Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32322d3232203d3e203238333039.roa
File:                     3138392e33382e33362e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          k6OL4vwghq8wFmrnENAaks5pthl7HTZ91rE5URY3jbA=
Subject key identifier:   3F:F6:E8:76:CC:81:3D:E1:E4:9F:04:8C:29:4B:E6:BD:04:CB:86:04
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       0FFF7A50A2F1761EE71D1B30E69799070FCCAEFC
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        189.38.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ff:7a:50:a2:f1:76:1e:e7:1d:1b:30:e6:97:99:07:0f:cc:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=3FF6E876CC813DE1E49F048C294BE6BD04CB8604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:5e:b3:c4:d3:f1:1b:a5:45:2e:19:91:a5:
                    fc:34:64:f4:6d:3a:25:92:bd:dd:1e:c3:90:be:94:
                    b6:bf:aa:a6:95:df:47:f9:fb:a3:55:ab:b2:5f:88:
                    77:3c:9a:2a:c6:16:ab:18:8b:c3:26:d6:7a:b9:a0:
                    c0:c6:cf:e5:6b:b5:16:67:03:c5:84:42:0f:2c:ab:
                    58:16:c7:38:ec:70:ed:99:91:d2:75:eb:46:a8:25:
                    83:d2:af:20:38:37:08:89:57:bb:17:ee:7d:41:c3:
                    cb:78:af:69:f7:96:bf:3d:2b:e7:8e:c4:e8:48:68:
                    ab:e6:43:2a:d7:a7:17:2a:67:1b:4b:52:27:77:02:
                    97:a6:d6:56:22:a6:21:65:2a:bd:2a:03:5e:61:02:
                    04:ec:fd:63:a1:4d:8d:8c:30:3c:f5:d8:da:cc:7a:
                    ef:67:11:d0:8c:4d:1d:d1:eb:e4:fb:77:9d:3a:64:
                    df:d6:53:50:53:3d:49:98:d7:cf:c8:71:41:36:7e:
                    3a:99:ec:54:cf:b9:25:1c:67:a4:61:fc:35:c2:f5:
                    c7:83:4c:dd:16:45:62:d5:91:f4:c8:00:8e:23:4b:
                    c2:1e:d9:9d:ae:2b:9a:5e:25:3d:96:4e:a1:82:b0:
                    7b:3c:ee:2f:49:2a:66:8e:06:27:00:f6:fc:05:a7:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:E8:76:CC:81:3D:E1:E4:9F:04:8C:29:4B:E6:BD:04:CB:86:04
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:26:25:04:ff:34:7e:32:5c:9f:28:74:21:f0:2c:78:c6:10:
         f0:f1:5d:e6:6e:8d:d8:1a:21:e9:ab:b6:8c:59:7a:f1:b3:b5:
         b9:c6:f8:17:f0:9c:7c:b7:eb:84:1a:d2:1f:30:62:a5:42:87:
         b3:fd:4b:50:73:33:b5:d4:1c:7e:40:b6:a7:b5:0e:8c:32:ef:
         57:b2:65:ee:d6:27:db:9f:04:04:d3:df:1e:9e:54:6b:4c:71:
         05:4b:54:7a:f3:09:df:10:af:b9:79:b1:63:9a:4b:a5:99:96:
         f2:8b:ca:bd:cf:c8:bc:22:3e:cc:16:de:70:ca:5e:53:b3:85:
         58:90:99:75:96:dc:bd:f5:3d:57:26:de:9f:96:1e:4b:da:c4:
         1d:e1:1e:ad:3e:9f:17:ad:0d:b4:61:2e:66:fe:54:e8:b2:81:
         de:26:f8:1e:9c:78:4f:7f:3f:d5:3d:39:3e:eb:58:b9:7f:42:
         63:05:d7:fb:b1:07:44:94:f6:6f:35:fb:63:43:88:48:42:04:
         0f:4c:ec:55:29:7a:6b:42:e4:03:3c:9e:cf:6e:2a:7c:e0:06:
         12:8a:d0:8e:64:80:f4:a9:f0:d7:aa:2b:8b:e3:78:53:35:f8:
         3e:f9:0f:cc:e4:c7:c1:86:aa:c0:b6:c0:4f:86:fc:ba:ba:fe:
         92:54:23:9f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUD/96UKLxdh7nHRsw5peZBw/MrvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDlaFw0yNDA5MTIxODQ3NDlaMDMxMTAvBgNV
BAMTKDNGRjZFODc2Q0M4MTNERTFFNDlGMDQ4QzI5NEJFNkJEMDRDQjg2MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhyF6zxNPxG6VFLhmRpfw0ZPRt
OiWSvd0ew5C+lLa/qqaV30f5+6NVq7JfiHc8mirGFqsYi8Mm1nq5oMDGz+VrtRZn
A8WEQg8sq1gWxzjscO2ZkdJ160aoJYPSryA4NwiJV7sX7n1Bw8t4r2n3lr89K+eO
xOhIaKvmQyrXpxcqZxtLUid3Apem1lYipiFlKr0qA15hAgTs/WOhTY2MMDz12NrM
eu9nEdCMTR3R6+T7d506ZN/WU1BTPUmY18/IcUE2fjqZ7FTPuSUcZ6Rh/DXC9ceD
TN0WRWLVkfTIAI4jS8Ie2Z2uK5peJT2WTqGCsHs87i9JKmaOBicA9vwFpymvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUP/bodsyBPeHknwSMKUvmvQTLhgQwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM5MmUzMzM4MmUzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAr0mJDANBgkqhkiG9w0BAQsFAAOCAQEACCYlBP80fjJc
nyh0IfAseMYQ8PFd5m6N2Boh6au2jFl68bO1ucb4F/CcfLfrhBrSHzBipUKHs/1L
UHMztdQcfkC2p7UOjDLvV7Jl7tYn258EBNPfHp5Ua0xxBUtUevMJ3xCvuXmxY5pL
pZmW8ovKvc/IvCI+zBbecMpeU7OFWJCZdZbcvfU9Vyben5YeS9rEHeEerT6fF60N
tGEuZv5U6LKB3ib4Hpx4T38/1T05PutYuX9CYwXX+7EHRJT2bzX7Y0OISEIED0zs
VSl6a0LkAzyez24qfOAGEorQjmSA9Knw16ori+N4UzX4PvkPzOTHwYaqwLbAT4b8
urr+klQjnw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org