Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37302e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e37302e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          CvMcsNRoXIHhzMKGjr122uYnztvzyvvGvn9ZtkeZTkU=
Subject key identifier:   38:50:3E:91:72:BF:2F:95:12:CF:DE:1F:65:74:E8:93:05:85:D8:0C
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       5C6F7B960816C546530451C2D5DE60C99F0F3A77
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37302e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:45 +0000
ROA not before:           Thu 14 Sep 2023 18:42:45 +0000
ROA not after:            Thu 12 Sep 2024 18:47:45 +0000
asID:                     28309
IP address blocks:        187.44.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6f:7b:96:08:16:c5:46:53:04:51:c2:d5:de:60:c9:9f:0f:3a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:45 2023 GMT
            Not After : Sep 12 18:47:45 2024 GMT
        Subject: CN=38503E9172BF2F9512CFDE1F6574E8930585D80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7d:9f:1f:d9:80:0f:00:be:0b:21:d9:58:ac:
                    3a:6c:c8:b9:26:c3:4b:38:3f:41:6a:04:48:d3:64:
                    0e:1e:9a:6e:6f:fc:57:67:d7:a8:43:13:73:7f:11:
                    2a:31:4a:89:cc:ef:6f:87:b3:3c:45:3a:a1:1d:35:
                    0f:fa:8e:65:1e:84:a6:b2:35:6c:4b:ba:f7:69:b8:
                    25:ae:de:f0:59:eb:cb:56:a4:ab:36:86:3d:6e:1d:
                    c8:45:90:97:aa:52:52:7f:d5:0b:7c:98:fe:4e:99:
                    37:05:ec:4c:a2:4b:d2:06:8a:c0:07:44:60:da:f4:
                    eb:10:5d:be:de:a8:58:4c:f1:9e:27:45:35:d1:34:
                    6b:a4:8c:ce:4e:c5:51:f4:a6:d6:ab:98:92:69:22:
                    0e:de:e3:80:5c:df:d7:fd:3e:31:18:0d:42:e6:58:
                    1b:2f:2c:71:5d:a0:df:45:48:93:2a:52:b1:43:c0:
                    45:5a:62:a6:7f:63:f1:9a:58:26:ec:c4:8b:21:73:
                    8b:8d:47:0b:38:e1:5d:23:7c:1a:08:ed:3b:58:38:
                    08:56:73:6a:70:fb:7e:c2:05:ac:fb:bd:bd:a1:2f:
                    3e:3c:02:f7:5f:d1:6e:99:64:00:e9:cd:a4:d5:89:
                    7b:d1:87:c5:0b:41:dd:1f:8d:a4:1d:5d:4c:dd:f8:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:50:3E:91:72:BF:2F:95:12:CF:DE:1F:65:74:E8:93:05:85:D8:0C
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37302e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a4:fd:b6:b6:33:48:3e:aa:e9:3c:a3:8e:66:7c:c7:01:4c:
         db:c6:8a:90:f9:87:f8:0f:44:b3:70:16:64:70:a9:29:96:a8:
         ec:18:d7:75:95:75:b9:4d:66:d7:56:0c:c7:be:9a:5e:45:45:
         7c:2d:65:66:d4:d4:17:df:1d:1b:ee:01:ce:1c:ad:1d:b6:71:
         5e:fb:4b:e0:fa:f6:ef:6c:88:05:de:c8:9c:c9:83:4b:32:28:
         8f:81:b2:d3:00:ec:cf:8a:f5:40:b0:2b:dc:88:a8:30:02:f1:
         f3:3a:b5:51:9d:a6:5d:e1:c6:e6:e5:b7:85:8c:5e:ee:a1:85:
         93:46:31:78:85:fe:7f:b7:d1:f0:fa:12:f3:8c:37:4b:7c:9a:
         02:59:34:13:d1:a6:c0:3d:fe:23:1e:7b:27:33:c2:36:0a:2e:
         c5:11:99:cb:9e:a3:76:4e:1a:9d:19:16:a9:df:0a:01:4b:02:
         ea:22:af:e0:77:0b:b9:a5:40:02:14:e0:9e:78:b9:ce:45:92:
         c7:71:73:fb:3f:02:3d:46:b0:98:72:87:0f:7c:a0:2a:50:08:
         49:f8:60:4b:66:3c:cb:8f:50:68:a6:7e:92:b7:7d:f0:17:99:
         b8:be:3e:b9:43:49:9b:55:67:ea:8d:ae:24:0c:d6:7e:7d:8d:
         94:94:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:25 2025 by rpki-client