Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32322d3232203d3e203238333039.roa
File:                     3138372e34342e37322e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          7qRZyF2ndZjPszHCb/fdAVhx44iV0+M7CWIx0Pd9Cw0=
Subject key identifier:   50:3F:F5:65:0F:FD:30:6A:2C:DD:C5:91:96:1D:02:15:D5:CD:C3:FC
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       417125B318CF67AD50ACDEE16E63C88589F892CB
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:48 +0000
ROA not before:           Thu 14 Sep 2023 18:42:48 +0000
ROA not after:            Thu 12 Sep 2024 18:47:48 +0000
asID:                     28309
IP address blocks:        187.44.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:71:25:b3:18:cf:67:ad:50:ac:de:e1:6e:63:c8:85:89:f8:92:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:48 2023 GMT
            Not After : Sep 12 18:47:48 2024 GMT
        Subject: CN=503FF5650FFD306A2CDDC591961D0215D5CDC3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ec:84:d2:d7:05:86:ed:1b:d2:2d:72:84:d6:
                    03:a1:6a:98:fb:8d:62:9b:a7:42:77:b1:c7:e6:b2:
                    e5:42:d9:ff:2b:98:5d:c1:e4:a7:fb:a3:81:2b:1c:
                    77:e8:a3:cf:2d:44:b6:fb:2c:b3:c4:eb:93:20:90:
                    2e:1b:52:72:d9:82:27:a8:27:e5:14:f3:a0:95:32:
                    94:e4:88:2c:c7:85:06:14:18:78:54:30:5c:53:11:
                    80:0e:fa:cd:3c:69:98:83:66:2e:8f:4a:77:67:5c:
                    58:71:ae:bc:1d:04:da:d9:ff:d3:4a:7d:c4:cf:da:
                    f3:91:6d:a1:fa:2c:76:be:9f:e6:94:e6:69:9f:d8:
                    9e:8d:e3:a9:06:4c:58:e1:6c:57:f1:a1:46:87:5e:
                    a3:02:79:f0:c5:99:74:42:fc:55:e3:a9:71:88:50:
                    99:0f:d2:11:89:82:6a:ab:76:76:ae:2b:f6:63:32:
                    66:0a:b5:c5:77:fa:cd:21:5a:d6:1e:ba:89:5f:6d:
                    d6:32:3b:22:3e:89:be:b3:3a:ec:40:06:4d:08:dd:
                    b1:81:7d:c7:a6:07:3a:1c:b6:b8:61:8a:0b:83:0f:
                    20:6c:98:da:65:11:f3:e4:19:bc:7d:1f:83:01:fd:
                    84:9f:79:08:9c:56:12:01:04:c1:07:02:d7:02:2d:
                    41:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3F:F5:65:0F:FD:30:6A:2C:DD:C5:91:96:1D:02:15:D5:CD:C3:FC
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:50:bd:2e:1b:aa:80:6e:bf:25:ee:de:f5:e9:63:2c:a9:
         17:79:61:9d:a7:63:9d:43:ba:93:89:d1:59:e6:28:7f:90:1a:
         0c:4b:1a:a6:3e:25:04:98:be:b2:45:03:5a:eb:4d:18:c4:73:
         f0:5d:10:29:73:7e:16:4e:12:50:2b:3e:89:fe:1d:fa:36:e5:
         49:28:98:63:16:d6:cf:8d:22:57:42:63:60:2a:39:47:6c:94:
         57:31:63:d8:b7:9a:5d:41:a2:dd:55:b7:c1:7e:29:ea:af:5a:
         ce:45:7f:6c:d2:8e:7e:4e:4a:57:c4:ae:0c:f4:00:6f:ca:d7:
         cd:af:dc:75:70:de:30:68:92:12:55:0a:91:d1:8d:fb:28:ba:
         ab:f1:24:77:20:25:fa:9d:9d:80:c1:c1:10:b9:24:27:9a:67:
         12:25:a0:0a:41:e4:03:fe:51:01:90:52:b9:8c:bf:0d:0e:93:
         ae:ae:59:92:fd:0d:46:f3:e2:54:b7:28:f4:4e:d9:19:0e:f4:
         4f:c4:58:23:1c:6e:08:00:3a:73:16:22:73:a0:c2:2d:bf:64:
         af:42:73:a4:87:cd:c4:37:e5:10:86:a5:31:30:2e:46:4f:2e:
         31:00:7e:f8:43:6a:d2:6d:d8:9f:9e:b8:4f:35:3d:d0:d4:ed:
         af:d6:15:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQXElsxjPZ61QrN7hbmPIhYn4ksswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDhaFw0yNDA5MTIxODQ3NDhaMDMxMTAvBgNV
BAMTKDUwM0ZGNTY1MEZGRDMwNkEyQ0REQzU5MTk2MUQwMjE1RDVDREMzRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7ITS1wWG7RvSLXKE1gOhapj7
jWKbp0J3scfmsuVC2f8rmF3B5Kf7o4ErHHfoo88tRLb7LLPE65MgkC4bUnLZgieo
J+UU86CVMpTkiCzHhQYUGHhUMFxTEYAO+s08aZiDZi6PSndnXFhxrrwdBNrZ/9NK
fcTP2vORbaH6LHa+n+aU5mmf2J6N46kGTFjhbFfxoUaHXqMCefDFmXRC/FXjqXGI
UJkP0hGJgmqrdnauK/ZjMmYKtcV3+s0hWtYeuolfbdYyOyI+ib6zOuxABk0I3bGB
fcemBzoctrhhiguDDyBsmNplEfPkGbx9H4MB/YSfeQicVhIBBMEHAtcCLUG1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUUD/1ZQ/9MGos3cWRlh0CFdXNw/wwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArssSDANBgkqhkiG9w0BAQsFAAOCAQEAmi9QvS4bqoBu
vyXu3vXpYyypF3lhnadjnUO6k4nRWeYof5AaDEsapj4lBJi+skUDWutNGMRz8F0Q
KXN+Fk4SUCs+if4d+jblSSiYYxbWz40iV0JjYCo5R2yUVzFj2LeaXUGi3VW3wX4p
6q9azkV/bNKOfk5KV8SuDPQAb8rXza/cdXDeMGiSElUKkdGN+yi6q/EkdyAl+p2d
gMHBELkkJ5pnEiWgCkHkA/5RAZBSuYy/DQ6Trq5Zkv0NRvPiVLco9E7ZGQ70T8RY
IxxuCAA6cxYic6DCLb9kr0JzpIfNxDflEIalMTAuRk8uMQB++ENq0m3Yn564TzU9
0NTtr9YVEA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org