Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa
File:                     3138372e31362e3234302e302f32302d3234203d3e203238323630.roa (raw, json)
Hash identifier:          PxS9EVoMFBzvMOipPaRM8omMvf5bW44S+TxnVoFtPiw=
Subject key identifier:   6A:25:E7:D0:B8:C0:46:83:B4:CF:F4:FA:2B:8D:68:BC:2D:FF:B7:A9
Certificate issuer:       /CN=7187431AA80F5681C6D1467914031DF3EC61E97B
Certificate serial:       5A3D7F11FD523CE253E940BDC1EDB7AE1DA63A40
Authority key identifier: 71:87:43:1A:A8:0F:56:81:C6:D1:46:79:14:03:1D:F3:EC:61:E9:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7187431AA80F5681C6D1467914031DF3EC61E97B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa
Signing time:             Wed 03 Apr 2024 23:55:21 +0000
ROA not before:           Wed 03 Apr 2024 23:50:21 +0000
ROA not after:            Wed 02 Apr 2025 23:55:21 +0000
asID:                     28260
IP address blocks:        187.16.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3d:7f:11:fd:52:3c:e2:53:e9:40:bd:c1:ed:b7:ae:1d:a6:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7187431AA80F5681C6D1467914031DF3EC61E97B
        Validity
            Not Before: Apr  3 23:50:21 2024 GMT
            Not After : Apr  2 23:55:21 2025 GMT
        Subject: CN=6A25E7D0B8C04683B4CFF4FA2B8D68BC2DFFB7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:73:88:db:bd:93:22:76:24:53:af:ab:48:
                    68:6e:f9:33:69:fa:fa:8b:e1:6d:63:b9:61:98:95:
                    e8:73:6b:02:14:ef:7e:cb:5e:6e:32:2f:26:36:72:
                    e7:42:5a:72:c7:3f:e7:fd:9c:53:70:cc:ee:62:45:
                    6c:b6:f4:57:95:76:9f:b8:47:35:21:e8:d4:9a:bb:
                    7f:b8:01:2e:e0:b0:1b:6e:10:90:8b:4e:2a:c2:46:
                    6f:09:9d:c4:d0:83:50:53:b9:49:5e:20:5a:1a:45:
                    17:a3:26:a8:72:a8:5d:14:47:cf:6e:ac:37:16:f2:
                    4b:ad:1e:4a:f2:5d:f3:a3:cb:54:f9:48:84:71:e4:
                    39:70:32:85:cf:14:4c:d8:53:a9:d7:8e:af:c7:0d:
                    99:60:7d:99:78:56:ed:95:33:2f:2d:3b:c7:93:45:
                    f3:1b:80:55:f8:e9:bc:17:42:6a:dc:1d:73:99:a5:
                    9c:41:42:2b:4e:32:dc:15:4a:bb:b8:89:3e:64:92:
                    17:19:a4:d9:a4:21:f0:f5:d6:27:2d:ee:07:a7:4d:
                    e9:0d:87:5e:a2:f8:7a:b8:01:0d:51:f5:84:3f:f8:
                    79:6c:94:0f:98:bd:0e:85:95:bb:1e:35:75:39:1a:
                    51:63:0d:f7:60:f2:d6:36:74:01:4d:e2:a8:7e:df:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:25:E7:D0:B8:C0:46:83:B4:CF:F4:FA:2B:8D:68:BC:2D:FF:B7:A9
            X509v3 Authority Key Identifier:
                keyid:71:87:43:1A:A8:0F:56:81:C6:D1:46:79:14:03:1D:F3:EC:61:E9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/7187431AA80F5681C6D1467914031DF3EC61E97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7187431AA80F5681C6D1467914031DF3EC61E97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/1/3138372e31362e3234302e302f32302d3234203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.16.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:91:ce:39:41:63:ab:3d:34:38:82:15:2e:13:b2:27:8b:8a:
         60:6d:4d:65:03:20:dd:61:21:20:33:a1:9e:06:34:23:94:8c:
         ec:c0:03:7a:20:8d:bd:a2:9d:c2:d9:88:25:56:c0:10:ca:78:
         4d:e9:94:a7:9c:de:64:f0:fc:d3:df:61:32:ab:21:6e:d8:c7:
         e4:be:75:06:6c:89:20:7a:9e:d5:29:eb:9c:9f:b0:e4:17:d8:
         44:ca:d5:98:7b:70:f1:6b:40:47:72:a5:c7:53:c0:01:4e:14:
         32:df:07:98:83:2b:f7:e2:3c:39:53:37:3a:89:82:30:20:6f:
         39:45:4c:4a:2a:75:a7:36:16:8b:36:64:7b:6a:58:e3:92:23:
         2b:a1:93:51:1a:96:be:ed:16:25:1b:55:2e:4c:6a:c1:74:70:
         ab:b5:35:15:c2:60:4f:b7:e7:4d:5a:3e:ea:ed:7b:92:45:c0:
         4f:b4:05:61:d9:13:c5:16:1c:c3:b9:8c:6d:43:88:60:0d:42:
         02:ee:dd:3d:5a:7a:09:4e:ff:d2:f2:5c:42:50:d5:f7:b0:9d:
         75:96:f0:75:f7:ba:34:8a:60:88:f3:4e:47:a7:b2:41:bb:67:
         ce:ca:11:70:2a:1f:09:9d:cb:3d:2e:77:83:00:9d:bb:62:73:
         48:00:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org