Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3136382e3232382e39382e302f32332d3233203d3e203238333039.roa
File:                     3136382e3232382e39382e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          sG5Hs3CEs8BIqzVJnq2jXUV4ONIyhhhsWURGtjhqg0U=
Subject key identifier:   83:B2:2D:87:D5:A9:F1:3A:1E:58:DF:80:E4:16:30:4D:2F:5F:38:2D
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       1FE441FA5CFD062EC599CBDC4947E1A115817742
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3136382e3232382e39382e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        168.228.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e4:41:fa:5c:fd:06:2e:c5:99:cb:dc:49:47:e1:a1:15:81:77:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=83B22D87D5A9F13A1E58DF80E416304D2F5F382D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bd:1a:76:11:ce:63:3a:f8:80:8b:42:62:7d:
                    53:fb:70:c3:cd:6a:f2:e6:35:39:17:cb:ed:a1:03:
                    67:78:ec:30:57:9d:81:5b:ff:09:57:fb:cf:de:75:
                    12:7d:34:7d:da:61:86:cd:eb:52:28:1f:56:6d:d3:
                    86:d5:17:c0:64:8f:05:66:10:0e:ec:ab:eb:f6:b5:
                    71:b7:b9:d1:20:9e:93:66:ba:ac:61:54:6c:a9:ec:
                    92:df:cf:9a:d0:eb:df:82:8f:6a:d4:08:76:b8:f1:
                    bf:99:52:9a:46:cb:c9:a5:c9:86:3b:93:93:ad:46:
                    0f:54:41:67:c4:dd:15:e2:8c:eb:61:42:e9:15:94:
                    64:e2:11:e3:2e:78:db:98:7f:6d:27:1f:55:9b:04:
                    d8:d7:5c:84:8f:5b:fc:dc:74:62:1c:ea:40:1b:7d:
                    9e:6a:04:38:d5:10:62:cf:51:e3:fe:0a:9a:61:fb:
                    f3:d1:45:8d:30:e5:8a:d1:f4:37:c7:11:f4:4b:27:
                    9e:9e:d7:41:89:f5:81:cf:2b:cf:f1:50:10:d6:6d:
                    ef:40:06:a2:56:53:e6:c7:d0:01:68:14:4c:cd:97:
                    fb:c1:95:47:d1:7f:e4:8c:6b:84:4f:ed:37:0d:a7:
                    a7:81:6e:a8:a3:f8:69:1e:4b:d9:43:9e:6d:12:15:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B2:2D:87:D5:A9:F1:3A:1E:58:DF:80:E4:16:30:4D:2F:5F:38:2D
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3136382e3232382e39382e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:8b:d6:1f:7e:c7:fc:0d:bb:2e:16:73:4c:07:c0:09:88:
         12:93:b8:11:f5:d1:91:fb:e0:88:d2:ce:9c:c9:fe:5f:17:ea:
         ca:e2:f2:a9:91:d1:3d:bd:02:7e:cf:3f:2d:4a:aa:0c:a8:bd:
         23:75:dc:61:87:76:67:4c:39:ee:f0:2f:e5:c7:ab:ca:d8:a6:
         1a:a1:0c:0b:f1:09:fb:0a:bc:f4:24:d7:a3:7e:df:c0:0f:c2:
         d8:63:92:2e:aa:d5:00:99:04:02:f4:2c:e5:e2:31:f5:4a:e6:
         43:db:a3:02:4e:4e:b4:34:8e:e5:51:a5:15:5f:7c:0a:40:ab:
         37:63:77:53:0a:76:2c:5a:e7:d3:ef:0f:b3:95:9f:6c:cf:fe:
         cc:f2:02:f4:16:2c:bd:3c:fa:22:71:b0:42:0c:24:ae:84:e7:
         a7:75:16:70:6e:80:b7:5e:08:83:99:b2:14:d2:f6:60:ae:12:
         e6:a1:27:84:63:c2:bb:b9:82:01:dc:5d:05:2e:de:37:20:20:
         36:0e:e1:c8:32:a4:16:64:71:c8:5b:c6:63:cc:28:93:3a:6c:
         90:5d:25:ba:e2:64:3c:1e:1f:5f:f6:54:90:e1:8c:cd:4a:48:
         f3:42:e7:f2:a6:f4:0a:3c:c9:91:fa:bd:dc:13:a4:cf:ae:fe:
         fa:ea:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org