Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e37322e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          u9DkBdn3CF1f83NYXCIPrelYI9FTd6WoPXPE44b6Ydg=
Subject key identifier:   9E:91:09:99:6B:CC:44:35:8C:EB:40:1C:57:7A:AC:CA:DD:A4:D3:AF
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       3DA7130C67AEE090EB0B56B2CEE2A5A50C4F1C14
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:50 +0000
ROA not before:           Thu 14 Sep 2023 18:42:50 +0000
ROA not after:            Thu 12 Sep 2024 18:47:50 +0000
asID:                     28309
IP address blocks:        187.44.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a7:13:0c:67:ae:e0:90:eb:0b:56:b2:ce:e2:a5:a5:0c:4f:1c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:50 2023 GMT
            Not After : Sep 12 18:47:50 2024 GMT
        Subject: CN=9E9109996BCC44358CEB401C577AACCADDA4D3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:55:21:5a:e9:cb:a0:ec:2f:36:a8:f9:b9:
                    bf:05:0e:ba:0a:22:30:0f:39:f5:0c:63:a4:21:64:
                    27:fc:10:2c:d3:ee:6b:a6:3a:13:07:32:3a:52:c1:
                    d6:34:05:19:65:ef:4b:c5:55:d1:3c:00:17:ff:a6:
                    31:51:89:9d:fc:74:92:3e:dc:a8:e1:1d:d4:4b:0f:
                    39:ce:27:7e:1a:c5:f4:71:bd:42:96:e7:4d:c9:a8:
                    1b:d8:de:83:6a:77:09:69:bf:0e:e5:bf:5b:85:cf:
                    a6:96:40:a0:5e:67:8f:9f:09:ca:3c:5c:d7:a2:8a:
                    39:ef:76:09:4f:d9:fb:79:63:51:0a:33:48:f6:4c:
                    15:f0:52:3e:62:3b:54:dd:09:b3:7a:61:8b:96:c0:
                    86:a3:50:83:39:b0:01:03:b7:d6:de:04:2a:64:8d:
                    8f:1b:d4:58:7b:10:81:9a:70:29:5b:bb:0c:71:51:
                    4d:e3:39:c9:08:a2:f7:b4:b9:4f:54:bc:0c:ea:5b:
                    48:fe:a0:f1:a4:74:93:42:38:dd:ee:41:27:6a:c7:
                    62:8c:2d:cb:a5:67:36:7d:1c:8f:75:9b:9f:d9:02:
                    d0:fd:25:7c:93:51:e6:4e:a3:bd:81:87:56:e0:aa:
                    bc:24:e0:7c:16:fe:cf:e7:27:72:cd:72:fa:67:ed:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:91:09:99:6B:CC:44:35:8C:EB:40:1C:57:7A:AC:CA:DD:A4:D3:AF
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37322e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:66:f8:bc:bc:9c:88:65:13:1d:a8:f1:50:1a:a8:be:90:b0:
         01:d9:4b:77:31:34:7b:3c:97:3e:92:76:c9:0b:03:76:47:85:
         ae:89:df:a9:d4:a0:8d:5e:b6:9d:bc:e6:51:85:31:6d:ec:cc:
         7e:d5:1b:d0:e4:4c:0a:18:ff:28:1e:40:86:c4:57:c9:c6:d5:
         8b:d4:69:bc:40:07:62:52:e6:94:ef:5a:8c:46:89:2d:2c:47:
         06:c5:78:5e:0e:58:b0:7d:47:9d:db:6b:f8:fb:7d:ef:24:ed:
         f9:16:6b:26:13:8a:65:a8:4c:fb:55:f4:cf:da:ac:c0:63:b9:
         06:73:33:a5:08:6f:d9:a2:43:c7:62:4b:49:76:54:05:b2:8a:
         d3:66:5d:10:8f:a5:c2:37:02:ba:7e:77:9e:00:36:54:aa:51:
         bc:10:bb:d6:a0:93:d3:cb:3b:32:ea:06:44:1b:77:6a:5d:1c:
         03:cf:79:4a:6b:a4:f5:0b:5f:9f:83:57:94:c6:3f:3d:0f:8d:
         20:5f:af:0b:a3:1e:4d:d0:a8:f4:80:60:6f:07:b1:fd:62:09:
         d4:84:2b:f6:08:8c:7c:d0:d8:3e:92:fe:e0:3c:2f:1e:7b:30:
         d6:76:49:ec:85:37:e5:bf:88:c0:27:06:d6:6d:3e:bf:e4:e2:
         1e:7b:b1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org