Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32322d3232203d3e203238333039.roa
File:                     3138392e33382e34302e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          bNbgO7I7CyzlJKQnmiX0PNzKVxEOHzKih2Bn9lE/AEs=
Subject key identifier:   89:91:4E:7A:F4:01:AF:54:EA:18:0A:9C:FD:E6:DC:D8:53:5F:5E:DB
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       4EF232A2376102257A0146EE3BC79B2B4D6E41FA
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:46 +0000
ROA not before:           Thu 14 Sep 2023 18:42:46 +0000
ROA not after:            Thu 12 Sep 2024 18:47:46 +0000
asID:                     28309
IP address blocks:        189.38.40.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f2:32:a2:37:61:02:25:7a:01:46:ee:3b:c7:9b:2b:4d:6e:41:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:46 2023 GMT
            Not After : Sep 12 18:47:46 2024 GMT
        Subject: CN=89914E7AF401AF54EA180A9CFDE6DCD8535F5EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:46:2f:37:fc:9f:44:e6:78:69:5e:e2:e7:f6:
                    32:dd:dd:da:a9:76:70:18:dc:e8:38:8e:9a:ad:f6:
                    61:4c:1a:3b:9d:47:df:2c:9f:ac:38:0a:f0:e8:c6:
                    d6:c1:5a:c5:e4:bf:f2:c2:c1:c6:20:49:f9:38:97:
                    b2:6b:c5:76:cd:e6:87:0b:a6:88:06:41:45:cc:ea:
                    f5:62:e4:b0:e4:ca:95:f9:d1:c2:a1:dd:8a:2f:88:
                    46:88:fa:9b:c9:0c:0f:aa:55:54:82:42:bf:d0:92:
                    ee:d0:c5:fd:68:f4:3e:9c:25:0f:e4:06:78:16:49:
                    be:ef:a9:f4:17:b2:8f:35:88:ae:71:d1:bc:dd:8b:
                    96:2b:71:0e:2c:74:49:59:72:c5:23:85:84:b1:d2:
                    d3:bf:90:74:64:81:9f:ac:18:ac:e3:e2:bd:d1:4c:
                    32:d2:f6:b3:48:5a:20:50:53:f9:56:0c:ea:d7:e2:
                    78:01:35:d8:5a:69:3f:b6:13:4e:66:4c:bf:d3:a2:
                    9b:e2:3d:6d:f1:1c:19:8e:e5:39:d4:79:45:ff:74:
                    78:79:ae:d3:54:20:5b:ab:33:c1:ae:02:9c:c1:04:
                    4e:64:78:27:e6:6e:86:dc:78:e3:93:b6:aa:1e:d8:
                    29:35:30:de:2e:6e:fb:a9:84:f5:8b:0c:fe:97:81:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:91:4E:7A:F4:01:AF:54:EA:18:0A:9C:FD:E6:DC:D8:53:5F:5E:DB
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:c4:8b:c8:1b:af:23:a0:a7:e8:c4:b2:71:2b:49:ae:86:03:
         01:fa:c1:1c:41:91:9f:ef:51:ca:40:0f:05:7e:6d:d2:e6:70:
         16:e9:0d:97:d2:10:6c:d1:6a:22:76:21:de:25:17:1d:f8:d3:
         71:8c:73:9f:3e:d5:e7:de:96:b8:5a:c4:26:c8:e4:94:b2:23:
         c0:3b:08:54:16:2a:ed:1c:ad:ca:04:f1:13:e0:ca:76:2a:45:
         2d:2a:10:fd:41:01:3f:55:49:6e:e2:76:e7:58:85:df:30:8c:
         6e:fc:9c:af:f8:b7:93:af:7c:66:d1:34:33:1e:d7:db:5e:b8:
         08:2f:fa:e5:57:96:90:b5:57:03:4e:a5:e4:7f:43:8b:d7:e5:
         c8:bc:88:81:63:83:d6:f4:eb:14:9d:f5:89:bb:7d:67:ab:c4:
         58:4a:a7:fb:89:bc:0c:7d:99:e2:06:56:93:e3:76:86:bc:28:
         b4:24:1d:bd:02:32:24:64:86:9c:51:5d:be:15:67:fe:e2:45:
         df:61:78:01:db:b3:22:37:6e:eb:90:58:01:ec:65:6d:2b:96:
         04:89:00:b6:57:1c:73:06:56:90:a6:33:36:3a:53:75:a7:46:
         78:62:8f:69:dc:df:2f:36:df:6d:8d:f9:da:13:d8:12:a3:1c:
         07:64:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:07 2025 by rpki-client