Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33342e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e33342e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          AvkAiUU7ffHw4FPuOFZX+ItqBvuyWUsVKhFWSg+Bda8=
Subject key identifier:   8A:EA:57:F9:FC:F6:12:2D:FF:DC:C2:1A:A1:A2:A9:AE:0C:E9:C4:1D
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       68D1209931315807B1DE21DED8896E0DA48C88B2
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33342e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:48 +0000
ROA not before:           Thu 14 Sep 2023 18:42:48 +0000
ROA not after:            Thu 12 Sep 2024 18:47:48 +0000
asID:                     28309
IP address blocks:        189.38.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:20:99:31:31:58:07:b1:de:21:de:d8:89:6e:0d:a4:8c:88:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:48 2023 GMT
            Not After : Sep 12 18:47:48 2024 GMT
        Subject: CN=8AEA57F9FCF6122DFFDCC21AA1A2A9AE0CE9C41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:2b:27:1d:32:db:72:e2:5f:92:89:c3:9c:
                    4c:ed:ad:c1:00:d4:98:97:da:f9:50:2d:b5:fa:a0:
                    80:94:85:34:39:5b:d6:7b:68:13:03:ec:a9:b1:f4:
                    96:48:70:b3:70:0d:cc:64:11:6b:53:95:52:d4:fb:
                    4b:10:9a:ed:ec:9f:a7:3b:95:62:74:e8:ff:1a:ff:
                    26:55:b3:96:0e:8a:77:ed:06:60:e1:2c:e3:c9:ee:
                    4b:a9:80:67:eb:29:16:55:35:3e:e7:d6:af:49:41:
                    7c:9f:82:8d:f8:27:9c:e6:ce:d4:90:20:7d:d4:7a:
                    22:ec:65:62:89:b0:fa:5c:34:bd:6b:ec:08:34:b9:
                    c9:d4:c0:ae:05:93:a6:ba:9c:92:04:f9:f7:b3:69:
                    bb:2b:0a:dc:b1:cf:65:ff:be:b9:3b:23:eb:d8:00:
                    af:0a:83:17:47:9e:a4:9f:ba:97:5f:77:dc:e7:7c:
                    01:7d:06:17:54:5d:6f:ae:62:ae:68:94:95:74:9e:
                    a4:6a:0c:39:92:5c:53:72:17:85:d1:a9:23:a9:d0:
                    1f:02:e2:6b:2a:25:e4:ad:aa:02:1a:76:1b:2a:87:
                    4d:89:2d:a7:0b:8c:05:e4:8f:18:41:cc:b5:43:34:
                    b5:3d:73:50:5c:86:50:e1:76:c2:58:04:5a:38:70:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EA:57:F9:FC:F6:12:2D:FF:DC:C2:1A:A1:A2:A9:AE:0C:E9:C4:1D
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33342e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:c9:34:32:5b:44:fb:9b:2d:f7:10:53:15:52:0f:d4:c5:
         7e:c7:4e:57:17:ad:17:1a:27:3f:dc:61:0d:67:31:52:b9:07:
         d1:4a:20:c3:02:b9:b2:63:91:6a:71:bd:7d:a1:be:a7:9c:dd:
         4a:fd:38:77:2e:0f:d9:06:71:90:30:6b:5b:7a:d5:12:18:44:
         e7:e0:c4:8f:08:72:be:5d:77:e9:10:a3:ee:ce:f0:15:b9:e0:
         71:1f:4f:3c:b1:b1:74:18:76:1a:ba:26:ae:17:88:64:85:0f:
         84:57:66:9b:58:4f:5f:f3:28:eb:03:ae:a9:fc:7d:81:92:29:
         84:ff:1c:f2:21:4c:18:ae:44:6f:bc:f9:fe:d3:f6:cf:3f:56:
         9b:d1:0a:5e:72:96:5b:07:01:95:14:91:22:68:cf:bf:33:66:
         b5:d6:3a:23:30:39:6f:c9:97:b3:80:32:80:71:9a:8a:9f:44:
         6d:68:0a:f6:c1:c3:9b:90:19:ae:85:83:77:3a:71:81:7b:a3:
         3e:79:bc:2e:9e:26:d4:36:5c:cc:85:3a:ea:a2:26:15:fe:e8:
         14:8a:9b:ab:76:32:e9:40:1d:36:cb:15:e6:6d:88:cc:ee:19:
         02:c3:11:9e:9f:75:b1:7e:39:da:f2:b5:66:5b:01:d8:71:74:
         6d:e6:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org