28:fc:3c:c7:b2:86:eb:65:3a:8a:cd:80:3b:db:cc:1d:
         24:bf:bd:66:d8:71:42:29:55:cd:08:d4:a9:93:72:1c:93:7a:
         9f:93:55:5e:87:02:62:ea:a8:0e:e1:51:04:1c:cc:34:7d:c9:
         70:4d:4c:30:f3:b8:54:32:2e:3a:25:8a:a5:ad:68:19:51:05:
         fe:ce:50:36:2b:22:63:c2:32:ff:e0:71:ad:00:b8:ff:14:e5:
         56:68:be:92:01:10:e2:ff:81:16:7c:a9:30:e6:7f:b2:dc:4e:
         7b:54:8c:55:6a:a9:02:f8:5c:bd:b9:5e:05:6f:65:7f:34:44:
         39:5f:b1:dd:e0:58:0e:80:de:aa:dd:4d:ba:a5:44:b3:2a:45:
         33:de:92:61:06:7c:1e:2a:a7:22:87:c6:07:ae:f1:77:6f:14:
         73:49:57:b2:1c:3c:e1:2b:26:5b:15:07:a2:32:19:d0:56:b2:
         13:7d:1d:b2:ec:28:79:60:d6:17:71:6b:59:2c:e7:c1:2d:e7:
         d8:34:3e:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEOOny6Td5Fgd2B/Nfjj9RLZ1gN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTREOEVCRTA3NjVDQURGODIyNEI0NDU2NDM5MkU2RTZD
NkU2QUVGNTAeFw0yMzAzMDkyMDEyNDJaFw0yNDAzMDcyMDE3NDJaMDMxMTAvBgNV
BAMTKDE3MDAxOEQ4NTJCRDE0Qzk5NDJFNEUwMEM0NEIxRUFDRThBMDEwMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMFCz4oZ9Hyk/sws2n5Zxpkv7k
ozG+ENsPQ4A4xmL6gSop4Z55AdhfvfBeLmNu6dYJckOiSLes8g9o9mkN5EeVTthm
Apposmp3ZYmUeIMXukDs8d7P55HwieqYiw1klIjSE1In7tM0kQLFavS7lvhH76DQ
htLK+RTSP5PrCJqleFO4KS29AfgGMmcILzxLWXA0eI4nNoFbEbDhWpFsePYXFg0d
DP9Z2DH+HY6gMJ4887upSn796ITilT+spUaqB7Y+Ba1t/xyQh7ig67tV/EtudH9D
kCPF6THoxFxQQZPDy9n7qvTTcPLaF+9t+B/4WGwYGlDFrbKwnl6Dj4LeOFpHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUFwAY2FK9FMmULk4AxEserOigEBowHwYDVR0j
BBgwFoAUpNjr4HZcrfgiS0RWQ5Lm5sbmrvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDgxYWlYcERBdjVXQm1nRThvRXBmb3JkakdQNjJvdG4yZkhyaGFMNGNn
YnkvMC9BNEQ4RUJFMDc2NUNBREY4MjI0QjQ0NTY0MzkyRTZFNkM2RTZBRUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E0RDhFQkUwNzY1Q0FERjgy
MjRCNDQ1NjQzOTJFNkU2QzZFNkFFRjUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4MWFpWHBEQXY1V0JtZ0U4b0VwZm9yZGpHUDYyb3RuMmZIcmhhTDRjZ2J5LzAv
MzEzODM3MmUzOTM1MmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALtfJzANBgkqhkiG9w0BAQsFAAOCAQEAqIcwMB82ylI8
1UiH7vhP44Bm7bojeSTqJ9yquKiQV6R6/5VdgFP2bjKMClWe7HgpF89oO0qFrNMo
/DzHsobrZTqKzYA728wdJL+9ZthxQilVzQjUqZNyHJN6n5NVXocCYuqoDuFRBBzM
NH3JcE1MMPO4VDIuOiWKpa1oGVEF/s5QNisiY8Iy/+BxrQC4/xTlVmi+kgEQ4v+B
FnypMOZ/stxOe1SMVWqpAvhcvbleBW9lfzREOV+x3eBYDoDeqt1NuqVEsypFM96S
YQZ8HiqnIofGB67xd28Uc0lXshw84SsmWxUHojIZ0FayE30dsuwoeWDWF3FrWSzn
wS3n2DQ+kA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org