Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33392e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e33392e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          MEAi2H8nAqIl2wPBGjuNT4Mdy6vXzshf2TDUGQhbpjE=
Subject key identifier:   28:E8:D7:CD:0F:21:7B:3A:06:03:5D:1D:E0:CC:4C:28:15:3F:C2:00
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       61D8C8849DF0FEE2B4BA2EC62F20288FFC8CFD8D
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33392e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:50 +0000
ROA not before:           Thu 14 Sep 2023 18:42:50 +0000
ROA not after:            Thu 12 Sep 2024 18:47:50 +0000
asID:                     28309
IP address blocks:        189.38.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d8:c8:84:9d:f0:fe:e2:b4:ba:2e:c6:2f:20:28:8f:fc:8c:fd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:50 2023 GMT
            Not After : Sep 12 18:47:50 2024 GMT
        Subject: CN=28E8D7CD0F217B3A06035D1DE0CC4C28153FC200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:4f:ba:0d:04:69:75:e9:36:cc:d8:2f:5c:
                    26:ce:dd:28:23:fd:91:04:4f:14:e6:c9:d2:99:fc:
                    be:93:1e:8e:61:eb:02:aa:c7:27:61:61:30:8a:25:
                    c2:5b:c2:69:42:07:af:2d:0b:2e:33:a1:44:ac:b0:
                    ca:83:6e:44:1a:b4:78:b5:ee:a0:3a:69:da:26:6e:
                    6f:b9:10:74:2b:1d:21:ad:2a:bf:fa:bd:22:da:00:
                    fe:77:c7:a2:11:11:ee:86:e6:f4:c0:7e:1d:9f:01:
                    ed:9b:1f:86:68:91:88:3a:c5:40:36:79:92:3d:30:
                    27:a2:9b:7f:3d:c1:d3:fd:1e:8f:d9:4f:43:20:69:
                    a6:15:8d:23:2c:97:9f:aa:a5:13:b1:b1:32:37:92:
                    9d:c6:b6:4e:1a:de:31:98:e4:01:fa:fc:a8:56:5d:
                    ac:25:a4:63:09:76:b7:2e:82:8b:1d:b9:e9:21:e5:
                    78:51:66:f2:ea:f5:4a:cf:58:be:8a:4d:70:50:5e:
                    db:96:9a:7f:e0:d7:bb:77:3b:1e:31:c1:b4:e1:d0:
                    ef:73:52:21:2a:b1:d0:ea:19:86:63:f1:07:8b:f1:
                    b9:ca:5e:46:4f:90:9f:3a:60:ac:88:ff:86:70:40:
                    88:21:04:9a:44:19:e0:37:b3:1a:85:76:43:a6:05:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:D7:CD:0F:21:7B:3A:06:03:5D:1D:E0:CC:4C:28:15:3F:C2:00
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e33392e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:20:15:0f:6d:b3:64:e4:9d:ab:6c:57:41:34:71:9c:11:99:
         e8:11:c2:34:9e:a4:36:ef:46:c8:22:f6:96:03:7a:4b:64:56:
         d8:04:ec:70:ba:b4:e6:f6:35:ba:0d:13:5c:d1:b8:a1:98:57:
         01:50:24:8a:3f:93:a7:d5:25:e1:87:c4:0d:e7:17:bc:e9:2d:
         e3:03:14:d5:36:ee:50:d2:28:db:a6:a1:d9:5b:e3:30:e4:59:
         38:1e:24:fd:05:8b:04:30:dc:d4:73:9e:02:3b:b0:bd:12:50:
         5b:e4:e0:3e:20:8a:92:8f:a3:9f:9e:bd:27:34:8e:08:67:9f:
         58:4f:22:76:92:0b:fa:76:56:6f:c6:63:a0:69:13:10:39:f9:
         e9:96:f4:21:ad:b4:93:24:f1:0d:d0:01:52:ba:8e:d7:cb:c3:
         77:56:dd:20:13:72:97:04:2b:ae:80:58:ff:dd:54:22:a6:7f:
         77:a5:f5:88:3c:65:53:03:5a:21:bc:76:0b:59:ab:c8:74:27:
         4a:94:26:dc:dd:46:10:7d:52:dc:98:b3:4c:4c:45:c4:d3:56:
         5f:d5:f3:f4:76:f1:95:d3:81:1b:e0:39:28:4e:3d:32:66:cc:
         ac:13:6a:a5:97:c0:0a:62:c2:6c:cb:17:bb:32:ef:b0:61:df:
         e4:51:3d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:48 2025 by rpki-client