Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33342e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33342e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          Y7nHaAwQCpttksHRvCvrwmaKdregdpCx2KILtGQ9fHo=
Subject key identifier:   3B:3F:7E:C0:68:9C:24:F6:80:8C:D0:46:FA:5A:28:1A:01:B0:DC:84
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       01B002333BD4C57468C1881F6E45672BB59D0394
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33342e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        189.38.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:02:33:3b:d4:c5:74:68:c1:88:1f:6e:45:67:2b:b5:9d:03:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=3B3F7EC0689C24F6808CD046FA5A281A01B0DC84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:fa:65:e1:a3:32:a1:5f:29:cf:09:18:43:
                    76:01:24:23:df:4a:ba:63:a5:46:db:2a:2c:a3:cc:
                    35:51:dc:bd:18:d5:77:38:aa:26:ab:df:ab:6d:6c:
                    6b:4a:00:9d:1e:2b:bf:62:40:66:7c:90:0f:b9:7f:
                    4b:e1:18:7a:8a:98:57:80:cf:23:ac:96:86:dd:80:
                    db:22:da:e6:14:73:8c:6c:5e:ca:4c:30:54:f1:43:
                    32:57:77:db:2c:d6:61:a2:1f:0b:64:8e:22:42:d0:
                    1e:16:11:3d:ec:95:96:a3:c5:a6:f2:f1:0d:b3:44:
                    22:34:41:3f:af:1e:d5:90:4f:06:16:51:60:45:92:
                    25:c3:84:45:73:11:9d:4a:e8:e2:af:d5:bd:62:7b:
                    ac:99:9f:67:de:4e:51:30:18:ea:16:88:f6:14:ad:
                    ab:b5:aa:d4:b9:61:a7:54:f5:85:3d:5d:40:27:60:
                    a6:76:d4:2b:08:6b:0f:6d:1c:d7:bd:b4:8b:8e:f3:
                    d7:4a:96:48:0c:65:90:ea:b7:56:47:57:37:f0:b8:
                    eb:b7:76:47:4f:35:5b:79:95:ec:4c:f6:5c:89:c9:
                    d6:2b:24:9d:45:9d:2d:62:9c:42:bc:d6:c5:aa:bf:
                    31:46:15:a7:c8:07:7a:5f:28:e8:b1:02:66:50:a2:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:7E:C0:68:9C:24:F6:80:8C:D0:46:FA:5A:28:1A:01:B0:DC:84
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33342e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:73:33:02:c4:68:e6:d4:10:19:34:77:7c:08:77:3d:b1:
         77:2d:88:23:94:f1:7b:d0:be:21:f2:c8:ad:55:e4:24:93:ad:
         5a:25:59:83:ed:84:b2:e4:b8:5f:69:b5:55:21:37:3e:41:ac:
         38:62:b8:68:59:c7:ad:89:16:25:88:eb:10:fd:75:d0:e8:36:
         38:15:3c:45:0d:c1:0e:12:a2:5e:f9:85:f9:3f:ae:ab:3a:c2:
         33:d6:56:c9:dc:56:9b:ff:38:76:9a:cf:2e:4c:5e:64:de:d7:
         ff:88:72:e3:b3:01:21:d1:98:e1:8d:54:c1:90:18:3b:d0:7f:
         cc:09:aa:ce:6e:bb:5a:d0:10:6a:ea:56:72:cf:36:9a:20:cf:
         18:e5:16:20:2a:45:51:10:9c:5c:cb:ea:f0:73:58:84:4b:6f:
         f1:6e:82:96:85:93:b5:4e:16:fe:18:b5:71:25:e0:8f:af:de:
         e3:96:0c:9a:e5:4d:ae:49:c2:64:ff:d8:19:ae:79:06:e7:c5:
         47:65:02:2a:4c:23:31:cd:af:9d:eb:ad:ba:10:72:7f:20:ab:
         5c:14:e2:b9:07:96:4f:b1:5c:64:b0:2c:26:9c:92:38:0a:56:
         3f:4a:ac:ba:ef:3e:85:22:bc:d2:ad:f0:70:74:eb:c7:f4:c4:
         97:cb:8b:be
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAbACMzvUxXRowYgfbkVnK7WdA5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDNaFw0yNDA5MTIxODQ3NDNaMDMxMTAvBgNV
BAMTKDNCM0Y3RUMwNjg5QzI0RjY4MDhDRDA0NkZBNUEyODFBMDFCMERDODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDvpl4aMyoV8pzwkYQ3YBJCPf
SrpjpUbbKiyjzDVR3L0Y1Xc4qiar36ttbGtKAJ0eK79iQGZ8kA+5f0vhGHqKmFeA
zyOslobdgNsi2uYUc4xsXspMMFTxQzJXd9ss1mGiHwtkjiJC0B4WET3slZajxaby
8Q2zRCI0QT+vHtWQTwYWUWBFkiXDhEVzEZ1K6OKv1b1ie6yZn2feTlEwGOoWiPYU
rau1qtS5YadU9YU9XUAnYKZ21CsIaw9tHNe9tIuO89dKlkgMZZDqt1ZHVzfwuOu3
dkdPNVt5lexM9lyJydYrJJ1FnS1inEK81sWqvzFGFafIB3pfKOixAmZQog+3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOz9+wGicJPaAjNBG+looGgGw3IQwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM5MmUzMzM4MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0mIjANBgkqhkiG9w0BAQsFAAOCAQEAK9lzMwLEaObU
EBk0d3wIdz2xdy2II5Txe9C+IfLIrVXkJJOtWiVZg+2EsuS4X2m1VSE3PkGsOGK4
aFnHrYkWJYjrEP110Og2OBU8RQ3BDhKiXvmF+T+uqzrCM9ZWydxWm/84dprPLkxe
ZN7X/4hy47MBIdGY4Y1UwZAYO9B/zAmqzm67WtAQaupWcs82miDPGOUWICpFURCc
XMvq8HNYhEtv8W6CloWTtU4W/hi1cSXgj6/e45YMmuVNrknCZP/YGa55BufFR2UC
KkwjMc2vneutuhByfyCrXBTiuQeWT7FcZLAsJpySOApWP0qsuu8+hSK80q3wcHTr
x/TEl8uLvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org