Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37342e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37342e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          NV1nxMAAjOz9M8qrA+ROysSue5HGn86pLQOPSdS6JEE=
Subject key identifier:   78:B9:39:74:44:45:07:A8:B9:2E:58:DA:1F:EC:07:5C:1E:B7:46:0E
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       032171166D02EC8D2C749AC85C7E3667D3FD24C7
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37342e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:45 +0000
ROA not before:           Thu 14 Sep 2023 18:42:45 +0000
ROA not after:            Thu 12 Sep 2024 18:47:45 +0000
asID:                     28309
IP address blocks:        187.44.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:71:16:6d:02:ec:8d:2c:74:9a:c8:5c:7e:36:67:d3:fd:24:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:45 2023 GMT
            Not After : Sep 12 18:47:45 2024 GMT
        Subject: CN=78B93974444507A8B92E58DA1FEC075C1EB7460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:f7:7f:bf:f6:28:ba:69:69:23:30:7d:b5:
                    40:3f:77:60:3b:65:76:dd:91:92:88:40:6a:b4:af:
                    96:6c:1e:b4:58:19:26:e9:86:83:46:80:67:6d:f7:
                    2e:02:91:ec:e6:c7:7b:29:a9:c6:be:31:41:13:96:
                    08:63:f4:92:d0:ba:78:a2:43:83:e9:c4:5d:09:ea:
                    a7:b7:81:9a:ef:5f:03:de:07:a1:a2:bd:3a:60:e9:
                    df:f7:03:c2:2d:70:b3:8f:ec:8c:2a:b3:9a:c3:71:
                    f8:7f:84:5a:e6:d1:92:fb:ce:35:0f:a7:e7:50:8f:
                    6c:33:55:f6:56:91:85:47:75:a7:06:73:bf:ca:d3:
                    4f:77:ad:c9:e4:a7:65:26:b6:93:7e:e1:ca:bd:32:
                    9f:f9:23:5e:aa:16:66:9b:c6:1a:fc:99:38:65:7a:
                    e7:f1:5d:be:3d:0a:d6:71:81:06:3f:7d:e1:33:15:
                    56:7f:4c:3b:ae:25:56:f3:ad:93:9b:2a:ae:41:3b:
                    98:6c:52:80:64:a6:65:8c:23:ee:9c:a5:2d:52:43:
                    fb:dd:f0:2c:cf:9b:ec:b9:d4:6e:9e:d1:1d:e9:9d:
                    8a:48:7b:72:1b:d9:70:6b:1c:5e:5a:87:fd:a6:96:
                    b5:4a:6f:20:dc:ca:f8:20:00:8b:df:4e:26:94:30:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B9:39:74:44:45:07:A8:B9:2E:58:DA:1F:EC:07:5C:1E:B7:46:0E
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37342e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:16:36:4d:59:7a:6d:16:b9:b4:9e:13:ca:6f:f0:3b:6a:bc:
         1a:4d:94:88:94:32:8f:7c:88:2b:b7:bd:a3:7d:ef:10:00:ca:
         5a:24:2d:d9:f2:df:5f:82:60:c9:0d:c7:e5:95:74:5f:0b:f2:
         99:d2:c9:fe:cd:27:43:3d:06:18:1f:4d:01:03:a9:a1:6b:4a:
         27:37:47:0c:90:11:95:dc:f2:55:7c:ff:f1:2d:dd:72:7a:7d:
         f0:b8:de:73:9f:62:0a:48:02:b3:1a:f8:69:b9:a8:7e:6a:42:
         8d:de:5e:00:7b:83:3c:76:8d:5f:75:47:6b:00:cb:ea:93:11:
         99:1f:34:e2:ec:05:d0:b7:6c:d2:d0:29:c1:a1:35:bf:ff:d7:
         33:6a:22:04:a5:49:da:64:ef:42:21:80:13:7a:bf:68:0c:31:
         fb:68:9c:cf:4b:73:81:21:35:94:36:49:e4:9e:63:9a:f4:90:
         a3:d9:f4:c0:35:c6:b7:5f:3e:54:fd:06:15:6c:c8:0c:65:dd:
         60:a2:c6:87:26:e5:ed:05:83:66:05:8e:33:c7:24:be:20:d8:
         d9:fb:fe:25:57:44:ec:12:a0:ec:4b:b9:74:f2:e6:d2:ac:c2:
         17:59:14:b5:7f:07:b7:35:ce:87:f4:d7:61:0f:d9:ff:f1:72:
         de:5e:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org