Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33382e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e33382e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          TcOOAh9CwOYpST8uLKLSD+H0iGbSMkSUVl78oF4B1Yo=
Subject key identifier:   B4:88:E1:E4:FF:9E:9F:66:5D:64:7F:30:60:5D:98:6C:B8:86:CD:21
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       76A4153D3111BE46432DE52D448AA31001291D54
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33382e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        189.38.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a4:15:3d:31:11:be:46:43:2d:e5:2d:44:8a:a3:10:01:29:1d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=B488E1E4FF9E9F665D647F30605D986CB886CD21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c7:82:c7:0c:ac:5e:f9:09:d5:19:22:dc:06:
                    d9:b0:f2:5a:df:c9:e0:3b:50:cd:b5:1d:64:8a:ae:
                    7b:41:4a:2f:d3:37:91:43:b7:fe:18:57:8e:72:2f:
                    2a:88:ba:61:76:91:c4:92:29:f0:c8:73:06:c8:ed:
                    1c:cc:f7:8a:31:68:83:27:27:ec:d6:46:b7:1e:1c:
                    e8:b4:85:be:94:e7:cf:4d:07:4f:8b:d2:db:be:e8:
                    d1:85:5a:00:48:1b:fd:25:a5:41:76:13:68:90:b5:
                    e4:22:68:4b:fd:0e:a2:d6:27:28:b0:72:bd:dd:95:
                    10:af:e2:bf:26:16:06:89:f2:d2:ac:a7:28:ed:24:
                    f7:3d:0c:ce:31:ff:48:af:fb:dc:a3:ed:29:a5:44:
                    73:c3:75:c9:a5:34:3e:4a:0e:8b:14:f6:59:25:9e:
                    5a:8e:f7:d2:68:d6:78:c9:ad:d5:05:58:45:e3:4f:
                    8f:f8:2e:dc:cd:83:63:1c:03:d3:5e:cb:ba:d6:65:
                    8a:00:7c:47:a0:21:4d:24:55:5d:4f:dd:a0:ca:6c:
                    d5:61:5f:64:df:36:b9:8b:65:00:ee:b3:1f:7d:20:
                    5c:e0:a1:10:4b:17:39:5f:e8:9e:86:ea:59:40:62:
                    0e:3c:9b:e2:5a:48:ef:07:66:7b:ad:c3:c1:8c:fa:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:88:E1:E4:FF:9E:9F:66:5D:64:7F:30:60:5D:98:6C:B8:86:CD:21
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33382e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:4e:0c:3c:f6:f7:ee:35:e3:98:24:48:f8:7a:8d:40:ae:
         c8:56:35:1d:91:6a:c6:45:79:f1:d2:ca:4b:da:43:ac:53:d9:
         20:02:53:9d:ee:16:dd:9f:31:0c:96:58:c4:1e:46:58:48:98:
         51:b6:cd:46:a5:11:43:3d:1f:52:e2:22:f4:e5:79:81:9c:39:
         fc:03:dc:8a:2b:c2:38:2a:f4:8c:00:b0:ad:fe:d2:6c:28:a1:
         cc:e5:6e:3e:87:fd:04:94:ac:33:d2:89:c1:10:9c:b4:e9:9b:
         04:ce:42:87:bd:a1:3b:ed:fe:bf:c3:49:05:30:b9:0d:fc:9d:
         fc:35:32:48:04:69:50:f7:45:5d:67:4b:f6:99:54:a2:ed:73:
         ab:21:11:ba:1f:05:fd:b3:54:2c:1a:cf:73:db:5f:60:21:16:
         c9:8f:e4:08:a1:20:8c:4a:0c:29:1e:45:3c:03:26:c2:fa:31:
         c4:fb:2f:ce:d6:97:1c:eb:27:66:ad:64:8e:09:66:5f:38:e8:
         17:05:dd:f3:10:3e:81:0b:70:36:f9:d5:a9:b9:d9:12:c4:da:
         4d:3b:17:5f:9e:99:4b:df:fa:5f:4f:74:67:df:b7:81:27:44:
         83:e3:e9:d5:b7:6f:f9:28:a4:88:ce:14:8e:80:6e:ec:93:ba:
         09:31:c6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org