Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37302e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37302e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          gvCPs4/K9QMteBEjHzDyk1SMKp+Zj0JRUmo0PNFvU3E=
Subject key identifier:   37:37:E6:97:A7:F2:4A:2B:A2:F6:39:52:D0:6C:BC:84:BD:F4:7A:39
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       1CA4A706424EB095445FED569A5D3E3A7808D6B0
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37302e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:44 +0000
ROA not before:           Thu 14 Sep 2023 18:42:44 +0000
ROA not after:            Thu 12 Sep 2024 18:47:44 +0000
asID:                     28309
IP address blocks:        187.44.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a4:a7:06:42:4e:b0:95:44:5f:ed:56:9a:5d:3e:3a:78:08:d6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:44 2023 GMT
            Not After : Sep 12 18:47:44 2024 GMT
        Subject: CN=3737E697A7F24A2BA2F63952D06CBC84BDF47A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:37:c7:0b:8b:e2:01:33:c8:d7:93:7c:ba:
                    18:e3:0c:41:a2:44:3e:c0:7a:60:61:cb:b1:26:2c:
                    f8:e2:57:f7:f7:1b:ba:b5:37:ec:dc:bd:72:bb:37:
                    7d:97:c1:d9:fb:87:82:80:83:e2:6e:0d:1b:e1:76:
                    48:8e:98:75:fe:c6:90:c5:02:04:c8:d3:ef:10:66:
                    f8:5b:03:49:bc:e9:94:c4:c5:1d:1d:d2:73:cb:be:
                    b0:a4:ca:11:93:27:df:5e:d6:bd:c3:7d:5e:14:27:
                    2c:8f:90:12:c0:c6:ac:aa:97:a0:cf:6a:d9:00:33:
                    bd:72:09:8a:d0:34:0e:9e:ed:d4:7c:85:fa:99:ca:
                    3d:12:82:2d:87:d6:db:37:83:5f:93:f6:38:d5:85:
                    c1:14:26:84:c8:5e:1b:67:9b:d0:d1:36:36:09:0c:
                    94:cf:46:f7:52:50:bb:7a:f4:1f:6f:e4:da:ac:06:
                    9b:74:a5:d6:cb:de:36:cc:9a:ed:66:b3:73:5f:1b:
                    12:59:cf:cb:b3:8e:dc:e8:90:c5:2e:a0:05:79:fc:
                    0b:0f:33:e2:0c:03:4d:82:2e:7a:7a:db:a1:8e:e8:
                    3d:4a:9e:6f:9c:3b:93:d6:fe:34:1b:79:7a:54:c8:
                    6a:59:db:bc:2c:6c:cf:b1:3a:09:b9:2a:e8:39:8f:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:37:E6:97:A7:F2:4A:2B:A2:F6:39:52:D0:6C:BC:84:BD:F4:7A:39
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37302e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:55:c6:0e:a3:b2:9e:5a:a5:ff:c7:50:0e:ec:e6:56:79:
         b1:de:a3:d0:45:1d:74:d5:e4:0c:5f:4d:8c:2d:12:a1:f1:8b:
         be:88:b3:86:2c:82:1d:48:42:b4:14:9e:f9:74:cc:60:3f:7d:
         bc:33:2c:8e:0f:10:a9:1a:96:79:2b:a7:1a:0f:c3:bb:19:aa:
         ca:6c:e1:64:81:a9:a9:77:77:70:0b:e0:fb:fe:ed:da:00:b9:
         be:25:0d:13:bc:ce:4a:fe:0b:ed:1b:b0:23:42:b9:b1:76:04:
         67:0e:bb:89:a7:9c:d4:d1:07:6c:0f:f6:0d:0d:3c:32:4c:7c:
         27:b2:f7:93:c1:23:08:be:76:0a:07:18:02:a9:a1:a1:80:95:
         69:11:40:1f:7b:c7:5f:ff:e7:15:88:ef:f3:3c:44:66:ce:93:
         8e:9d:de:8e:39:0b:3e:02:80:95:05:f4:ad:3a:46:c4:52:43:
         08:d6:fc:59:59:70:12:80:48:b9:bb:e3:6b:01:02:8e:9e:bc:
         e0:da:88:63:7e:5f:57:f2:23:af:5f:ea:94:29:43:e8:a1:46:
         3c:78:a1:36:25:42:23:6e:09:25:de:a6:00:58:12:16:df:a9:
         77:dc:9d:73:e0:0d:6c:62:b9:da:bf:96:a7:80:23:42:90:a1:
         e8:9b:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org