Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32322d3232203d3e203238333039.roa
File:                     3138372e34342e36342e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          rw3qxdhDXbsCEe4oF0UXPyGGO/NGWVpAdoIZzpR42CQ=
Subject key identifier:   60:1B:77:C7:33:D6:9A:A7:45:42:14:94:6B:63:5A:BD:A5:28:98:79
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       78F61EBD238CE8D9BE929F2E369BAD9A70C7C67E
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        187.44.64.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f6:1e:bd:23:8c:e8:d9:be:92:9f:2e:36:9b:ad:9a:70:c7:c6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=601B77C733D69AA7454214946B635ABDA5289879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:b6:7b:8a:2a:8e:bb:2d:da:47:fb:52:de:
                    66:59:e8:34:33:e5:32:7d:9f:6a:b1:24:55:c2:99:
                    0b:16:aa:64:36:06:7b:ba:93:0e:56:bd:23:e1:ca:
                    4c:e6:a9:3f:84:d5:38:30:cf:7a:45:52:58:69:36:
                    ef:95:65:89:02:8c:3f:a2:5c:e5:9a:c9:5e:43:9a:
                    c8:12:c9:31:0f:93:e7:5e:c2:49:79:fe:33:3c:2f:
                    09:0d:6d:5d:2e:01:80:8b:73:16:44:88:94:1a:91:
                    8b:a8:2d:d5:a7:5e:72:67:cc:d9:6b:2e:0f:9d:22:
                    b2:38:37:69:d3:e9:84:a1:f1:89:c4:0a:10:1c:23:
                    78:80:51:9d:60:5a:31:eb:44:8d:13:0d:e7:c8:b5:
                    ec:72:f0:d4:36:7c:3e:4c:04:3c:2e:eb:9b:d8:6f:
                    f5:fa:fd:1b:45:64:36:75:e5:6f:62:d9:70:f3:f9:
                    16:e1:c3:f5:ea:70:1e:f8:2c:39:8a:c2:8c:6b:8f:
                    75:dd:5a:5e:1b:63:fa:b9:03:72:01:56:d9:e4:17:
                    da:7c:c8:79:1d:96:57:18:d0:be:91:af:a7:f5:ea:
                    50:aa:77:72:98:08:16:ac:17:16:a5:4a:98:d0:7f:
                    45:e2:66:69:74:d9:c6:df:55:47:67:4e:09:3f:64:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1B:77:C7:33:D6:9A:A7:45:42:14:94:6B:63:5A:BD:A5:28:98:79
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:33:90:eb:84:db:64:1a:20:30:89:4c:dd:fa:e8:c2:d4:a4:
         84:b4:49:96:a2:26:47:8f:5a:df:da:39:29:86:b0:d4:64:b9:
         91:f7:4f:7e:ef:2c:f5:21:4f:77:34:e7:ea:0c:39:20:2a:41:
         a6:ac:25:f6:ca:eb:78:c5:84:74:47:07:8f:c4:a1:92:e4:3b:
         9c:32:13:ce:0b:ec:5a:bf:47:32:e2:32:99:ad:d4:26:11:a3:
         7e:db:9d:7d:bb:af:4e:aa:ab:4f:35:3d:92:6c:1c:11:38:cf:
         b4:34:cd:aa:08:2a:09:44:2a:ba:65:31:dd:08:d7:f0:5d:6c:
         8d:e3:e8:55:79:9b:b6:21:f9:07:0d:34:58:42:50:7b:d5:d5:
         bb:84:44:2a:e8:7b:4e:40:c3:bb:38:4c:b8:22:a7:e7:cb:a4:
         9a:41:4a:d3:87:3a:d7:b6:79:b2:e4:bb:9a:4a:f3:64:52:9d:
         31:2e:f8:a8:75:fb:4f:70:3a:0d:ed:ed:a0:5d:8c:50:33:91:
         49:a6:35:46:36:ab:5b:90:01:f4:10:ae:2a:1a:2e:0f:ab:8e:
         4a:d5:d0:17:34:7c:34:4d:5d:70:ce:58:49:5f:9e:12:c8:89:
         11:58:26:03:64:71:8a:b4:bd:8e:39:4e:6c:28:6c:87:13:95:
         6c:4e:c3:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUePYevSOM6Nm+kp8uNputmnDHxn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDlaFw0yNDA5MTIxODQ3NDlaMDMxMTAvBgNV
BAMTKDYwMUI3N0M3MzNENjlBQTc0NTQyMTQ5NDZCNjM1QUJEQTUyODk4NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HrZ7iiqOuy3aR/tS3mZZ6DQz
5TJ9n2qxJFXCmQsWqmQ2Bnu6kw5WvSPhykzmqT+E1Tgwz3pFUlhpNu+VZYkCjD+i
XOWayV5DmsgSyTEPk+dewkl5/jM8LwkNbV0uAYCLcxZEiJQakYuoLdWnXnJnzNlr
Lg+dIrI4N2nT6YSh8YnEChAcI3iAUZ1gWjHrRI0TDefItexy8NQ2fD5MBDwu65vY
b/X6/RtFZDZ15W9i2XDz+Rbhw/XqcB74LDmKwoxrj3XdWl4bY/q5A3IBVtnkF9p8
yHkdllcY0L6Rr6f16lCqd3KYCBasFxalSpjQf0XiZml02cbfVUdnTgk/ZEK1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUYBt3xzPWmqdFQhSUa2NavaUomHkwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArssQDANBgkqhkiG9w0BAQsFAAOCAQEAMTOQ64TbZBog
MIlM3frowtSkhLRJlqImR49a39o5KYaw1GS5kfdPfu8s9SFPdzTn6gw5ICpBpqwl
9srreMWEdEcHj8ShkuQ7nDITzgvsWr9HMuIyma3UJhGjftudfbuvTqqrTzU9kmwc
ETjPtDTNqggqCUQqumUx3QjX8F1sjePoVXmbtiH5Bw00WEJQe9XVu4REKuh7TkDD
uzhMuCKn58ukmkFK04c617Z5suS7mkrzZFKdMS74qHX7T3A6De3toF2MUDORSaY1
RjarW5AB9BCuKhouD6uOStXQFzR8NE1dcM5YSV+eEsiJEVgmA2RxirS9jjlObChs
hxOVbE7DVg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:04 2025 by rpki-client