Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e37362e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          fnVFVIsV1HJphX5DkXJey2n1Ox82/Q9JPawYq7SJa7E=
Subject key identifier:   0C:6E:B2:C0:81:3D:14:EB:74:9C:3C:ED:AE:4C:CF:47:21:10:B2:AB
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       3101F557E27D60A83AF1C6E43A148EE36D0F037F
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:44 +0000
ROA not before:           Thu 14 Sep 2023 18:42:44 +0000
ROA not after:            Thu 12 Sep 2024 18:47:44 +0000
asID:                     28309
IP address blocks:        187.44.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:f5:57:e2:7d:60:a8:3a:f1:c6:e4:3a:14:8e:e3:6d:0f:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:44 2023 GMT
            Not After : Sep 12 18:47:44 2024 GMT
        Subject: CN=0C6EB2C0813D14EB749C3CEDAE4CCF472110B2AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:e1:f7:da:b6:88:67:72:b7:66:98:81:25:
                    2e:3c:0d:bf:9d:c3:59:7c:61:00:2e:7d:5e:6c:62:
                    fe:2d:07:cc:b9:9a:43:ff:e3:ab:07:7d:30:76:e3:
                    f9:6c:33:d8:eb:11:59:0a:6a:63:d3:eb:d7:59:41:
                    cc:6d:51:b7:be:7a:c8:75:c9:40:c5:e1:70:fb:92:
                    4c:de:39:a7:88:ba:9a:d3:65:e8:06:da:f4:1f:2b:
                    43:6f:69:c3:67:c4:bc:57:ee:4c:fa:83:7f:66:42:
                    9c:3b:4f:78:a4:e2:b9:40:a5:4c:b9:af:2f:3e:d0:
                    fc:2a:61:47:85:09:fd:19:cd:11:90:0f:57:d5:b2:
                    15:18:79:f2:f3:62:bd:73:fe:de:07:62:7d:36:05:
                    ba:84:73:95:2f:33:4e:11:65:6c:d9:ca:d5:a4:0f:
                    fa:3e:7a:8a:cf:f7:9d:21:a2:9d:b8:9a:91:49:ff:
                    38:8e:fb:29:9b:5a:cd:3c:ed:f6:0e:78:90:b4:6e:
                    69:21:b3:ee:cf:0d:25:4e:2e:cb:62:53:7d:ff:11:
                    7e:db:3a:77:12:9c:e6:d4:dc:ca:50:da:b0:b3:27:
                    b5:cf:7b:bf:73:cb:f9:cc:02:12:64:09:9e:ce:f8:
                    a3:3f:19:00:1e:29:7c:4d:46:ea:08:00:13:e3:58:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6E:B2:C0:81:3D:14:EB:74:9C:3C:ED:AE:4C:CF:47:21:10:B2:AB
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37362e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:ff:6e:4c:43:23:56:9a:5e:c9:22:fc:6b:db:9c:a6:ae:
         e9:18:28:02:80:73:89:d0:8b:bc:10:91:f1:1f:1f:67:3d:f1:
         ae:e1:c7:c9:05:80:52:88:d7:be:0d:35:71:98:9c:59:5d:4d:
         b8:05:ed:5e:d5:00:a8:f2:c0:10:04:5e:bf:6b:86:65:f6:cc:
         26:26:3f:25:1d:cd:9c:b7:e0:2a:17:05:1c:f7:a1:ca:1e:89:
         03:eb:27:1a:6e:63:75:8f:7d:dc:00:b9:a0:20:63:24:a6:bd:
         38:1d:5e:56:41:06:95:58:6f:8f:5a:29:5f:c1:c9:c8:36:2c:
         87:bf:89:e7:fa:35:e0:b2:ae:ce:cf:60:b9:61:8a:52:0c:fe:
         f2:1f:bc:40:2e:53:0b:06:90:b4:d7:4e:79:74:46:3b:19:8e:
         81:17:97:d3:88:b7:fa:4c:4c:25:cb:78:18:bb:d7:6e:ca:27:
         81:3e:34:d5:16:f4:9d:aa:ac:3d:25:12:ae:3c:8f:cd:dd:15:
         5a:20:7e:6e:2c:3d:68:6d:4f:f3:3c:c3:47:a3:c7:5e:0a:03:
         b2:49:21:0e:ff:93:54:94:16:a1:91:b0:4a:90:40:7f:d7:47:
         0f:9e:2e:27:3c:ba:07:c3:bb:d0:f3:83:37:23:bb:f1:d3:87:
         b6:18:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org