Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32322d3232203d3e203238333039.roa
File:                     3138372e34342e37362e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          kBBh8lMTsZtBKXmfVFfxEgh9+WUqq9/MYIXgc9xprhQ=
Subject key identifier:   43:85:5A:1B:84:C6:4B:DD:42:9E:A1:A9:CE:5D:6A:97:D0:5D:35:6A
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       52B88C582F64D337DD15EB57CD4B7E13C9037078
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        187.44.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b8:8c:58:2f:64:d3:37:dd:15:eb:57:cd:4b:7e:13:c9:03:70:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=43855A1B84C64BDD429EA1A9CE5D6A97D05D356A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:44:4f:03:f2:f5:38:06:90:c2:37:71:02:
                    d8:4d:97:1c:ed:e2:ee:01:a8:25:9e:ae:e1:aa:ba:
                    f1:5e:48:de:7c:53:66:d7:81:b6:bc:20:f4:b0:1c:
                    bd:62:0d:b8:67:72:52:79:2a:4a:23:70:2d:37:53:
                    13:da:f3:43:e7:31:cd:0a:e8:c1:79:a9:f0:16:0d:
                    a1:a7:a1:4b:71:0a:b9:a3:45:2a:b3:2d:6b:cc:d3:
                    d6:64:ba:25:25:6b:a6:a5:db:6d:4d:2c:83:f5:50:
                    b4:15:1c:29:12:f6:1d:fa:a7:3b:40:f0:4c:02:e9:
                    9d:95:26:43:1a:41:b9:e2:ec:b3:3e:36:5d:2b:6a:
                    60:18:40:e6:f1:a6:8f:ae:42:e2:e3:65:75:01:05:
                    76:91:51:c4:b3:34:43:e8:e6:9a:3a:c9:a1:ed:30:
                    f5:44:d9:1a:87:d3:71:78:48:7d:99:f3:54:89:a4:
                    fc:77:07:ef:cd:9c:31:35:dc:01:0e:eb:31:b8:f1:
                    88:cd:38:72:6e:58:75:c5:55:07:0e:40:6d:6f:a3:
                    72:6a:b0:33:d9:43:7f:d5:94:06:bd:7a:50:e6:b5:
                    cd:ab:a1:31:af:d6:01:8a:a1:10:13:e7:54:fc:f0:
                    fd:ad:b6:2f:8e:b9:9d:da:fe:93:32:c5:77:56:51:
                    01:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:85:5A:1B:84:C6:4B:DD:42:9E:A1:A9:CE:5D:6A:97:D0:5D:35:6A
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:34:9a:2c:ca:a1:1d:b2:53:6c:0c:3d:05:b9:b6:03:8e:
         71:f4:91:fb:95:e7:c8:ae:45:d9:c4:3c:1f:41:29:0d:1a:e5:
         c8:33:c4:1a:67:5e:9c:69:4e:07:ab:62:d0:c4:a1:e5:f7:9f:
         45:48:20:a6:04:5a:3f:31:49:4a:41:e0:52:98:b9:17:f2:7f:
         20:a5:59:a9:1d:13:9e:c6:77:78:6e:50:2c:80:ae:0a:37:be:
         b8:c5:24:d7:27:91:16:83:cf:0b:f0:a7:47:8c:ab:ac:e4:61:
         c5:94:54:11:ae:be:2e:1a:d3:90:dd:da:ca:6d:cb:ce:59:22:
         77:2c:8c:c6:64:da:07:02:d8:e1:da:2e:ab:0c:4f:90:cf:8c:
         0c:86:d2:19:ac:22:fa:35:23:3e:ab:d5:26:18:11:c9:77:c6:
         f7:e6:db:59:22:4a:c6:c0:0e:48:a0:87:c8:02:1c:3f:44:66:
         e6:b3:6e:47:a3:a9:46:9d:89:e6:1e:86:7b:26:f4:9a:dd:ae:
         a8:83:43:b5:30:83:32:55:73:85:65:59:a4:3b:eb:73:a7:7e:
         a6:6b:b7:1b:f3:c6:80:d0:1a:25:3e:e5:78:a9:4f:55:f1:fe:
         2a:a1:a7:d2:15:51:f5:f9:c8:a3:83:a6:77:6d:6f:8a:92:d5:
         09:97:b8:1a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUriMWC9k0zfdFetXzUt+E8kDcHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDdaFw0yNDA5MTIxODQ3NDdaMDMxMTAvBgNV
BAMTKDQzODU1QTFCODRDNjRCREQ0MjlFQTFBOUNFNUQ2QTk3RDA1RDM1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4L0RPA/L1OAaQwjdxAthNlxzt
4u4BqCWeruGquvFeSN58U2bXgba8IPSwHL1iDbhnclJ5KkojcC03UxPa80PnMc0K
6MF5qfAWDaGnoUtxCrmjRSqzLWvM09ZkuiUla6al221NLIP1ULQVHCkS9h36pztA
8EwC6Z2VJkMaQbni7LM+Nl0ramAYQObxpo+uQuLjZXUBBXaRUcSzNEPo5po6yaHt
MPVE2RqH03F4SH2Z81SJpPx3B+/NnDE13AEO6zG48YjNOHJuWHXFVQcOQG1vo3Jq
sDPZQ3/VlAa9elDmtc2roTGv1gGKoRAT51T88P2tti+OuZ3a/pMyxXdWUQF9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQ4VaG4TGS91CnqGpzl1ql9BdNWowHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM3MmUzNDM0MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArssTDANBgkqhkiG9w0BAQsFAAOCAQEAhsc0mizKoR2y
U2wMPQW5tgOOcfSR+5XnyK5F2cQ8H0EpDRrlyDPEGmdenGlOB6ti0MSh5fefRUgg
pgRaPzFJSkHgUpi5F/J/IKVZqR0TnsZ3eG5QLICuCje+uMUk1yeRFoPPC/CnR4yr
rORhxZRUEa6+LhrTkN3aym3LzlkidyyMxmTaBwLY4douqwxPkM+MDIbSGawi+jUj
PqvVJhgRyXfG9+bbWSJKxsAOSKCHyAIcP0Rm5rNuR6OpRp2J5h6Geyb0mt2uqIND
tTCDMlVzhWVZpDvrc6d+pmu3G/PGgNAaJT7leKlPVfH+KqGn0hVR9fnIo4Omd21v
ipLVCZe4Gg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org