Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34302e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          oHYVhEF7HV7okBBZhFDI0imAiKsuU2661/IieQliAl4=
Subject key identifier:   97:98:A3:E9:79:6F:6B:7D:9E:54:1C:DF:61:CF:5D:DA:DB:DC:E8:36
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       3C76AAAA404DFDFC23D17CA017348D8B51A1A596
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        189.38.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:76:aa:aa:40:4d:fd:fc:23:d1:7c:a0:17:34:8d:8b:51:a1:a5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=9798A3E9796F6B7D9E541CDF61CF5DDADBDCE836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:03:f0:b7:7b:cc:dd:de:6c:7a:ed:61:26:
                    ae:dc:7f:9c:8a:72:57:f9:38:c4:44:76:26:0e:b5:
                    ce:83:61:a1:2e:10:b3:e7:61:96:3c:9d:af:96:de:
                    9b:7b:20:e4:53:64:a2:7c:b1:d1:d5:57:ce:d8:24:
                    c0:df:ef:85:bf:db:b8:c2:ca:f8:2c:04:9e:41:16:
                    15:84:ac:65:0a:de:f4:36:c8:47:65:a0:92:f7:91:
                    92:43:af:c7:58:aa:3f:6f:e9:e9:33:db:8f:aa:5e:
                    0a:92:4e:3e:49:3d:c2:de:19:d5:18:13:6c:00:26:
                    8b:25:1e:60:a4:9e:60:1c:f6:5f:73:91:77:d3:53:
                    a3:ef:4e:ba:ca:fb:a8:8e:55:ff:9d:35:6f:af:e9:
                    99:76:35:94:41:54:80:37:a6:e6:af:22:09:ef:d0:
                    a1:e3:6f:d1:13:23:2d:bc:c1:8d:71:de:ed:d5:85:
                    fa:93:92:94:64:f3:31:ec:8e:2a:f5:ab:42:9a:6b:
                    92:6f:3d:7c:e2:29:cc:04:cf:42:3f:95:1d:8b:3b:
                    5d:80:5a:9d:0e:32:40:29:be:c4:87:5f:92:c9:e9:
                    8e:d9:e5:c0:ea:f4:f1:56:84:ef:67:c1:fc:c9:96:
                    c1:2b:fd:18:99:57:bb:e6:66:63:1d:89:c2:e9:16:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:A3:E9:79:6F:6B:7D:9E:54:1C:DF:61:CF:5D:DA:DB:DC:E8:36
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34302e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:22:2a:86:9e:45:c3:92:d9:b4:84:47:6e:07:f4:5c:4d:87:
         42:10:03:0b:6d:14:fe:23:44:cb:6e:c4:3c:0b:ce:fa:50:c3:
         cf:f8:1e:eb:16:f3:10:57:dc:aa:2e:5d:01:ea:be:50:1d:5d:
         6c:07:21:87:db:7f:32:86:55:91:e3:bd:1c:92:6b:c5:3d:eb:
         12:fc:bd:bf:0a:85:69:98:86:b2:8b:87:00:ee:ac:a0:81:aa:
         e8:41:0f:af:13:06:f7:db:c4:ea:ec:6a:58:24:01:41:77:59:
         ff:b1:ef:99:9b:01:75:3a:6a:0e:a4:6d:c8:44:cb:6c:e1:1e:
         06:2e:78:e7:07:e9:d2:b6:bd:4c:32:c4:c7:ad:e5:fa:ee:a7:
         86:97:b2:ab:b5:c7:2a:2d:c4:03:51:f6:5e:ed:82:8d:07:67:
         9b:3f:ca:45:63:1e:bd:2f:19:7c:21:37:c7:5e:7d:b5:08:33:
         da:b3:27:bf:6c:08:b8:5f:aa:b9:66:0a:d4:ff:f8:ea:9a:d5:
         aa:d1:57:26:bb:61:b8:53:9a:e7:5c:8c:13:84:da:0a:40:28:
         52:5a:e3:95:96:9c:39:85:e9:f3:bb:f3:fb:8f:bf:68:10:a3:
         7f:95:ab:68:30:6e:dd:69:7b:07:9c:32:74:d6:d9:0a:8a:b7:
         b7:a5:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org