Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e36382e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          YwJ7TzM12C1PotUVF/ZtW0zHsy3y9w0yXcsHqpEzWKo=
Subject key identifier:   4D:BA:07:75:FC:44:BF:23:A2:1F:0D:A7:60:F0:54:03:F1:73:AA:59
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       0A24E8714752A77DA0DC7C8CFF01A55F8EC61C9B
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        187.44.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:24:e8:71:47:52:a7:7d:a0:dc:7c:8c:ff:01:a5:5f:8e:c6:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=4DBA0775FC44BF23A21F0DA760F05403F173AA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:df:63:0f:51:27:77:72:52:88:05:b6:99:
                    de:aa:d2:dc:79:09:b0:35:60:96:7f:1b:41:34:50:
                    da:8c:89:06:74:be:67:3f:12:e5:71:6a:b9:0a:6e:
                    34:c3:6e:f8:bf:80:fc:87:73:18:ea:80:41:fd:b4:
                    ea:73:9c:2e:d0:41:98:54:a1:ec:18:1b:dc:f9:49:
                    55:92:ee:83:79:cf:2b:36:83:1f:ac:25:bc:7e:f6:
                    38:30:20:e3:c5:69:a5:97:c6:86:04:9c:cd:8e:ba:
                    d7:38:96:52:1a:33:6d:61:4f:a6:fe:9d:93:9d:de:
                    35:c5:ca:92:94:6f:60:ae:f4:67:ab:5b:cf:17:08:
                    e3:1f:4b:73:32:78:b1:d2:8b:57:56:f2:b6:ba:af:
                    0e:0c:7d:36:28:c6:6e:5b:9a:a2:79:85:41:2b:c9:
                    33:1d:42:bb:d3:20:4c:c8:fc:c7:5d:2c:48:4f:b9:
                    f4:98:d1:00:4f:45:22:95:1f:3b:0e:a3:11:af:8e:
                    25:3b:e1:4b:ed:57:e6:96:1d:60:26:b0:c4:46:74:
                    fe:22:e0:84:27:c8:56:32:8f:41:2c:47:05:63:db:
                    78:eb:02:11:93:dc:b4:37:ef:f6:f9:44:6d:68:98:
                    90:ce:bc:b4:37:bb:c2:67:cb:5a:4f:c7:3e:7a:7d:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BA:07:75:FC:44:BF:23:A2:1F:0D:A7:60:F0:54:03:F1:73:AA:59
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:72:67:0c:eb:1b:2f:8a:90:a9:08:6c:ba:bc:fc:f3:87:
         a0:0c:67:a8:98:69:15:ea:9b:1d:00:ea:3f:95:88:db:08:04:
         5e:ae:60:b8:74:8d:85:93:01:aa:3e:01:37:30:58:ef:70:48:
         2f:6b:e2:8d:40:06:4c:34:88:e9:04:3c:17:e9:b9:b3:c4:b0:
         ae:94:3e:55:00:bb:ac:86:e7:02:ea:e1:1f:8e:8b:7d:60:34:
         67:5a:82:1b:33:b3:da:4c:d0:be:53:07:5a:8c:d8:14:78:fc:
         9a:6a:9d:3d:14:bd:53:f4:97:f9:16:60:ae:dd:51:9c:31:9d:
         ce:8f:b4:da:a0:67:77:c7:b4:f0:c3:92:57:68:04:7b:af:05:
         49:d5:33:d3:a2:e2:f9:21:6b:72:27:98:e1:b6:9f:5d:2f:69:
         90:d4:ef:9b:85:77:c2:67:70:4e:f5:66:50:09:01:cd:c1:8c:
         b7:37:df:fb:44:da:6a:a6:1b:48:8a:71:74:59:7e:e0:77:22:
         6d:d8:62:7b:d2:c9:08:16:99:3d:6a:44:39:8e:fc:fb:9b:a7:
         7c:c4:68:74:5a:f5:0b:da:37:02:d5:53:a2:61:2c:0c:98:de:
         aa:51:96:a3:d1:4f:99:5a:32:7b:41:90:8c:93:51:45:63:3c:
         1d:18:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org