Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37382e302f32332d3233203d3e203238333039.roa
File:                     3138372e34342e37382e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          656c0xdDLy8Pcnj/9gKiAPxKf59LHEkzwGfhs3HDHHQ=
Subject key identifier:   20:9F:F1:50:B9:AA:B1:F4:BB:43:A3:05:B6:A3:86:52:2A:3A:E2:12
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       266B575F83757E74FF5F4CE9C109475465A1B468
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37382e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:46 +0000
ROA not before:           Thu 14 Sep 2023 18:42:46 +0000
ROA not after:            Thu 12 Sep 2024 18:47:46 +0000
asID:                     28309
IP address blocks:        187.44.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6b:57:5f:83:75:7e:74:ff:5f:4c:e9:c1:09:47:54:65:a1:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:46 2023 GMT
            Not After : Sep 12 18:47:46 2024 GMT
        Subject: CN=209FF150B9AAB1F4BB43A305B6A386522A3AE212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:5f:83:f6:d1:60:e7:c7:9c:c1:cc:96:27:
                    00:25:47:c9:20:83:df:63:cd:40:70:0d:a0:4d:8f:
                    88:43:ad:4a:db:c1:ea:0c:09:c2:ad:d2:2c:fa:5d:
                    8b:16:e5:3e:44:7b:e8:a5:88:91:16:e0:92:af:da:
                    a4:8c:2b:f5:b3:9b:0d:e0:01:37:1c:cf:c2:78:0d:
                    0c:ae:5b:a0:95:1b:d9:7c:bb:52:81:5d:a4:74:bd:
                    5d:71:c5:44:03:1d:25:2c:4e:90:90:12:cd:a7:94:
                    04:d0:93:2e:04:30:5e:8f:27:31:08:50:0f:27:8e:
                    20:65:de:2e:aa:dc:13:b6:1b:fd:59:94:d0:a4:66:
                    41:83:5d:5f:7d:01:72:9b:33:87:68:e6:26:cb:8e:
                    45:84:65:98:d7:75:81:12:c6:d7:42:cb:17:4c:1f:
                    3d:cb:f0:fb:87:1b:3b:26:f1:97:41:4b:d6:c0:b8:
                    39:0d:88:b8:bd:bd:56:36:2b:e1:82:8e:68:fb:e4:
                    a1:5c:1a:76:16:31:98:03:40:3c:62:a2:56:e6:75:
                    71:06:4d:20:e5:1e:e3:dc:f8:62:8b:ae:a9:69:ab:
                    6f:d2:1f:82:82:bb:ab:ca:2a:95:83:fb:ef:09:f6:
                    46:7e:00:52:43:b0:d8:4d:13:16:6d:24:7e:90:32:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9F:F1:50:B9:AA:B1:F4:BB:43:A3:05:B6:A3:86:52:2A:3A:E2:12
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138372e34342e37382e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.44.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:28:13:44:c0:2e:23:7c:c0:38:a4:5e:7c:a7:64:23:14:c4:
         8c:0f:2d:60:33:6d:f2:86:ef:68:4a:32:c2:c0:59:97:7a:9e:
         54:c9:ca:3c:ab:bd:48:2f:5a:b4:68:bd:c1:a9:c0:51:ba:43:
         3e:3d:8f:9b:36:bc:7d:d2:da:86:08:ba:17:d1:07:a1:f7:2a:
         db:d8:30:20:93:29:14:1c:b3:44:3e:77:29:f8:d4:b6:30:d3:
         33:55:78:31:bb:4b:01:29:b4:8b:f3:0b:cc:dd:bb:a6:03:61:
         30:92:f3:e8:b1:03:fc:5b:ac:44:34:9b:b7:41:65:06:d3:ba:
         bb:4b:cb:36:c1:d4:58:1b:0e:cd:8b:b2:55:df:6c:62:a1:b3:
         ea:2a:e7:1a:17:41:cd:59:ae:c8:b2:d9:7e:2e:09:cf:f8:cd:
         8a:50:ab:c4:be:1a:5c:9a:dc:d2:11:c0:69:5c:33:ca:fb:6e:
         e0:79:79:61:bd:77:da:68:ef:a5:2f:ac:d6:46:90:18:ca:ac:
         cc:12:f9:d5:d1:2e:72:7f:b4:3b:8a:45:42:2d:ba:d7:e8:17:
         8b:cf:4b:7f:bb:8d:de:a9:c7:db:9b:da:c6:7d:81:61:99:d0:
         35:ba:c4:41:6e:bd:12:91:5a:b3:a2:28:cb:0d:48:64:cf:f9:
         54:43:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org