Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33382e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33382e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          FZwRXCwrWi0BTBU/V/uM4wv9PvZ6Du1TmP1jV3DSC+E=
Subject key identifier:   5B:DD:6B:51:76:D6:63:57:DE:DD:0F:30:17:90:A1:0C:D6:56:CC:49
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       4799A0996F3E55AC2D6C43DFC204B899F83CF690
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33382e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        189.38.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:99:a0:99:6f:3e:55:ac:2d:6c:43:df:c2:04:b8:99:f8:3c:f6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=5BDD6B5176D66357DEDD0F301790A10CD656CC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b7:70:2b:81:27:22:ef:80:70:60:35:26:09:
                    de:a5:07:23:72:5c:9a:24:9b:3a:26:c0:a8:1d:4f:
                    61:8c:94:87:bd:1c:2a:8d:2b:c5:6e:7f:bc:e5:27:
                    65:d3:97:5c:b4:71:ff:55:80:b5:1d:9b:01:67:46:
                    bf:4b:46:82:08:11:33:37:74:8c:f4:65:32:71:15:
                    78:16:28:d5:ed:fd:1c:d5:05:12:d2:ee:6e:44:3d:
                    75:65:d3:a1:9d:39:54:f8:0c:6b:6e:1f:8b:e7:ed:
                    7c:32:42:c2:e4:44:d9:c3:08:50:7d:1e:41:60:6f:
                    1a:73:05:40:89:a7:91:c6:4b:04:f3:4d:f4:0a:37:
                    cf:99:51:db:ce:20:e8:06:1f:f1:92:64:bc:65:65:
                    6e:ff:06:5a:68:54:9a:da:72:e2:da:53:ac:d3:40:
                    f0:fb:24:a6:17:5a:02:b6:8b:2b:14:33:34:65:27:
                    72:84:60:f5:79:08:7a:2e:2e:4d:51:8a:47:8d:24:
                    77:af:87:e2:b8:ef:45:2b:9f:17:c2:f5:cf:0a:29:
                    a3:b3:32:6b:10:b7:2c:27:b3:74:11:44:f3:87:22:
                    ed:b0:da:61:28:14:f4:52:c8:4c:3e:8a:3b:79:cc:
                    6b:1c:59:57:4b:9b:3f:5c:59:b2:53:5f:21:85:61:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:6B:51:76:D6:63:57:DE:DD:0F:30:17:90:A1:0C:D6:56:CC:49
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33382e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:25:ca:26:e1:4f:b9:9c:61:08:a2:42:a3:8c:bf:2d:3c:
         dd:60:62:74:71:f1:06:ab:fd:80:5e:52:66:9d:fa:68:68:23:
         fc:57:cd:56:5c:df:48:2e:e7:07:f2:2f:8a:a4:64:84:90:42:
         fd:9a:b0:d1:f9:5a:77:2a:fa:50:aa:b0:58:c0:b2:89:14:ff:
         6a:b3:3f:93:5c:ae:7b:e4:6e:dc:77:2c:25:45:c0:12:d5:3a:
         00:29:57:0f:30:bd:c0:09:3b:ce:7d:0a:bd:ca:77:43:94:c7:
         75:fc:5f:26:63:70:66:c6:30:b8:9d:b7:24:fc:98:6f:c1:0e:
         74:0f:0f:3c:66:7c:33:5e:66:57:3d:7d:6e:04:71:8e:85:fe:
         64:cb:11:5a:ea:02:c1:3b:d5:85:97:b9:48:31:ff:27:56:5e:
         97:a4:fc:62:95:79:a3:4a:20:b1:aa:81:84:30:81:5d:b0:6f:
         9b:3b:c2:5b:d2:41:2c:af:64:c1:54:3b:93:ba:c8:d6:0f:cd:
         6e:d1:df:a9:61:46:6a:54:ed:22:4b:9c:1a:05:46:17:5c:a5:
         17:85:17:ec:8a:8e:49:6e:29:44:dd:b6:05:be:d6:f0:00:5f:
         17:34:bb:ba:6c:31:db:16:06:d7:62:57:f5:2e:1c:42:2c:03:
         f9:a7:e4:fa
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUR5mgmW8+VawtbEPfwgS4mfg89pAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDlaFw0yNDA5MTIxODQ3NDlaMDMxMTAvBgNV
BAMTKDVCREQ2QjUxNzZENjYzNTdERUREMEYzMDE3OTBBMTBDRDY1NkNDNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXt3ArgSci74BwYDUmCd6lByNy
XJokmzomwKgdT2GMlIe9HCqNK8Vuf7zlJ2XTl1y0cf9VgLUdmwFnRr9LRoIIETM3
dIz0ZTJxFXgWKNXt/RzVBRLS7m5EPXVl06GdOVT4DGtuH4vn7XwyQsLkRNnDCFB9
HkFgbxpzBUCJp5HGSwTzTfQKN8+ZUdvOIOgGH/GSZLxlZW7/BlpoVJracuLaU6zT
QPD7JKYXWgK2iysUMzRlJ3KEYPV5CHouLk1RikeNJHevh+K470UrnxfC9c8KKaOz
MmsQtywns3QRRPOHIu2w2mEoFPRSyEw+ijt5zGscWVdLmz9cWbJTXyGFYTYFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUW91rUXbWY1fe3Q8wF5ChDNZWzEkwHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM5MmUzMzM4MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0mJjANBgkqhkiG9w0BAQsFAAOCAQEAd7olyibhT7mc
YQiiQqOMvy083WBidHHxBqv9gF5SZp36aGgj/FfNVlzfSC7nB/IviqRkhJBC/Zqw
0fladyr6UKqwWMCyiRT/arM/k1yue+Ru3HcsJUXAEtU6AClXDzC9wAk7zn0Kvcp3
Q5THdfxfJmNwZsYwuJ23JPyYb8EOdA8PPGZ8M15mVz19bgRxjoX+ZMsRWuoCwTvV
hZe5SDH/J1Zel6T8YpV5o0ogsaqBhDCBXbBvmzvCW9JBLK9kwVQ7k7rI1g/NbtHf
qWFGalTtIkucGgVGF1ylF4UX7IqOSW4pRN22Bb7W8ABfFzS7umwx2xYG12JX9S4c
QiwD+afk+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org