Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34322e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e34322e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          PI7+VBrQG26LQI8iSCH3fO+PabpR1ChDRN8SGwTPg2U=
Subject key identifier:   B2:94:74:33:5C:FD:FA:69:4C:88:CE:A2:B7:8F:CC:FA:F4:D6:9A:C5
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       381B7C366BFC3BD02E1E5AE38CA6D495F7DC5C51
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34322e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:50 +0000
ROA not before:           Thu 14 Sep 2023 18:42:50 +0000
ROA not after:            Thu 12 Sep 2024 18:47:50 +0000
asID:                     28309
IP address blocks:        189.38.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1b:7c:36:6b:fc:3b:d0:2e:1e:5a:e3:8c:a6:d4:95:f7:dc:5c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:50 2023 GMT
            Not After : Sep 12 18:47:50 2024 GMT
        Subject: CN=B29474335CFDFA694C88CEA2B78FCCFAF4D69AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:a7:98:7c:b7:7b:dc:80:14:d4:a9:65:f0:
                    d9:db:c9:be:c6:4c:d3:1d:ee:c6:67:32:78:a8:97:
                    65:59:39:93:48:46:71:8b:c5:44:5e:71:4e:a0:57:
                    e7:80:d4:21:cb:32:0e:fa:2d:de:ce:83:a3:b4:13:
                    60:9c:cc:3a:a6:a6:48:5f:d2:b2:8b:03:13:98:0b:
                    27:51:d3:35:8e:70:c4:24:2b:09:d1:c6:0b:5e:30:
                    00:c0:d5:8c:8b:cb:d4:e9:68:37:4d:99:0c:ca:4b:
                    f4:21:76:32:19:84:54:b7:6d:f4:04:a1:b7:5a:a8:
                    b6:e7:96:d1:ef:cd:0d:90:29:70:d7:47:0b:8c:6d:
                    24:b9:c0:a2:e7:23:dc:ad:1b:b5:78:e8:3f:36:1b:
                    23:c6:51:f1:75:62:f6:8e:04:97:d0:f8:8e:0f:a1:
                    2b:87:3b:76:ff:e4:ab:ce:56:74:c1:b2:d8:c7:1e:
                    57:4a:5e:3f:fe:63:a3:90:0a:49:5a:86:da:eb:0c:
                    05:fd:f0:9c:11:7f:70:6f:b2:b5:4f:ee:47:a8:d9:
                    84:11:09:25:ec:44:e7:3c:50:61:26:53:da:d1:13:
                    05:f3:21:c3:d0:fc:f0:fd:33:23:a8:d0:af:4c:10:
                    1f:6d:46:8b:f3:fe:e1:99:ab:79:99:0e:e6:1e:88:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:94:74:33:5C:FD:FA:69:4C:88:CE:A2:B7:8F:CC:FA:F4:D6:9A:C5
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34322e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:ce:50:9b:30:8f:3b:66:0c:65:3b:b6:0c:ca:5f:bb:70:
         af:c3:56:77:a7:0f:27:dc:62:ec:9f:65:ac:23:0d:71:fa:cf:
         dd:8b:1d:0e:25:2b:99:4f:38:1b:2d:08:49:1d:ed:72:68:fb:
         f8:6c:16:ba:36:76:0a:a1:b1:dd:ee:8a:85:bd:56:a2:d8:8a:
         50:5e:df:00:9e:8a:4e:57:7e:e0:3f:d1:43:ee:99:ca:0e:95:
         ae:ff:41:e4:a1:fb:09:92:46:e3:55:da:90:ce:b0:45:7a:13:
         d5:49:bd:8e:0f:99:a9:6c:ca:cc:72:5d:c4:6a:40:68:55:3d:
         83:d3:d5:c7:6a:66:b0:72:d3:62:7a:52:0a:e8:29:7b:d1:ee:
         e0:c5:c2:6c:05:b5:02:c4:6e:3c:b1:00:3d:94:65:db:41:3b:
         00:bc:d2:5e:41:59:bd:9d:74:a7:7d:c0:9e:2e:b2:59:21:4e:
         79:da:79:6a:e2:f1:7c:97:0c:de:dc:67:ea:7d:a5:2c:dc:83:
         58:bd:cb:3b:46:5f:07:d7:f4:28:51:89:a9:0d:ba:ec:d9:b4:
         33:f0:bc:73:89:a3:91:b1:5d:bf:23:b3:9c:6b:2b:2f:92:f8:
         d4:5b:a7:5d:bc:68:4c:48:8d:99:c7:46:7b:e3:97:7e:c3:76:
         58:28:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org