Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32322d3232203d3e203238333039.roa
File:                     3138392e33382e33322e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          /ZxO5DRJJBvcYMtgOA2nHiXJ/yO3Pq/R0mWZ0dEl0QE=
Subject key identifier:   32:B6:41:73:3B:35:0A:82:64:08:E7:03:52:20:2A:CE:DF:79:1B:59
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       73A52FA90A2FE5FA7AAF1B8D420CA3C6A36D10E6
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:44 +0000
ROA not before:           Thu 14 Sep 2023 18:42:44 +0000
ROA not after:            Thu 12 Sep 2024 18:47:44 +0000
asID:                     28309
IP address blocks:        189.38.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:2f:a9:0a:2f:e5:fa:7a:af:1b:8d:42:0c:a3:c6:a3:6d:10:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:44 2023 GMT
            Not After : Sep 12 18:47:44 2024 GMT
        Subject: CN=32B641733B350A826408E70352202ACEDF791B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:7a:de:13:14:5d:11:74:b4:35:53:2a:62:
                    41:7d:d9:0f:53:f7:40:32:30:9c:d9:84:cf:e2:89:
                    76:22:35:81:40:c4:a4:ba:2b:e3:b5:18:53:d8:42:
                    4a:da:eb:25:35:af:39:ab:0e:08:bc:0e:b9:90:13:
                    23:2c:3c:05:2d:34:31:0d:88:59:f0:21:04:f0:7d:
                    83:a5:c8:28:cc:9c:88:18:31:1b:82:a9:5e:12:b1:
                    d7:ca:39:c3:e6:8d:a9:61:99:40:cc:e5:40:42:4a:
                    b1:a5:3b:6d:ad:d8:6f:c5:17:62:d2:ef:4f:53:7a:
                    e3:9d:04:ee:49:b8:ff:5c:12:a1:94:0b:11:93:00:
                    cd:31:fb:24:91:25:a8:09:f8:d0:4c:e0:34:05:2a:
                    95:b6:82:df:83:b3:db:51:8f:49:06:45:e3:4f:34:
                    44:59:15:b6:6b:a1:f3:07:ad:03:50:88:83:64:06:
                    ba:44:c9:76:d2:c2:54:bf:bf:83:d5:a9:88:bc:19:
                    6d:e7:91:71:f0:bd:5e:2c:55:e8:86:34:8b:3a:eb:
                    cb:d2:0d:ba:38:41:06:e3:70:b5:ff:2f:fa:56:70:
                    43:b7:b0:b9:18:cc:c8:37:71:54:77:90:9d:a9:aa:
                    1f:7c:4a:e3:69:fd:63:9b:ed:76:f8:84:97:4d:c5:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:41:73:3B:35:0A:82:64:08:E7:03:52:20:2A:CE:DF:79:1B:59
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:d9:a0:9b:15:38:cc:de:eb:ec:11:13:d6:cc:86:02:0d:b7:
         13:03:6e:74:42:d2:b1:c9:0f:0e:77:ff:8c:b3:e1:b6:89:89:
         be:0e:62:a4:df:45:c0:f0:38:40:41:e5:d3:4d:92:0d:df:30:
         38:88:f2:25:b6:f9:bf:25:40:f0:dc:83:18:41:3e:df:6f:6a:
         ee:0f:44:2e:a2:20:d8:b7:02:d3:94:40:d8:d1:ac:81:44:8c:
         16:2e:62:75:ab:81:bd:b4:5a:37:f8:f2:33:71:72:12:72:e4:
         8d:9a:f7:cc:ef:55:5e:7c:45:f9:bd:5b:14:c7:43:29:87:20:
         95:1a:fa:96:09:61:00:b6:d9:bf:37:70:b3:d8:03:ee:89:e1:
         a0:46:19:17:57:62:de:1e:15:4b:40:3a:de:86:44:9d:b3:e8:
         a0:af:6b:7f:56:5a:1f:56:b0:2c:b8:b3:1c:53:bc:f9:36:59:
         51:cc:29:6a:32:35:6a:00:56:e0:4e:7f:66:e6:d3:20:f4:4a:
         6b:aa:29:0a:eb:cf:98:ad:fc:2a:1c:a6:57:88:d0:4e:ca:4a:
         88:4a:66:28:d8:04:58:0a:91:26:bf:ad:d5:3a:16:bd:1a:70:
         d4:3f:6b:45:a7:10:a5:01:a2:01:aa:f6:52:60:85:6a:e4:58:
         8b:33:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org