Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37372e302f32342d3234203d3e203238333039.roa
File:                     3138372e34342e37372e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          BE7SPdPuYIkY9L0FNdSoSYaaVPtiSPV4vJ8FbJYqaXM=
Subject key identifier:   3C:45:35:26:BE:3F:83:35:59:2A:C7:2B:0D:0D:E1:B7:2D:FD:A8:65
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       7A9057DDAFD62507CD323642E1DEB3290C0AAFA8
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37372e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        187.44.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:90:57:dd:af:d6:25:07:cd:32:36:42:e1:de:b3:29:0c:0a:af:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=3C453526BE3F8335592AC72B0D0DE1B72DFDA865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:c0:39:bb:ba:c6:08:1c:dc:e8:5c:de:9b:
                    a6:3a:8d:30:68:78:33:c1:64:26:29:5f:d6:84:5e:
                    39:ec:f3:e7:3e:8b:91:32:b6:d3:4b:be:83:86:40:
                    2d:d9:3c:e0:f7:21:9d:53:68:28:62:20:6f:30:3e:
                    db:8d:81:61:a3:91:4e:ef:b0:7b:71:a5:db:1f:66:
                    b4:d6:cd:4e:69:dc:06:af:46:5a:83:5b:1a:46:90:
                    63:8c:96:bf:6a:6f:1c:cc:4e:f0:60:37:8e:a3:ec:
                    04:3e:09:ca:54:ab:2f:3d:b9:f1:d5:4c:79:21:37:
                    00:f9:79:ef:ee:70:bf:35:60:f0:f0:19:a8:e7:d0:
                    e4:ac:20:55:38:85:da:42:15:50:ad:70:11:ef:92:
                    82:ac:4d:e4:89:6d:a6:42:93:72:49:05:bc:af:c2:
                    5f:d0:27:20:96:7f:ff:f1:eb:64:db:26:ed:23:75:
                    fd:1b:cb:e0:a9:6f:ff:aa:1d:04:3b:6c:d9:de:dd:
                    3b:33:b3:d3:bf:db:23:80:3d:77:f7:15:66:65:b9:
                    fe:35:6b:c2:af:3a:c9:6e:cf:89:91:a7:70:cd:08:
                    74:38:63:d9:18:9b:fd:a7:64:71:7f:61:7f:0e:8f:
                    a0:3b:09:42:0c:8d:32:7c:c9:29:4f:7c:22:13:79:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:35:26:BE:3F:83:35:59:2A:C7:2B:0D:0D:E1:B7:2D:FD:A8:65
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37372e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:60:d9:6f:f5:a3:a0:2b:02:01:44:98:0b:4f:8a:b1:72:4e:
         47:f6:58:2d:10:9d:e4:33:22:76:e1:f8:9e:d2:f4:e3:b3:ae:
         98:b7:95:99:5f:2d:2a:59:63:05:f8:9b:83:ec:de:10:d1:bf:
         79:be:6b:09:35:08:23:8c:f4:4e:64:68:ce:1b:2c:f9:89:43:
         d2:12:0f:b6:80:67:ab:a5:40:fe:7f:7b:c2:7a:9b:bb:89:b1:
         38:ee:60:be:37:6a:4e:b1:d6:c2:9a:70:cc:d5:53:e5:c1:ba:
         c0:e7:05:f6:1c:c0:26:d4:97:6a:9d:d2:ad:86:d6:35:8a:78:
         9a:e6:ea:44:a4:01:e6:92:d9:e5:f9:f2:d7:bb:4a:b4:72:66:
         ac:93:bf:1b:16:28:2f:c8:f1:31:c3:14:79:1c:d6:2b:dc:14:
         35:12:9a:e4:c5:7a:ad:62:cd:6b:71:c5:50:4b:17:64:3d:00:
         07:83:9c:74:b8:b3:0f:37:30:c2:b9:f9:90:fa:e5:2b:9e:13:
         ce:37:a6:03:fb:bc:34:a3:f4:38:da:5b:62:79:09:7a:ff:e9:
         da:7c:7b:ee:b3:c4:91:c8:6e:2f:a8:a3:5e:4c:e1:06:ea:ad:
         b9:be:0f:6e:7a:72:d0:f7:d4:f8:50:d7:10:b8:72:32:d0:5c:
         fe:40:65:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org