Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33322e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          T7yQLJLePraUQWba4MLxqwokf/Qy/ANYFxNXMm1RYKc=
Subject key identifier:   0B:D4:56:56:68:4A:B9:4F:16:56:BF:06:B7:EC:65:39:3B:89:82:5C
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       4272434B8837EB401DBFC33BBBC372118E798C76
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:45 +0000
ROA not before:           Thu 14 Sep 2023 18:42:45 +0000
ROA not after:            Thu 12 Sep 2024 18:47:45 +0000
asID:                     28309
IP address blocks:        189.38.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:72:43:4b:88:37:eb:40:1d:bf:c3:3b:bb:c3:72:11:8e:79:8c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:45 2023 GMT
            Not After : Sep 12 18:47:45 2024 GMT
        Subject: CN=0BD45656684AB94F1656BF06B7EC65393B89825C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:68:8b:91:2d:a8:60:e8:ce:76:35:88:35:
                    2c:11:ff:11:40:3f:48:de:d2:76:33:68:6c:ed:96:
                    f3:06:25:5b:6d:1f:e5:0f:e1:10:e7:ff:38:b9:cb:
                    cd:5b:d9:5d:1b:0b:e9:07:47:02:16:95:d4:20:1f:
                    40:76:4a:a6:2d:da:5a:b1:79:b8:1f:d7:00:3e:15:
                    1e:f6:21:ef:35:6e:58:2e:41:8f:2f:4a:bf:a4:3b:
                    ff:52:37:fd:0a:70:1c:c5:d3:30:87:40:1d:ee:db:
                    43:5e:41:d3:97:e5:8c:a2:02:05:70:59:9c:83:27:
                    ff:dd:f3:07:bf:2d:1f:65:10:91:da:91:8b:af:10:
                    e7:1c:ab:54:c2:5e:e9:a3:44:25:6a:1e:db:06:6c:
                    23:ad:3d:0a:8c:e9:1d:f5:62:f6:8f:20:1b:57:3c:
                    02:54:f9:aa:0c:65:64:ed:37:de:b6:39:d2:8b:42:
                    d8:a1:de:d2:39:1e:4b:5f:3d:7c:ae:e7:47:22:0a:
                    b8:13:f3:49:c2:0d:94:22:b0:a2:c4:48:0b:98:a9:
                    e0:14:c6:05:e8:28:b1:f8:61:2a:cf:cf:99:60:bb:
                    40:3e:55:67:6b:61:b1:66:5c:05:6d:32:77:5c:10:
                    68:13:11:d0:99:d9:dd:e1:e7:d1:8c:aa:1e:55:3f:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:56:56:68:4A:B9:4F:16:56:BF:06:B7:EC:65:39:3B:89:82:5C
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33322e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:e5:b3:f4:6c:f9:a0:29:20:f6:2e:81:c9:f2:d1:a7:63:
         cd:19:da:93:86:42:8c:10:12:ff:ed:dd:9c:58:5e:fa:20:0e:
         14:46:d2:f6:cb:bf:2e:c8:6c:6d:02:53:8e:72:bb:e1:40:66:
         2b:96:30:ae:b5:40:a1:59:f9:0d:9c:bf:b8:b5:a0:56:c7:85:
         ec:2e:1e:b2:01:64:b0:74:39:d0:cf:ee:bc:94:40:55:ba:a0:
         f4:2c:68:1d:6e:6a:c7:d8:44:dc:c7:85:a1:e4:fd:8b:92:41:
         ca:37:a9:5f:7e:fc:07:4b:a1:4d:ac:51:ab:c7:8f:22:6a:ee:
         ef:82:f2:0b:d9:4f:ce:21:a3:f8:ff:69:ff:ba:a0:65:a8:d3:
         37:14:d0:69:fe:2f:64:e9:f6:bf:78:64:7d:45:57:58:aa:fe:
         b5:82:a9:21:40:3c:bd:5e:ac:f2:71:de:f4:fc:85:43:5e:d2:
         55:d4:8e:72:03:6a:6b:41:8e:21:3c:46:c9:5c:14:dc:ec:a9:
         9a:03:63:08:01:c3:d6:c5:39:7c:31:d5:b0:42:73:c7:28:60:
         7b:f3:97:82:a4:0a:ff:b5:28:f7:32:42:fa:bd:a7:53:d6:96:
         e1:2e:f7:a2:e6:e8:e1:b8:b4:7c:b0:16:08:fd:8a:32:42:73:
         35:b9:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org