Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e33322e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          s6k9pRrsK9ztytiDd7HRef7hs8KjnkpxZchowRKhQcA=
Subject key identifier:   FC:7E:52:7F:AC:95:53:0B:3F:E2:4C:B2:54:CE:7C:12:04:3A:E8:AB
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       57BCF8AAD2B8626C1BCCB22F4A155526223C0CBF
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        189.38.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bc:f8:aa:d2:b8:62:6c:1b:cc:b2:2f:4a:15:55:26:22:3c:0c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=FC7E527FAC95530B3FE24CB254CE7C12043AE8AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:50:30:99:c4:c2:c7:87:02:c8:6a:97:71:
                    81:2e:d8:d7:cc:2e:81:e7:55:9d:fd:cc:86:20:64:
                    94:c9:94:62:85:8c:aa:a2:df:4e:87:38:11:d1:a2:
                    85:0f:02:59:d9:dc:d4:b0:bc:54:ac:55:4d:53:be:
                    bb:db:64:fe:1c:18:d2:74:53:1a:1d:35:bb:2e:c9:
                    db:4d:59:9a:3b:bf:d2:ff:4a:4f:6e:94:c3:db:54:
                    7a:e0:cd:04:be:11:a1:ce:46:2c:65:6b:05:06:33:
                    15:00:b8:f6:de:f0:7b:f7:44:21:f1:a4:b7:50:1e:
                    57:e5:d1:a2:94:06:36:b1:c3:13:bf:85:6d:9c:e5:
                    d8:53:a9:ad:28:b8:52:98:09:82:6f:c2:0c:04:96:
                    2b:d6:14:42:89:64:88:2d:bd:b7:43:8a:b9:ac:92:
                    41:fc:99:5c:d3:81:9d:b1:4d:a4:41:38:55:94:3e:
                    b1:e5:4c:6f:61:db:c7:80:15:6c:6f:d9:20:3e:b2:
                    d9:6f:a0:df:1a:5f:58:0a:bf:6c:09:a0:24:fc:11:
                    ec:03:5a:47:a5:12:d8:f7:28:42:a8:52:43:a9:de:
                    50:cb:bf:2a:75:28:c9:e6:15:20:4c:61:57:a5:aa:
                    5a:f0:07:a0:83:3e:88:9b:aa:9d:e1:d2:71:50:fb:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:52:7F:AC:95:53:0B:3F:E2:4C:B2:54:CE:7C:12:04:3A:E8:AB
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:36:c0:ef:82:f0:5b:4b:af:47:c7:e3:36:19:55:58:c4:
         40:dd:8b:67:64:2b:6b:a8:86:7f:e1:55:5f:14:61:42:34:ac:
         0c:32:0d:37:78:b8:a2:8e:0e:e4:99:81:bb:a8:65:d2:c2:6b:
         a7:29:8e:ea:0f:85:7a:07:5b:8f:ec:47:4a:1c:fc:78:46:d8:
         11:49:60:e1:6a:87:80:41:1a:d0:69:d5:49:82:c6:8f:70:99:
         d1:41:d9:b3:00:38:89:e7:36:ca:b7:76:d6:2b:10:0a:09:e5:
         0c:87:d8:26:63:1b:f2:1f:45:38:4d:11:9d:36:7e:46:4f:df:
         91:99:35:69:cb:c9:bc:86:dd:1f:dc:ba:69:84:f2:a1:81:d6:
         2d:b5:55:3c:b1:83:01:af:7c:1d:5f:97:21:0b:b4:a0:86:f4:
         78:18:1b:f9:0c:a7:cd:0e:b2:f1:70:cf:58:85:12:9e:20:ec:
         1e:48:ac:89:29:2a:69:ad:4c:78:28:42:c8:4b:34:21:8f:0f:
         9a:c3:11:35:e7:72:8e:fc:c1:74:74:eb:f4:6f:a8:6b:c6:ad:
         05:35:ec:21:29:16:23:dc:ec:a0:07:64:b3:f2:95:f2:c9:51:
         fd:29:0c:77:56:86:2f:82:af:9d:d6:62:9f:5b:fc:fc:30:ed:
         fb:c7:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org