Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37342e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e37342e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          +89xm2F/dEtRT5xb6hMG69VHa25hcFwaFY2x7K6M6Dw=
Subject key identifier:   BA:05:D7:24:88:A9:4C:F7:49:AE:65:10:B3:5E:4A:00:62:01:75:91
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       5231B5EF1F780DD4FAA007FA62BE29B26723A831
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37342e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:44 +0000
ROA not before:           Thu 14 Sep 2023 18:42:44 +0000
ROA not after:            Thu 12 Sep 2024 18:47:44 +0000
asID:                     28309
IP address blocks:        187.44.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:31:b5:ef:1f:78:0d:d4:fa:a0:07:fa:62:be:29:b2:67:23:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:44 2023 GMT
            Not After : Sep 12 18:47:44 2024 GMT
        Subject: CN=BA05D72488A94CF749AE6510B35E4A0062017591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:ca:69:f8:fe:4b:d5:06:0f:21:b4:b3:d8:
                    a1:08:a1:90:d6:68:3e:78:4d:5d:0e:51:0f:bd:59:
                    9d:92:d1:79:8b:2e:4c:a0:43:c1:a1:a8:e2:a1:7d:
                    bd:c1:5f:20:b9:63:18:6b:84:89:e2:b4:39:ca:2d:
                    b4:8c:04:9f:f9:ff:03:15:df:54:82:16:18:2e:4c:
                    9e:9a:52:ef:2e:5c:c6:69:46:22:3a:d3:46:85:74:
                    6e:05:13:c2:a3:12:26:cc:47:b4:a2:3b:0e:97:d8:
                    f8:3a:49:bc:87:d5:78:48:66:f0:16:47:65:98:ce:
                    56:49:c2:3f:11:71:03:12:47:f0:6a:0a:a7:f0:8e:
                    61:80:d1:7b:28:94:ac:f0:50:42:a6:42:41:b9:16:
                    f2:c0:5a:a6:b0:64:d7:ba:12:2f:d3:08:57:3b:d3:
                    32:b4:e8:c5:a8:96:4a:7b:9b:d9:85:86:ad:48:ae:
                    14:4c:0f:ed:2d:12:1d:d9:c7:df:6b:d2:5f:68:f8:
                    83:78:4c:b7:69:2f:e7:c1:0a:7e:9a:be:06:78:76:
                    bd:46:53:38:ea:6e:8d:37:53:0e:6c:53:22:0c:ac:
                    6f:88:d1:6e:29:3c:bb:4c:e0:fc:5e:2b:3e:c0:e4:
                    29:4c:73:fd:94:90:7a:41:d8:74:20:41:55:82:3b:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:D7:24:88:A9:4C:F7:49:AE:65:10:B3:5E:4A:00:62:01:75:91
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37342e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:d2:0c:98:b0:88:a9:fb:7a:ab:11:d2:1a:fb:94:96:e8:
         0d:33:4d:f7:19:8a:b7:79:f9:8f:13:8a:f8:6e:d0:b1:1b:6b:
         cb:2f:8c:11:0e:7b:f9:c0:4e:43:99:f0:20:1a:37:9e:4e:44:
         28:1c:69:76:11:aa:7a:29:02:75:de:6a:52:bd:7c:9b:7c:2d:
         f0:5e:2a:09:65:d2:2d:e6:53:d9:6e:9d:d1:75:3a:9c:56:7d:
         e6:96:8d:0f:51:c3:73:e4:39:0f:55:6e:33:ff:d3:c0:1c:84:
         25:2b:9e:13:5c:e3:65:59:52:f4:e7:ab:d2:e1:54:6a:fc:8f:
         a2:66:2f:4d:f7:2c:c5:2c:97:a7:3c:99:eb:da:a9:59:22:05:
         9d:d6:82:8d:7a:e6:bf:e7:79:25:87:1d:33:71:1a:da:c9:ee:
         a8:6f:61:73:68:87:b0:3f:6d:64:79:a5:55:f7:34:b6:36:bf:
         e8:06:c7:4b:7b:b9:02:df:75:99:db:47:a5:c1:4c:af:a3:cc:
         bd:b3:d2:aa:78:d2:c0:37:f7:74:f4:70:53:97:fd:e7:be:6a:
         1c:b1:bc:9d:a1:21:b4:15:43:f6:30:87:49:4c:0e:4f:2f:3c:
         25:c0:67:25:62:8a:8a:dd:05:81:86:d0:24:d8:2e:96:eb:e6:
         2d:47:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org