Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36392e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e36392e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          84gPdAL1qj2T73RYAMvR13lvZcECLW7D1l5G94lB8TY=
Subject key identifier:   FC:1F:97:EE:76:82:04:9C:29:0F:9A:B6:CC:1E:FC:4C:EE:58:7D:B8
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       30A801619E011D7B2B81CC81CA0B258D6896B032
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36392e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:50 +0000
ROA not before:           Thu 14 Sep 2023 18:42:50 +0000
ROA not after:            Thu 12 Sep 2024 18:47:50 +0000
asID:                     28309
IP address blocks:        187.44.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a8:01:61:9e:01:1d:7b:2b:81:cc:81:ca:0b:25:8d:68:96:b0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:50 2023 GMT
            Not After : Sep 12 18:47:50 2024 GMT
        Subject: CN=FC1F97EE7682049C290F9AB6CC1EFC4CEE587DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:02:91:9a:48:e4:4c:8d:3f:cf:5d:ae:c4:58:
                    53:2d:ea:c0:51:d2:31:5f:96:30:7f:55:b5:a9:82:
                    5c:6b:bb:05:5f:5e:a2:b8:3a:58:a4:10:e7:5c:ac:
                    6b:8c:b6:71:d4:a8:4d:5a:51:df:92:ca:8d:31:d6:
                    6d:30:83:84:d2:df:34:d1:10:b5:68:62:82:40:8b:
                    6f:c5:fb:fa:74:67:1a:66:79:ff:ed:73:53:13:5b:
                    f0:d2:b1:59:6d:7a:7f:aa:5f:82:22:99:fc:20:2f:
                    31:69:4d:8e:5d:75:af:e9:59:a1:35:1b:e1:75:32:
                    a7:80:42:c0:1a:88:31:83:d7:dc:ac:d6:4c:d4:ab:
                    71:26:d3:20:31:1d:48:db:7d:f2:2d:f6:9f:8e:ad:
                    0b:84:1b:82:b7:4d:cc:7e:90:89:48:e2:05:51:29:
                    ff:8f:bc:5e:aa:8e:79:9d:8d:76:16:57:61:84:a4:
                    74:77:f0:57:5e:82:db:6f:09:83:5b:cc:30:b5:11:
                    e8:71:b2:54:7b:94:52:45:4f:c7:e1:f7:20:98:e6:
                    74:4d:79:a2:e5:cf:f9:12:c6:c5:16:6e:6f:92:eb:
                    85:47:40:68:e5:d2:4f:70:40:eb:99:0f:2d:75:e4:
                    e0:86:b3:28:91:ae:df:49:02:b4:63:90:fc:e7:de:
                    76:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:97:EE:76:82:04:9C:29:0F:9A:B6:CC:1E:FC:4C:EE:58:7D:B8
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e36392e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:2e:06:04:1c:e4:4c:4e:70:f8:4b:41:35:21:c1:54:59:
         fc:71:00:b3:b8:99:13:f8:2e:1f:2a:15:78:3e:a3:87:b6:4d:
         0e:a6:0a:e3:cc:50:d8:fd:08:4c:be:21:6a:be:9a:95:ab:ec:
         1e:a4:ff:a2:54:31:a3:13:64:c7:e6:4a:ab:89:91:cd:0f:4d:
         c9:14:31:ae:77:e0:6b:21:ae:af:a3:ed:c9:d8:5f:e3:ff:4e:
         99:b6:06:d2:2c:53:90:0b:72:0f:1c:0a:25:0d:0c:71:e8:cb:
         dd:f2:18:0c:ed:49:9e:72:d7:62:03:b0:29:bd:7d:b0:d2:d6:
         ae:98:19:24:52:c0:5f:48:54:6c:27:ce:7c:5a:47:31:89:7b:
         c6:7d:0b:44:70:2c:3f:69:13:08:ba:50:de:7c:ec:a5:30:ad:
         a8:18:5b:ad:77:85:12:66:9a:e3:15:ff:5c:0c:fd:44:0e:5b:
         eb:5a:fe:7f:30:ce:f7:ba:3b:0d:19:27:46:47:cb:06:af:39:
         bb:3a:02:4c:e7:f9:a1:06:f4:65:ef:39:21:18:51:2b:4e:f1:
         ff:05:3b:f3:43:bb:04:ef:ac:b9:5b:31:eb:86:2d:0d:44:e1:
         79:54:12:c9:c9:87:86:64:17:02:27:e1:3a:b3:3b:84:cd:17:
         f4:4e:30:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org