Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36362e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e36362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          lTDT/pNxpBP4GT2FGjbskwzLUr+awblGTocuCFQA4w0=
Subject key identifier:   14:7F:A0:4B:ED:BF:74:7E:77:D7:E7:4F:7F:1F:62:3A:23:37:C0:CF
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       2904DDE4F6BD9F6B7F469BDEB741C1373C8B7842
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36362e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        187.44.66.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:04:dd:e4:f6:bd:9f:6b:7f:46:9b:de:b7:41:c1:37:3c:8b:78:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=147FA04BEDBF747E77D7E74F7F1F623A2337C0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:83:91:be:ef:b8:b9:54:34:d7:4e:7c:92:
                    e5:a1:d8:12:f5:55:bc:cd:5a:1e:1b:5e:74:b1:4b:
                    ed:d6:fa:e0:b9:79:b8:00:60:13:4a:c0:4e:89:93:
                    c6:48:3e:3e:64:0a:aa:46:12:d3:92:24:d4:06:d9:
                    66:fb:94:8b:6e:4c:7c:80:c3:0b:23:da:1e:48:b3:
                    bb:08:2c:eb:14:88:65:58:9d:25:e9:ea:57:d7:3c:
                    56:9c:d1:6a:ae:c5:6b:6e:7e:13:1c:79:7e:71:eb:
                    68:6d:9c:d7:9e:26:79:e3:e4:98:4b:89:57:64:02:
                    de:db:f2:42:8b:e3:15:e2:99:53:2a:d6:99:49:d4:
                    e6:8b:cc:59:37:dc:fa:61:f2:3c:dc:49:53:2c:e0:
                    5a:80:26:82:cc:da:84:5d:35:1c:14:84:0d:39:0d:
                    41:29:00:10:27:bd:cc:98:23:8f:92:1e:74:de:57:
                    e0:0d:cc:16:a3:b4:a7:1c:ba:19:ed:75:3d:28:72:
                    f1:23:1f:b4:17:31:f7:19:e6:60:55:ab:45:c3:fe:
                    ce:05:ea:5e:2b:9a:b9:82:ab:b8:04:2e:72:8a:c2:
                    8a:06:18:a4:69:81:e8:15:53:4e:b9:51:82:b2:f1:
                    27:5e:f8:57:b3:74:05:f4:09:0c:14:c8:1d:26:7b:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:A0:4B:ED:BF:74:7E:77:D7:E7:4F:7F:1F:62:3A:23:37:C0:CF
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:92:04:e6:71:54:c0:69:73:05:22:2f:9c:c4:b9:72:91:
         96:7c:7d:a7:c7:9d:d6:61:bf:61:38:9c:3c:68:9c:25:62:a1:
         b5:65:53:cd:94:5d:67:7c:e3:81:cc:fc:f6:fa:6c:8c:0e:52:
         0e:2a:6b:3b:d6:40:82:f4:e0:3b:28:2a:ea:9d:26:44:9d:aa:
         a8:b1:e4:a9:bf:cd:34:41:2d:09:2d:af:ef:e3:01:59:a8:f6:
         a2:1d:28:10:88:d8:8c:3f:7c:2a:86:88:1c:d2:9a:69:72:b9:
         38:10:a1:fc:ae:46:1e:df:f3:8b:1e:ea:2e:93:14:c2:86:40:
         8d:61:b4:ea:f5:83:0f:13:e0:69:f0:3a:1b:42:ee:28:e3:4f:
         41:6e:a9:eb:21:8e:d4:70:d4:0d:13:96:7c:b7:82:79:f8:5b:
         80:e4:67:bd:6c:d8:ec:68:f8:0b:ed:c6:9f:45:51:c1:9f:93:
         74:07:82:0c:49:70:f4:65:3b:cc:74:6e:51:97:5c:e2:19:1b:
         04:9d:b4:02:0f:ba:96:de:0d:51:93:ca:77:2d:ae:15:23:c3:
         64:5e:d6:4f:16:f1:c0:72:3d:55:35:e9:1d:0d:18:8a:c3:9a:
         6a:0b:2a:0b:db:22:d4:ef:d8:54:63:3c:41:1e:ab:7f:c2:3b:
         f5:66:88:72
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKQTd5Pa9n2t/Rpvet0HBNzyLeEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDlaFw0yNDA5MTIxODQ3NDlaMDMxMTAvBgNV
BAMTKDE0N0ZBMDRCRURCRjc0N0U3N0Q3RTc0RjdGMUY2MjNBMjMzN0MwQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyYORvu+4uVQ01058kuWh2BL1
VbzNWh4bXnSxS+3W+uC5ebgAYBNKwE6Jk8ZIPj5kCqpGEtOSJNQG2Wb7lItuTHyA
wwsj2h5Is7sILOsUiGVYnSXp6lfXPFac0WquxWtufhMceX5x62htnNeeJnnj5JhL
iVdkAt7b8kKL4xXimVMq1plJ1OaLzFk33Pph8jzcSVMs4FqAJoLM2oRdNRwUhA05
DUEpABAnvcyYI4+SHnTeV+ANzBajtKccuhntdT0ocvEjH7QXMfcZ5mBVq0XD/s4F
6l4rmrmCq7gELnKKwooGGKRpgegVU065UYKy8Sde+FezdAX0CQwUyB0me7YBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUFH+gS+2/dH531+dPfx9iOiM3wM8wHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbssQjANBgkqhkiG9w0BAQsFAAOCAQEAWtCSBOZxVMBp
cwUiL5zEuXKRlnx9p8ed1mG/YTicPGicJWKhtWVTzZRdZ3zjgcz89vpsjA5SDipr
O9ZAgvTgOygq6p0mRJ2qqLHkqb/NNEEtCS2v7+MBWaj2oh0oEIjYjD98KoaIHNKa
aXK5OBCh/K5GHt/zix7qLpMUwoZAjWG06vWDDxPgafA6G0LuKONPQW6p6yGO1HDU
DROWfLeCefhbgORnvWzY7Gj4C+3Gn0VRwZ+TdAeCDElw9GU7zHRuUZdc4hkbBJ20
Ag+6lt4NUZPKdy2uFSPDZF7WTxbxwHI9VTXpHQ0YisOaagsqC9si1O/YVGM8QR6r
f8I79WaIcg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org