Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33362e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          9lfsKemXSl23HAHJCOT9x+F0/2LxFCsSlh6TT5VcwDk=
Subject key identifier:   B9:79:64:05:07:E6:53:90:D3:99:8B:5A:40:97:3F:18:0E:97:73:EF
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       0D3B2C9C707E341278BB96AA04A065329E517F2B
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        189.38.36.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3b:2c:9c:70:7e:34:12:78:bb:96:aa:04:a0:65:32:9e:51:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=B979640507E65390D3998B5A40973F180E9773EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:e4:18:14:72:52:82:0c:5e:80:b3:3f:ec:
                    0c:32:b5:fe:25:8d:48:67:5e:3e:b4:37:26:7b:cd:
                    d1:a1:a7:a5:d5:02:50:54:15:ea:4c:13:57:f0:94:
                    84:47:1f:08:d1:3c:3f:6b:e3:92:1b:3c:71:9c:2e:
                    b2:94:7e:06:4e:ab:c5:ed:92:e0:d2:b8:cf:b4:66:
                    74:a2:d2:a9:93:c0:8e:6b:9a:f2:7f:9d:5e:a3:44:
                    8f:a3:d1:d3:87:5a:8d:50:19:79:2b:9f:a0:87:2a:
                    8f:39:c9:92:34:d2:ee:d4:ca:1a:c0:85:49:2d:4a:
                    53:56:ae:4a:9e:b4:65:87:7d:16:45:c0:a6:35:3c:
                    b1:88:36:3f:79:12:b8:c2:0b:c1:ad:63:64:ae:e8:
                    87:2f:94:d7:03:85:d8:06:91:18:33:9c:dd:c9:55:
                    6c:d9:7a:63:6d:2c:db:72:f3:08:2e:2f:68:4c:1f:
                    f9:7e:20:58:db:95:35:69:54:2c:01:70:a7:03:5d:
                    39:34:29:59:fc:be:9f:7f:18:f9:d2:65:f5:00:df:
                    0c:56:36:ad:ee:3a:b9:41:5f:a7:b2:2d:e0:a7:84:
                    76:1d:3c:37:ee:c2:a1:7c:b6:a1:16:34:d7:b6:e2:
                    d9:c6:42:8f:87:f0:9e:dc:28:f0:11:11:69:f9:31:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:79:64:05:07:E6:53:90:D3:99:8B:5A:40:97:3F:18:0E:97:73:EF
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33362e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:34:6b:8f:d3:c4:da:62:71:07:e6:6c:91:ac:9e:66:e2:5f:
         86:86:09:fa:96:5f:f4:e6:48:fd:1d:bc:74:40:5f:69:af:f8:
         20:fe:2c:ca:c3:e3:b1:e9:ec:05:d8:18:15:8d:3a:aa:b4:54:
         a8:4c:c1:63:1e:eb:7c:44:a4:53:d4:9c:3f:4b:40:52:0d:a6:
         f9:f1:49:68:73:f6:60:a0:83:a2:e7:85:1c:9c:6b:d8:ea:8f:
         b4:a7:5e:40:ac:57:69:9b:7d:58:70:e0:38:f7:45:3f:8a:fa:
         3c:52:b1:0f:09:8b:f4:08:af:8e:d5:e7:56:af:49:17:0d:ee:
         a1:79:e5:68:89:df:d4:87:d0:dc:66:d7:f4:65:c6:5a:35:f2:
         b3:eb:dd:a0:ba:0f:32:7e:ab:7f:86:ab:cc:34:61:db:ec:e6:
         d1:1e:3a:44:99:36:5b:ac:d6:17:b9:aa:28:c7:38:a5:f1:67:
         51:7a:5e:73:77:92:37:f7:0d:22:a9:8a:f0:7c:6d:1a:06:0f:
         27:e4:c5:fe:d0:68:3a:ad:9d:7c:77:66:8b:30:02:df:f7:15:
         25:00:a3:0e:94:a1:96:3a:f7:37:08:5e:8a:3e:06:2b:54:00:
         1b:0d:73:c4:98:e1:85:2a:25:e9:45:64:68:d5:8e:ae:0b:70:
         80:ac:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org