Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e34302e302f32322d3232203d3e203238323630.roa
File:                     3138372e39352e34302e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier:          tVRfqsXbKmsIFdEesvDzKSrKpoJk/BtVqKHWiKMQMAo=
Subject key identifier:   B9:AB:6C:88:73:86:98:73:C4:0E:D7:EB:E5:BB:33:09:B5:12:EC:EF
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       099F8EC7A32A7EAF328E89ECEA83E833CE5D33FE
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e34302e302f32322d3232203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:55 +0000
ROA not before:           Thu 09 Mar 2023 20:12:55 +0000
ROA not after:            Thu 07 Mar 2024 20:17:55 +0000
asID:                     28260
IP address blocks:        187.95.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9f:8e:c7:a3:2a:7e:af:32:8e:89:ec:ea:83:e8:33:ce:5d:33:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:55 2023 GMT
            Not After : Mar  7 20:17:55 2024 GMT
        Subject: CN=B9AB6C8873869873C40ED7EBE5BB3309B512ECEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:28:fc:83:9d:9c:2f:24:90:78:e6:e5:6a:
                    ca:a1:a8:a7:21:62:7c:9b:49:d0:28:3b:db:64:ac:
                    42:8a:63:3b:02:90:aa:11:c3:08:58:58:66:9d:fb:
                    bd:3d:13:6f:a6:3f:eb:5d:a2:81:8e:f6:a1:76:e9:
                    87:37:69:18:30:8c:c4:79:79:ca:7e:ab:c1:83:f8:
                    69:8c:dd:14:24:6d:10:19:46:24:81:f2:2d:fc:16:
                    03:d1:a3:56:99:7a:d1:37:8f:8e:e2:57:8c:06:60:
                    09:be:7f:f1:ae:50:94:6a:85:9e:ff:f1:a0:44:c5:
                    5e:07:ab:af:69:b0:59:b5:cb:15:c3:65:36:37:d3:
                    f6:79:24:9b:34:b1:a7:08:b7:2b:62:38:64:e6:c3:
                    94:8c:f4:1a:70:90:13:e1:89:f3:af:44:6c:1a:25:
                    e0:a0:d6:77:82:2a:17:e9:11:36:dc:6d:87:a8:21:
                    30:cd:75:8b:03:17:76:cc:0b:e2:c6:b1:a7:bb:41:
                    c2:25:2f:e0:fb:83:15:53:42:5a:48:46:71:bf:d9:
                    df:59:44:31:7a:29:6c:e8:9a:73:26:fe:ce:4e:b6:
                    af:d3:99:1e:2c:62:69:6f:3f:a3:19:b0:98:7b:c7:
                    64:ad:e4:ea:70:ea:98:7e:53:5e:00:e9:e8:ab:4f:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:6C:88:73:86:98:73:C4:0E:D7:EB:E5:BB:33:09:B5:12:EC:EF
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e34302e302f32322d3232203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:91:c9:49:76:35:87:6b:73:90:b4:f4:6d:ea:4f:3e:de:35:
         05:cf:42:cc:0c:63:b1:08:1c:b2:44:d3:da:0b:ff:d9:3b:25:
         8f:67:a5:67:c6:26:ed:47:e7:c9:2f:92:12:01:9a:f0:9c:52:
         50:6d:3f:0c:af:19:e9:c9:3c:93:a1:bd:67:47:a8:6f:e0:a9:
         9b:97:7a:bc:03:a4:0d:82:d3:72:85:08:ee:c5:82:33:df:3e:
         c7:f5:22:6b:0b:74:72:3f:16:6a:7c:a8:a7:cb:6c:f9:bd:cf:
         62:a9:9a:be:bc:56:c0:fa:62:e5:34:9d:f3:f4:15:cf:97:ef:
         f2:04:c4:f7:58:c8:cc:c0:1c:67:45:4a:ce:8e:bf:a4:41:f0:
         f6:29:05:34:f4:67:f1:e5:fc:22:96:01:a4:f9:f0:9d:55:26:
         9a:d4:60:eb:fb:ed:81:c1:78:93:65:e2:e4:05:f0:02:a4:98:
         ed:ad:59:a6:1e:f5:b3:f9:e4:1e:18:68:73:2b:d7:7a:a5:5c:
         2e:46:0e:2d:d0:71:73:46:a2:9d:3c:f7:81:51:71:cc:3a:88:
         13:0c:a1:c0:a9:8c:65:43:e1:ce:2a:09:0d:4b:1c:77:82:4a:
         0d:8a:3b:29:6f:97:2a:4c:6b:22:c9:f8:ff:23:18:3e:52:9a:
         8c:66:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org