Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32322d3232203d3e203238333039.roa
File:                     3138372e34342e36382e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          g/+8L4dj5S+STbxL+RmqdTo4bF/7zu9D1I9IzXq1qWE=
Subject key identifier:   A2:4C:A5:1A:F6:6B:10:94:40:97:DD:AB:B7:1A:96:7D:95:55:E0:C5
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       794E1F7830216B616142EEE6424C0CBE6CCEFB68
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:45 +0000
ROA not before:           Thu 14 Sep 2023 18:42:45 +0000
ROA not after:            Thu 12 Sep 2024 18:47:45 +0000
asID:                     28309
IP address blocks:        187.44.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4e:1f:78:30:21:6b:61:61:42:ee:e6:42:4c:0c:be:6c:ce:fb:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:45 2023 GMT
            Not After : Sep 12 18:47:45 2024 GMT
        Subject: CN=A24CA51AF66B10944097DDABB71A967D9555E0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:c2:db:2f:a8:d2:90:a1:91:5d:09:9b:d1:
                    63:ed:93:5d:9a:cf:18:c4:0f:98:b0:a5:c7:56:e0:
                    7f:98:a3:7c:a3:37:5a:67:2f:f9:00:44:b5:21:74:
                    64:15:50:24:c7:f6:19:0c:f3:06:da:fa:1b:66:8e:
                    22:97:55:70:60:59:eb:2a:92:4c:2b:67:77:6f:30:
                    4c:56:c1:26:e8:89:4a:2c:e5:a7:53:ec:02:2e:e7:
                    3f:a8:f1:91:ee:d0:48:86:07:3f:11:94:5c:19:a8:
                    5d:fc:ba:3b:ca:9a:24:6b:bf:68:ae:be:0b:ee:43:
                    fb:40:09:8e:9c:1e:e7:3e:e4:1b:b5:32:a1:ae:23:
                    ac:02:97:3f:ef:d4:97:17:a9:3c:20:37:58:fd:e5:
                    ba:75:72:13:96:32:59:49:7c:8c:5f:c0:79:53:07:
                    0b:d9:a0:9b:ee:8a:ec:82:98:6b:46:67:31:91:82:
                    2c:dc:b3:ce:91:b8:da:a2:5c:cc:f6:a4:07:2a:2b:
                    9e:14:a2:a8:a0:8c:d9:52:50:df:19:88:72:4c:e8:
                    0d:8c:99:15:ce:9a:31:fb:47:b7:ec:c5:46:20:a7:
                    53:89:2b:44:51:c2:77:04:5b:de:0b:5d:8d:de:75:
                    27:11:6b:2c:0e:fd:3a:22:c5:1c:0e:61:90:0b:f1:
                    02:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4C:A5:1A:F6:6B:10:94:40:97:DD:AB:B7:1A:96:7D:95:55:E0:C5
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:a0:77:c3:d2:d9:d7:a4:21:b0:ef:8e:78:c8:e7:69:e7:46:
         3e:fc:d1:04:2c:8a:0c:74:79:bd:e9:38:b0:de:f6:2c:dc:48:
         af:a8:5b:f4:df:c9:ba:71:8c:ac:91:a3:02:d0:3a:87:0d:ec:
         f6:c0:7d:17:15:f8:06:2c:7c:f1:19:1a:8b:87:58:7f:29:b2:
         cf:f2:37:5e:7a:c1:e8:e4:d9:1f:c3:bd:e8:8a:d7:0d:1b:26:
         e8:56:4f:3b:bd:1e:6f:85:c2:6c:98:2e:0c:90:3b:d4:a0:1a:
         c2:59:79:1b:28:ed:1f:b1:e3:8c:a5:cc:04:fd:ca:70:87:30:
         b0:6e:65:04:3d:37:cc:5d:62:0b:ec:23:36:a1:d0:9f:90:5c:
         36:c9:33:6a:8c:a0:8d:49:ca:8d:a5:9c:50:bf:11:41:1f:ad:
         55:c7:62:cc:ce:9c:d5:ff:65:37:84:85:79:6c:78:90:dd:79:
         ce:2d:11:7d:97:54:5c:ed:33:58:ad:cb:62:59:54:48:6a:3c:
         83:19:bb:d5:81:f4:cd:8c:9a:17:1a:09:f4:fe:38:61:ca:39:
         16:4e:0f:80:27:7a:95:92:fd:b3:06:e2:e2:b8:31:15:78:0e:
         e0:f2:81:53:9c:cf:2c:e6:d6:c8:68:83:b9:d0:82:2c:41:21:
         fe:b3:50:f9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUeU4feDAha2FhQu7mQkwMvmzO+2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDVaFw0yNDA5MTIxODQ3NDVaMDMxMTAvBgNV
BAMTKEEyNENBNTFBRjY2QjEwOTQ0MDk3RERBQkI3MUE5NjdEOTU1NUUwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9R8LbL6jSkKGRXQmb0WPtk12a
zxjED5iwpcdW4H+Yo3yjN1pnL/kARLUhdGQVUCTH9hkM8wba+htmjiKXVXBgWesq
kkwrZ3dvMExWwSboiUos5adT7AIu5z+o8ZHu0EiGBz8RlFwZqF38ujvKmiRrv2iu
vgvuQ/tACY6cHuc+5Bu1MqGuI6wClz/v1JcXqTwgN1j95bp1chOWMllJfIxfwHlT
BwvZoJvuiuyCmGtGZzGRgizcs86RuNqiXMz2pAcqK54UoqigjNlSUN8ZiHJM6A2M
mRXOmjH7R7fsxUYgp1OJK0RRwncEW94LXY3edScRaywO/ToixRwOYZAL8QJRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUokylGvZrEJRAl92rtxqWfZVV4MUwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArssRDANBgkqhkiG9w0BAQsFAAOCAQEAM6B3w9LZ16Qh
sO+OeMjnaedGPvzRBCyKDHR5vek4sN72LNxIr6hb9N/JunGMrJGjAtA6hw3s9sB9
FxX4Bix88Rkai4dYfymyz/I3XnrB6OTZH8O96IrXDRsm6FZPO70eb4XCbJguDJA7
1KAawll5GyjtH7HjjKXMBP3KcIcwsG5lBD03zF1iC+wjNqHQn5BcNskzaoygjUnK
jaWcUL8RQR+tVcdizM6c1f9lN4SFeWx4kN15zi0RfZdUXO0zWK3LYllUSGo8gxm7
1YH0zYyaFxoJ9P44Yco5Fk4PgCd6lZL9swbi4rgxFXgO4PKBU5zPLObWyGiDudCC
LEEh/rNQ+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org