Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          3stYzBkNI+HEcZeD2WuahoC4+W3X3C8tALCFOtNM4m0=
Subject key identifier:   F1:F8:4F:CE:CA:6E:3A:B1:CE:82:F2:28:46:35:65:5F:36:79:EA:E0
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       54ABEA9975E673B84E0FA9C958C8DB795834E6A4
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:48 +0000
ROA not before:           Thu 14 Sep 2023 18:42:48 +0000
ROA not after:            Thu 12 Sep 2024 18:47:48 +0000
asID:                     28309
IP address blocks:        187.44.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ab:ea:99:75:e6:73:b8:4e:0f:a9:c9:58:c8:db:79:58:34:e6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:48 2023 GMT
            Not After : Sep 12 18:47:48 2024 GMT
        Subject: CN=F1F84FCECA6E3AB1CE82F2284635655F3679EAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:9d:62:f2:7f:ff:ff:2e:d2:dd:58:00:dd:
                    4d:8f:09:ad:4e:f6:57:f3:4d:27:b1:d3:21:87:c3:
                    34:01:ec:3c:c4:85:ab:d6:f3:ff:2b:49:14:26:b0:
                    b2:19:0d:b8:16:2e:b6:f0:e8:2a:4e:48:ed:7e:13:
                    99:22:27:13:ba:d8:2e:29:a1:39:94:46:ec:45:c3:
                    1c:f4:2d:10:d2:7b:bc:7c:c3:c0:28:12:cc:c3:d8:
                    99:3e:10:78:ea:e5:6b:4b:4e:6f:de:e4:dd:c1:e1:
                    b2:ff:f9:e5:8d:70:b3:68:43:ae:cc:6d:84:e1:51:
                    ee:a0:74:fd:72:f9:b7:bf:65:70:0f:e1:7f:ef:60:
                    84:ce:4e:e9:7f:8f:b4:39:94:70:9e:fa:b7:db:bb:
                    c9:0d:dc:4a:ff:28:23:a7:b1:6a:db:80:37:c5:1c:
                    95:19:95:ae:1f:8f:6d:24:b6:8a:d8:b8:57:d5:df:
                    ad:ad:8e:94:ec:d5:c4:86:2e:0c:3a:d8:94:34:6e:
                    55:b2:3c:7f:ec:6f:b0:c6:19:91:e2:9a:7e:4d:8e:
                    22:4d:6f:37:02:f4:f5:29:3c:10:9c:5a:34:e1:16:
                    50:66:61:b5:09:7b:a2:b5:38:f5:34:2d:42:46:54:
                    91:3d:9f:89:ae:36:e6:8d:0b:c0:6f:7d:a4:cb:6c:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:4F:CE:CA:6E:3A:B1:CE:82:F2:28:46:35:65:5F:36:79:EA:E0
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:a6:a1:a4:09:67:44:a3:8a:58:5d:69:df:74:76:52:b4:
         e3:17:b9:3c:9e:d5:d1:25:0d:ec:34:94:6e:ff:a8:2f:c8:62:
         5e:5b:76:88:d2:db:b3:73:33:0f:29:2d:19:ff:37:a3:5f:44:
         ba:cd:d4:fe:8f:29:7f:fb:98:ae:29:5c:49:ec:67:71:a3:80:
         4c:aa:7f:88:2a:73:98:75:d6:33:42:a9:d9:a4:4e:f1:5f:95:
         3e:37:77:aa:d0:48:1c:66:a5:34:66:ff:fe:9c:6c:87:8f:bd:
         29:93:6e:d7:49:e7:65:4b:b2:05:98:f2:4f:e6:06:64:79:93:
         47:60:53:3f:57:bb:45:ae:5f:f0:6f:48:6d:95:34:37:87:ca:
         8f:74:64:ae:f9:18:8d:38:81:41:b4:e1:f4:39:2c:7c:f1:12:
         68:e2:44:88:ec:c6:06:4d:7c:07:41:0c:7f:ec:ea:c3:b1:36:
         f0:a6:59:49:d5:a6:b5:db:8d:fa:78:15:91:a4:a5:0d:84:e8:
         05:f2:e2:bd:a4:80:7f:65:67:82:06:82:af:64:ab:7d:14:da:
         c7:fa:b1:c6:ed:40:de:36:39:fe:36:7a:0e:6e:23:83:41:3b:
         f5:ab:44:ab:25:c3:8c:0f:d4:18:0e:22:8e:cc:8c:60:83:1a:
         d9:cc:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org