Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/3138372e34392e38302e302f32302d3234203d3e203238313432.roa
File:                     3138372e34392e38302e302f32302d3234203d3e203238313432.roa (raw, json)
Hash identifier:          iRKWKGY7k3UnQGVAB78BWgPsIkFzQtpToND+GAPvVBI=
Subject key identifier:   64:8E:28:E9:E9:F3:76:68:AF:62:13:AD:BA:5A:35:32:69:D4:63:52
Certificate issuer:       /CN=EB8CC30C6270FF4479D0FDE7CA28E30A974D124F
Certificate serial:       326393CE17D8E078634FB877091B9D331CD622EA
Authority key identifier: EB:8C:C3:0C:62:70:FF:44:79:D0:FD:E7:CA:28:E3:0A:97:4D:12:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/3138372e34392e38302e302f32302d3234203d3e203238313432.roa
Signing time:             Thu 21 Mar 2024 16:44:34 +0000
ROA not before:           Thu 21 Mar 2024 16:39:34 +0000
ROA not after:            Thu 20 Mar 2025 16:44:34 +0000
asID:                     28142
IP address blocks:        187.49.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:63:93:ce:17:d8:e0:78:63:4f:b8:77:09:1b:9d:33:1c:d6:22:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8CC30C6270FF4479D0FDE7CA28E30A974D124F
        Validity
            Not Before: Mar 21 16:39:34 2024 GMT
            Not After : Mar 20 16:44:34 2025 GMT
        Subject: CN=648E28E9E9F37668AF6213ADBA5A353269D46352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:be:31:b9:cd:51:a2:53:59:16:79:7f:bf:
                    d3:4b:42:87:51:19:18:f1:4c:6c:23:6e:e0:23:95:
                    5e:bc:56:45:ad:49:f7:d6:ec:19:1b:91:19:07:55:
                    45:6e:2b:6d:ab:f9:f1:fd:61:e0:3d:bb:40:1c:36:
                    f6:c7:15:f0:f0:e8:fa:f9:50:a2:34:09:cc:f4:e4:
                    c8:db:f8:97:4d:5e:90:a6:24:8b:ef:50:9a:ca:0a:
                    c9:dc:63:2d:11:a2:f9:94:8d:aa:9b:74:49:d8:ee:
                    12:52:94:41:61:ed:96:9a:bd:aa:5b:19:18:6e:23:
                    c7:dc:9e:08:29:9b:d0:bc:dc:83:a8:e1:13:7b:ab:
                    18:5c:16:d1:b3:01:9e:68:2a:7e:eb:1a:1c:e6:3f:
                    a9:d7:d6:79:f8:56:3a:3d:5d:14:59:d2:d6:70:5f:
                    17:59:97:58:d4:19:77:c8:64:b2:47:a6:16:79:7b:
                    17:0e:a3:94:e3:e4:1c:8b:dc:5f:60:98:f4:85:f7:
                    6a:ce:85:cb:24:ef:4c:14:0d:81:59:17:22:7e:81:
                    26:53:f8:ee:9e:15:42:c7:07:d8:02:ec:39:da:12:
                    2a:23:2c:e0:5b:6a:09:f4:b4:39:c5:0f:94:79:ad:
                    fc:33:b1:95:8f:d1:3f:1a:57:57:49:65:b3:cf:b8:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8E:28:E9:E9:F3:76:68:AF:62:13:AD:BA:5A:35:32:69:D4:63:52
            X509v3 Authority Key Identifier:
                keyid:EB:8C:C3:0C:62:70:FF:44:79:D0:FD:E7:CA:28:E3:0A:97:4D:12:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB8CC30C6270FF4479D0FDE7CA28E30A974D124F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/0/3138372e34392e38302e302f32302d3234203d3e203238313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:bc:46:80:37:99:eb:6e:15:7c:15:8d:9e:06:51:df:03:4a:
         0c:39:9e:a7:6d:12:cd:4b:38:5e:92:f1:4c:9a:cf:e9:d1:3e:
         d5:63:dd:a0:54:2c:28:a0:59:29:5c:eb:f5:6f:50:48:9a:45:
         c7:cc:c6:6e:f3:05:8f:bc:34:5f:4b:86:87:29:8b:cc:4d:cf:
         86:64:cd:79:4e:2a:30:69:bf:2a:bc:0d:22:91:69:58:9e:bf:
         33:98:cc:ed:4d:07:0e:2f:77:72:30:fd:31:62:f5:58:dc:7d:
         2a:77:a8:e7:66:c0:13:28:07:76:8f:2e:bf:46:80:2a:1c:21:
         aa:63:ef:db:f2:1e:6c:9c:11:83:f3:19:6e:ed:e0:7d:16:5e:
         e4:9e:f8:d1:ef:3a:d6:9e:50:6d:cf:47:47:2c:e5:3e:19:1b:
         8c:90:c7:39:3e:90:d2:ec:9a:bb:dc:c8:df:b2:3a:0b:7a:fe:
         6f:f7:3e:47:b7:53:49:6f:75:88:ce:58:02:7c:a6:b6:e5:76:
         b1:6d:44:7d:e1:a6:67:66:42:30:97:d0:5f:dc:1c:a3:64:36:
         46:f8:04:b1:f5:ee:06:39:eb:e0:26:d0:3d:4b:ed:e2:d2:f9:
         76:40:cf:b0:e0:86:f9:47:82:3e:2b:d6:91:18:1a:14:f6:bb:
         b3:de:82:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org