Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34312e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34312e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          BwNUrtj2oBR6b2IKocddHKNsfF0R8IV/4pZoxSdpsxY=
Subject key identifier:   DF:8B:75:4C:B7:EF:84:EC:5F:CD:B3:58:02:4F:2E:1C:D7:DA:C0:79
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       77DBAA744C9B058E7E6967871D35FF7E5EAEA4CC
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34312e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:45 +0000
ROA not before:           Thu 14 Sep 2023 18:42:45 +0000
ROA not after:            Thu 12 Sep 2024 18:47:45 +0000
asID:                     28309
IP address blocks:        189.38.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:db:aa:74:4c:9b:05:8e:7e:69:67:87:1d:35:ff:7e:5e:ae:a4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:45 2023 GMT
            Not After : Sep 12 18:47:45 2024 GMT
        Subject: CN=DF8B754CB7EF84EC5FCDB358024F2E1CD7DAC079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:71:cd:d6:6d:30:75:e0:a1:40:88:e3:1e:
                    f7:b6:34:a2:44:a3:08:9f:3f:9f:ea:e0:03:28:d5:
                    db:78:9d:4b:8f:d4:78:81:4e:28:c5:25:63:3c:92:
                    46:40:d1:50:36:a7:fa:ae:c9:c3:b8:d3:f0:00:77:
                    82:19:09:10:36:62:15:ab:15:6c:e6:c5:5b:46:b2:
                    14:5a:2d:35:a4:1c:84:a9:10:28:f9:21:4a:b5:14:
                    89:60:71:5f:63:06:b9:5f:c5:9a:5c:82:b4:7b:ec:
                    41:9b:79:37:3c:08:7f:97:a5:c7:5f:3d:27:bf:a2:
                    49:b3:c8:54:d6:be:9d:a9:ab:d4:ac:97:0c:c6:13:
                    7a:41:53:0f:20:4d:09:6d:2b:37:2a:2d:fd:c6:30:
                    8f:f5:49:32:94:f1:9e:bc:6c:f5:80:a5:76:87:fe:
                    cf:37:82:1b:bb:5e:f9:82:73:93:a8:72:13:f5:8d:
                    08:75:c1:8b:da:67:0a:1f:39:c2:5f:25:d6:19:90:
                    6a:70:c9:66:9f:ea:fc:5e:36:b1:94:83:37:d5:da:
                    66:5c:9a:bc:d6:0b:56:84:58:aa:b7:aa:49:b9:99:
                    75:f1:d5:12:61:c1:16:87:1d:ac:a2:93:f2:3a:13:
                    76:8d:60:a7:f2:6c:92:b7:58:f4:61:fb:ba:73:ff:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:75:4C:B7:EF:84:EC:5F:CD:B3:58:02:4F:2E:1C:D7:DA:C0:79
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34312e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:16:cf:6a:19:f9:63:74:09:f1:23:44:33:3b:23:26:ec:57:
         d4:37:5f:9b:b3:29:8e:92:c7:e7:23:58:0d:7a:f8:a9:bf:15:
         67:57:16:b8:48:53:03:9a:61:9c:de:fc:39:03:a9:79:a1:b5:
         30:1c:8d:9c:f1:2b:a2:38:f8:b6:4a:0e:9a:91:59:0b:a2:94:
         8f:0f:49:95:e9:b8:dc:7a:3e:95:c9:45:f8:15:e6:8a:d8:54:
         8f:93:a0:a0:06:ef:f7:df:9f:db:85:0e:14:0f:a5:f0:48:9b:
         04:32:44:06:36:ce:0a:22:df:0a:75:df:89:9c:67:d0:5d:92:
         83:fb:7d:4d:08:8a:e8:ea:c8:cf:d5:e0:84:61:c3:aa:88:3b:
         05:73:c0:84:34:e4:5e:0c:0a:4f:6a:c3:10:22:ad:7b:ae:50:
         2a:5d:4d:b9:cf:59:ae:1e:0f:73:7c:6b:69:06:f7:8c:03:0b:
         0f:59:07:28:8d:c1:79:8e:2d:f8:5d:f2:93:2a:8e:bf:c7:ea:
         70:d8:b9:a1:7b:c6:d2:5a:0d:98:14:8d:fe:b5:84:23:a3:7c:
         32:39:bb:79:f4:81:1e:6a:a9:77:22:c8:35:03:e4:49:f0:1c:
         79:b4:a0:44:a5:a6:e6:7a:5a:1f:e5:06:33:1d:0a:f8:fb:dd:
         23:ce:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org