Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36362e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e36362e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          L6nS7rOKAFiv8mLhPX3UktaXfUGFAXVV4b1ic/hAxME=
Subject key identifier:   4D:D0:73:8D:8C:76:8B:74:4D:44:67:EE:1D:BA:09:27:9E:C0:E6:D5
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       2B0FB40793786454A879EFAD86DE838B1B2B83A7
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36362e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        187.44.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0f:b4:07:93:78:64:54:a8:79:ef:ad:86:de:83:8b:1b:2b:83:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=4DD0738D8C768B744D4467EE1DBA09279EC0E6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:fe:f4:24:a7:d6:7b:ec:b4:85:f7:5a:61:
                    d6:49:86:39:cb:87:b4:d0:06:2a:82:92:7d:f2:19:
                    6c:38:62:b0:65:b2:46:84:a3:3f:03:f4:9e:f9:1d:
                    2f:85:95:73:ee:e1:d5:96:09:31:a8:3e:0d:76:4e:
                    69:27:c6:b5:20:05:0d:65:4a:51:9f:60:90:32:6c:
                    a3:70:7a:01:69:17:2b:ea:fa:1d:ae:a0:0f:55:41:
                    9f:fc:be:ba:f6:1a:62:46:30:ea:ae:a1:1a:c1:79:
                    7b:c6:99:68:05:43:48:0d:e3:c9:a3:1c:8d:54:59:
                    c6:6c:d7:fb:d4:e6:c6:a3:f8:d4:9a:69:11:cc:c9:
                    d2:52:80:b0:0d:20:2b:43:66:ed:db:0a:87:06:18:
                    e0:98:03:c4:ca:3a:b1:f8:89:d7:aa:db:12:ea:41:
                    ec:09:9d:69:83:51:21:19:1f:25:cf:4d:6a:68:4d:
                    f8:06:86:a6:24:5f:09:45:d2:5c:43:e5:7e:36:cb:
                    3c:6e:96:2d:79:e4:04:bb:dd:ef:d9:52:6b:9a:93:
                    86:05:3f:06:5c:4a:af:bc:5f:50:ad:cd:e9:d0:a6:
                    52:5c:37:83:62:6b:32:bb:5b:fc:ed:cd:b3:98:6a:
                    5f:5b:96:c7:fd:7e:38:71:ab:25:c2:5b:90:7c:8c:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:73:8D:8C:76:8B:74:4D:44:67:EE:1D:BA:09:27:9E:C0:E6:D5
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36362e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:29:90:64:a7:36:07:eb:2e:9f:e6:5e:20:9b:92:e7:00:
         b9:91:8e:ff:c5:77:40:94:7e:ef:49:17:fe:12:4b:84:d3:1e:
         22:c2:13:e3:c5:f8:00:50:c8:0e:f1:7b:5a:fd:e4:b8:0e:9a:
         2e:b5:d7:8b:8d:4d:56:ab:a8:56:1e:a1:1e:e7:73:0b:b8:21:
         87:28:c9:c1:6b:5b:ee:79:29:f6:4e:e2:06:d5:e3:a1:be:75:
         55:a0:df:1e:0d:c4:6a:82:bd:5e:15:be:b6:5a:a6:84:6a:84:
         d2:54:81:24:6e:28:6b:4c:1b:15:52:24:92:bf:e6:35:6c:17:
         63:f1:21:0a:3c:a2:7f:73:43:e6:7d:4c:09:59:53:37:c6:6b:
         aa:0f:0f:70:7e:90:fa:0e:cb:65:91:01:14:42:fd:44:db:54:
         e0:4d:78:b1:81:83:56:51:65:ed:6a:ef:9d:89:7e:e1:35:d7:
         4e:65:6d:8d:74:98:b0:25:ac:3b:44:d1:7b:15:d6:ce:be:33:
         72:f4:6c:e3:42:c2:53:f6:2b:82:5a:16:a7:d2:05:ab:1a:f1:
         fe:92:4d:0b:7c:14:5d:2e:50:bd:61:e1:c6:91:d0:3d:72:bd:
         4b:05:43:b2:4b:4c:05:19:b2:fb:63:ff:f2:e8:c9:53:c1:66:
         5b:fa:27:0e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKw+0B5N4ZFSoee+tht6Dixsrg6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDNaFw0yNDA5MTIxODQ3NDNaMDMxMTAvBgNV
BAMTKDRERDA3MzhEOEM3NjhCNzQ0RDQ0NjdFRTFEQkEwOTI3OUVDMEU2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Dv70JKfWe+y0hfdaYdZJhjnL
h7TQBiqCkn3yGWw4YrBlskaEoz8D9J75HS+FlXPu4dWWCTGoPg12TmknxrUgBQ1l
SlGfYJAybKNwegFpFyvq+h2uoA9VQZ/8vrr2GmJGMOquoRrBeXvGmWgFQ0gN48mj
HI1UWcZs1/vU5saj+NSaaRHMydJSgLANICtDZu3bCocGGOCYA8TKOrH4ideq2xLq
QewJnWmDUSEZHyXPTWpoTfgGhqYkXwlF0lxD5X42yzxuli155AS73e/ZUmuak4YF
PwZcSq+8X1CtzenQplJcN4NiazK7W/ztzbOYal9blsf9fjhxqyXCW5B8jDKTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTdBzjYx2i3RNRGfuHboJJ57A5tUwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALssQjANBgkqhkiG9w0BAQsFAAOCAQEAcA4pkGSnNgfr
Lp/mXiCbkucAuZGO/8V3QJR+70kX/hJLhNMeIsIT48X4AFDIDvF7Wv3kuA6aLrXX
i41NVquoVh6hHudzC7ghhyjJwWtb7nkp9k7iBtXjob51VaDfHg3EaoK9XhW+tlqm
hGqE0lSBJG4oa0wbFVIkkr/mNWwXY/EhCjyif3ND5n1MCVlTN8Zrqg8PcH6Q+g7L
ZZEBFEL9RNtU4E14sYGDVlFl7WrvnYl+4TXXTmVtjXSYsCWsO0TRexXWzr4zcvRs
40LCU/YrgloWp9IFqxrx/pJNC3wUXS5QvWHhxpHQPXK9SwVDsktMBRmy+2P/8ujJ
U8FmW/onDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org