Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33352e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33352e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          sZmhPjmBnzu8N8cCGlMvPp/JJtPQnX+gJBe3YnM8bOk=
Subject key identifier:   EE:15:87:A5:12:A2:4A:76:20:59:FA:70:AA:D2:09:FC:EA:E9:E8:60
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       587FBC0851AA500850CD75B6B17680A6C7B39775
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33352e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        189.38.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:bc:08:51:aa:50:08:50:cd:75:b6:b1:76:80:a6:c7:b3:97:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=EE1587A512A24A762059FA70AAD209FCEAE9E860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:ba:9c:4a:25:02:d4:64:7c:68:11:ec:c2:
                    55:b8:11:83:ae:74:ea:09:da:c9:c6:30:02:58:50:
                    b5:7c:71:4f:ff:f3:8a:0e:da:88:30:2f:41:2f:48:
                    4e:ef:a3:a0:74:64:fe:7d:85:4c:45:5a:b4:01:60:
                    92:ea:e6:64:a4:ce:51:6d:49:f4:c9:27:42:b6:f5:
                    1c:27:48:ca:de:6e:f6:59:3e:b7:fe:b9:40:14:43:
                    63:18:d1:87:f6:7d:e0:53:3d:f8:9a:99:59:5f:fe:
                    55:e7:3f:17:97:9f:45:e8:24:ff:75:5c:b7:a2:78:
                    e3:fd:9d:ab:de:5b:e2:9d:f4:67:71:e0:d0:2a:bd:
                    63:06:53:8e:2f:50:29:53:91:f5:67:93:97:af:d3:
                    49:4e:b3:e5:ba:55:8b:e9:9d:23:e3:56:c8:d9:ce:
                    29:cb:1b:04:62:a3:d0:3c:ef:b9:a0:68:b3:ce:b4:
                    6f:2d:61:08:6b:1f:eb:1f:91:18:83:87:31:2b:6f:
                    1c:29:21:f0:8f:9a:e6:6b:16:fd:f8:7b:35:7c:b5:
                    07:df:6d:4e:d5:2e:94:13:38:82:61:31:a3:7c:59:
                    5f:60:ba:cc:ab:07:4e:4b:0c:50:75:47:6a:25:e1:
                    77:16:75:3d:28:41:73:e4:d5:33:ee:9b:0b:c3:d5:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:15:87:A5:12:A2:4A:76:20:59:FA:70:AA:D2:09:FC:EA:E9:E8:60
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33352e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:00:fe:30:89:d4:8c:d3:48:c0:ec:49:27:cf:b1:a8:e1:dc:
         64:78:88:7e:ae:46:b4:d7:d5:f9:d0:5b:46:39:e8:bf:c5:05:
         fe:1b:ce:c3:e0:4d:74:ef:c9:41:ae:dc:ab:a1:7a:1d:42:5f:
         d2:41:7f:49:a5:8f:d1:48:ce:70:c3:e6:d3:50:28:4c:ae:bf:
         d6:08:71:31:ac:7f:47:0d:07:fb:4f:84:e2:6b:39:9e:02:15:
         87:7d:4b:97:98:ca:81:3c:aa:6d:5d:f9:b3:f1:c5:12:4f:64:
         d5:45:63:bf:dd:c7:23:63:cd:2b:84:a9:bc:40:b6:09:de:43:
         53:23:34:76:72:6b:70:55:03:b0:24:6a:c0:8e:cb:74:c0:55:
         0e:40:e3:8c:c0:54:9e:d0:11:73:73:44:ca:0a:6a:5f:51:30:
         5e:dc:31:bb:c3:d0:79:4c:f9:e7:83:ec:47:8d:90:78:92:e4:
         68:16:35:e3:e1:34:6a:57:04:7d:ee:ed:ab:1d:dc:a3:bc:2a:
         65:46:cc:5c:30:c2:a3:5b:44:26:ce:8e:c2:5c:70:13:09:11:
         f0:5c:5e:92:f7:79:9d:fa:bc:32:da:3d:bb:fe:06:0e:79:06:
         82:91:4e:7a:cc:00:cd:08:25:01:3b:be:fc:f2:84:a0:69:84:
         0b:de:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org