Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e33362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          rdgoIquy1qCf14aIk2Jzwsn7+wXhp0If6fIoh4s7KeA=
Subject key identifier:   BF:CB:08:2E:44:A7:51:ED:8C:09:E5:F4:FD:F3:A5:95:F5:AB:C2:C8
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       649C9BC1A05D786504181C2B5B878B3F200A5F92
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:44 +0000
ROA not before:           Thu 14 Sep 2023 18:42:44 +0000
ROA not after:            Thu 12 Sep 2024 18:47:44 +0000
asID:                     28309
IP address blocks:        189.38.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9c:9b:c1:a0:5d:78:65:04:18:1c:2b:5b:87:8b:3f:20:0a:5f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:44 2023 GMT
            Not After : Sep 12 18:47:44 2024 GMT
        Subject: CN=BFCB082E44A751ED8C09E5F4FDF3A595F5ABC2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:df:d6:08:0d:2c:a7:99:c9:57:a9:70:c6:
                    64:9e:a6:32:aa:fb:96:8b:10:b6:68:79:9d:50:39:
                    9e:cc:c3:cd:d2:89:e6:1f:1e:2f:72:d2:99:01:b7:
                    22:44:c8:f6:ee:54:f1:1e:70:3a:5b:a3:f8:4f:e2:
                    72:7b:68:09:65:00:e5:6f:75:b6:90:67:28:1e:f3:
                    d7:f3:42:c8:48:d6:0a:74:52:27:b8:92:42:94:fd:
                    3a:7d:59:d7:4d:d1:fc:d3:36:53:0f:0c:a4:13:fd:
                    ef:8f:5c:86:aa:dd:f0:2c:14:54:00:12:a8:0f:03:
                    23:5f:7b:96:fc:a3:bd:0a:6c:61:99:a8:e9:d7:a1:
                    2c:23:dc:00:33:12:30:8c:fc:dc:48:5f:92:0f:40:
                    ea:c4:c1:99:09:3e:5c:d7:03:4c:f5:75:83:bb:c0:
                    eb:6b:d5:9b:c9:3b:2e:e4:ce:39:e2:f9:f7:16:4c:
                    45:c2:a1:63:cf:1b:d1:50:58:f1:7e:43:6b:95:4e:
                    42:8d:b8:05:86:d8:3a:43:b1:bd:7b:8a:76:bf:42:
                    f9:4a:5a:98:d1:a9:ab:51:38:c3:12:4d:e7:02:76:
                    7d:7c:2f:62:c6:31:60:76:3f:fd:9e:d0:88:0e:8e:
                    54:21:fa:e8:88:0f:20:4e:20:90:58:2a:a8:85:a3:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CB:08:2E:44:A7:51:ED:8C:09:E5:F4:FD:F3:A5:95:F5:AB:C2:C8
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:01:9d:71:78:23:71:a4:c1:7e:b1:c2:e4:0d:d5:24:68:e5:
         fc:ee:4d:83:15:83:34:93:94:b7:c7:e4:73:8f:79:66:39:64:
         35:eb:17:50:88:aa:7b:d3:97:1d:25:18:b2:6a:dd:41:8b:89:
         59:2a:84:44:11:89:b0:5a:1b:91:b6:66:17:6c:65:ec:4e:ab:
         b2:19:8e:47:ed:9b:6d:28:de:35:a7:87:39:bf:fd:47:20:03:
         98:70:2b:41:ca:c9:17:5f:05:4b:de:34:af:52:67:04:74:b9:
         93:33:f1:4b:21:15:76:4d:7d:a6:3e:e2:06:b9:4d:20:fd:fc:
         24:d5:25:c4:26:8f:46:b0:ec:d2:c9:f3:dd:41:21:6b:cd:de:
         90:6a:a5:5e:6c:57:86:7a:1a:a5:9f:e3:2a:12:35:ff:44:25:
         d7:9e:45:74:0a:5c:51:24:4c:75:f5:fd:14:f4:4b:43:d5:e3:
         45:0b:7a:d0:7a:21:e8:8c:4a:c2:7d:0f:c5:6a:73:e6:fa:b5:
         cc:3a:fc:11:a2:e0:fa:88:43:eb:d7:00:55:ba:47:92:d1:c4:
         29:d0:11:17:8c:1c:f9:10:5c:fb:55:70:4f:6a:85:9c:20:65:
         76:d9:58:0f:39:2c:cd:ed:7b:55:d3:f8:df:16:2c:89:94:41:
         00:16:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org