Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e36382e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          s4EuFgMTnIsjNb1MN7zyxz4Pi6DWZansihulJk+7Mk0=
Subject key identifier:   77:B2:1E:4F:C7:16:C5:37:D9:FC:E6:EF:7E:12:DE:30:89:68:DB:8F
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       4D19CFC9B1F5CDD06D2D73A36BC373A509FB1488
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        187.44.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:19:cf:c9:b1:f5:cd:d0:6d:2d:73:a3:6b:c3:73:a5:09:fb:14:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=77B21E4FC716C537D9FCE6EF7E12DE308968DB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:20:0d:75:95:1a:73:fc:2a:bf:8d:c7:33:
                    b5:6b:66:8d:ed:90:86:ce:97:57:e6:1d:c0:e8:bd:
                    93:ee:76:3b:44:7d:06:86:5f:4c:11:16:ce:9c:f9:
                    7e:f3:a5:31:26:20:c7:1f:2b:39:32:03:e0:01:a4:
                    6c:fa:69:0e:4d:3f:7e:64:fc:c5:56:b1:7c:91:ea:
                    75:9d:90:3e:c1:32:03:73:25:57:f1:e0:7a:25:00:
                    3a:29:a1:f2:4f:5e:c0:b5:70:44:68:e6:a9:b1:af:
                    a5:57:9c:8b:5b:6c:be:64:0b:4a:f8:78:29:f6:8b:
                    c6:1f:3b:02:3a:b4:92:4c:ac:d4:8f:fa:38:b2:7d:
                    8a:b3:30:7f:80:b4:b4:d5:9b:65:04:d2:f5:c3:e3:
                    4b:85:a1:ee:1e:b8:8d:9f:0a:ac:05:07:af:db:28:
                    f8:9c:42:4d:c9:d1:9a:96:25:98:88:04:ea:bd:6d:
                    ea:50:18:79:6d:96:26:ab:22:0d:89:e2:72:42:03:
                    e3:eb:6e:52:f2:5a:6a:fe:27:81:3f:16:24:4b:48:
                    ff:db:cd:ed:a4:f5:8a:99:8f:a6:63:8d:ea:5e:08:
                    de:77:e0:60:b4:ee:d9:e2:3e:12:23:8b:14:f9:db:
                    4d:58:46:69:3d:95:04:97:89:92:bd:22:16:2e:d2:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:1E:4F:C7:16:C5:37:D9:FC:E6:EF:7E:12:DE:30:89:68:DB:8F
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36382e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:9e:d4:e0:40:6b:2b:bf:33:20:64:4e:95:4a:33:2c:77:
         08:ca:18:74:44:2d:77:26:a2:6f:52:58:2e:b4:b2:97:20:a0:
         12:de:01:7e:a3:3b:74:06:69:88:de:05:57:25:69:48:13:13:
         7c:af:cf:77:15:de:6e:35:90:17:0b:0e:e3:00:fd:b4:6d:ec:
         15:af:68:5b:c1:19:e1:ed:60:53:cc:4a:7e:6c:1a:bf:5c:33:
         63:8d:0b:bb:19:52:5d:dd:d3:1e:3c:04:43:d2:58:04:5c:c5:
         d9:26:2c:90:37:ba:f8:7c:ea:38:ab:75:73:d6:d5:b5:8a:03:
         2d:7f:f7:5f:66:73:7f:1b:19:4b:b8:26:46:4c:6e:db:39:ed:
         c2:4b:bb:5b:c5:a7:c2:06:3e:ed:19:96:91:86:6f:bc:00:d7:
         a0:c1:b0:af:ec:f6:e3:fb:fe:40:39:12:f0:5a:b5:36:62:92:
         f6:de:1a:24:46:47:76:72:60:d3:c1:3b:78:70:32:7c:12:e1:
         01:c0:6d:e1:29:5d:51:0e:f0:2f:d3:1e:b6:d6:8a:97:b7:c2:
         21:3c:55:84:5c:fa:a0:40:ae:d2:7b:90:b9:50:99:43:f9:a0:
         ce:4e:f0:fb:45:77:9c:21:0a:76:77:13:b6:34:d8:09:91:47:
         21:78:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org