Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e36342e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          O2JeMHXYsNypq3TkvU0HMvWctD3pzYg2aTlQtCw4B6s=
Subject key identifier:   0E:A6:17:DC:C9:CD:1B:EF:E0:29:95:03:13:EF:55:C4:3C:ED:7E:57
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       36DF770353FEA831A28D1D808E6E2F39A0E35BB2
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        187.44.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:df:77:03:53:fe:a8:31:a2:8d:1d:80:8e:6e:2f:39:a0:e3:5b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=0EA617DCC9CD1BEFE029950313EF55C43CED7E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:28:38:26:1b:3e:bf:55:62:69:83:39:c3:
                    4a:30:92:2e:fb:6a:61:cc:dc:47:4a:40:b1:9d:5c:
                    c7:99:af:58:8e:17:80:61:45:aa:c9:58:2c:5e:2c:
                    5f:b2:96:b6:df:70:e2:94:06:70:50:1b:0a:d0:f1:
                    d5:66:44:78:3a:82:ff:81:97:a3:2b:90:ed:6c:70:
                    0e:a2:3c:f0:d6:d4:f6:21:34:62:4f:20:ea:e8:71:
                    a9:6f:01:2c:92:f5:9a:7a:0f:c6:be:d9:5f:f1:53:
                    0b:d1:78:8b:25:2d:6d:93:63:4f:6c:2e:5b:88:3f:
                    d4:6f:c9:a0:b2:c3:45:67:26:90:63:c2:f4:4b:c9:
                    57:b1:ee:20:50:a9:ea:db:cf:39:54:dc:e2:09:0e:
                    b5:67:34:34:49:ea:5b:ba:3f:f0:4a:5b:a4:a4:e4:
                    50:39:f4:07:f2:dd:7b:1c:e1:af:09:a7:76:82:9c:
                    b4:3b:62:be:5d:e4:d3:58:e9:ca:3f:cc:78:05:88:
                    01:1b:65:ab:41:fc:25:b3:d6:c0:56:67:21:72:c4:
                    8a:0f:a7:e9:4d:08:75:b7:9c:d3:e0:9c:58:b2:c7:
                    34:ab:14:9f:bd:ca:28:bf:4c:4d:58:5f:43:fc:67:
                    6f:99:8f:59:17:4d:05:8c:c3:66:92:07:8c:fc:ae:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A6:17:DC:C9:CD:1B:EF:E0:29:95:03:13:EF:55:C4:3C:ED:7E:57
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36342e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:68:83:d4:c9:ba:bf:39:ce:47:1c:50:e4:84:a8:54:3b:
         45:42:b0:bb:f3:9d:70:2f:97:26:0a:ed:72:1e:1e:18:20:62:
         b1:c3:cc:e2:44:a9:c6:82:90:14:86:36:57:1b:94:a1:4d:49:
         58:c8:13:99:07:45:3d:ea:5b:d8:e9:90:1f:af:98:58:53:22:
         80:10:c5:48:2d:1c:be:0d:fc:09:76:b5:61:86:59:d7:fc:e4:
         40:59:3b:81:78:f5:49:5d:fa:db:a7:6e:9e:c3:4e:9e:23:b0:
         27:02:f3:ed:77:94:89:53:14:60:91:98:0d:cf:f7:d1:c3:72:
         95:64:ee:52:ab:3f:c4:de:6a:fc:c9:4e:96:ff:39:ea:5f:f0:
         fc:44:87:fb:43:a1:26:53:65:18:d8:cc:5b:17:2a:36:88:b0:
         9a:64:51:d0:4c:d4:6a:62:9b:c8:8d:9e:90:fc:61:47:07:2b:
         c4:54:0b:25:38:5b:5b:7e:48:eb:29:e6:49:b2:75:5d:11:78:
         d0:0d:ee:32:2e:85:92:75:40:fe:58:0e:88:f8:6d:cf:73:a8:
         8a:44:ac:91:c9:98:73:26:c5:d2:a7:cf:98:1a:ad:6e:69:a6:
         c9:91:ad:8e:5d:a2:1b:a3:98:18:7f:43:7d:d1:b5:92:cf:f5:
         72:1a:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org