Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34322e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34322e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          nURpNRXCjcP8OuEF9bTmuYayn9/qcCEUqORmJREv60o=
Subject key identifier:   7F:54:9A:30:E5:06:7D:F9:D3:84:B2:EC:22:EB:9E:55:53:00:A7:EE
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       744C501275BE24037AA34C166735724D5EDE0275
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34322e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:46 +0000
ROA not before:           Thu 14 Sep 2023 18:42:46 +0000
ROA not after:            Thu 12 Sep 2024 18:47:46 +0000
asID:                     28309
IP address blocks:        189.38.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4c:50:12:75:be:24:03:7a:a3:4c:16:67:35:72:4d:5e:de:02:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:46 2023 GMT
            Not After : Sep 12 18:47:46 2024 GMT
        Subject: CN=7F549A30E5067DF9D384B2EC22EB9E555300A7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:d1:35:b2:63:d0:c2:ef:0a:63:1a:2d:57:
                    4b:ff:e9:e6:5d:52:56:1f:35:04:66:06:0d:bf:0f:
                    d8:89:d7:40:e6:f0:b7:87:e7:6f:d4:3c:e2:85:32:
                    27:c5:3a:e8:71:c7:a3:b2:96:27:b7:b5:a8:e9:f4:
                    e7:dc:83:02:8f:99:b2:d4:bf:67:73:1b:e8:90:66:
                    5f:5d:22:c0:fd:d5:cf:0c:17:e6:3d:ba:ad:e5:db:
                    39:b4:2f:b8:e6:2b:96:27:a8:42:6e:7f:6f:aa:18:
                    24:b7:25:1d:19:d9:0f:f5:75:bf:47:5b:79:2f:b0:
                    a3:b0:de:7a:1c:cd:22:86:78:31:a8:76:95:9b:cc:
                    3f:06:34:78:78:04:51:65:5f:de:74:09:24:d5:05:
                    83:47:02:c6:21:69:83:32:91:4d:8d:99:e5:62:52:
                    0b:e0:46:e0:a6:b2:1f:11:13:15:11:4d:8b:ad:fc:
                    64:06:53:eb:b2:74:d9:e5:12:c0:55:eb:2d:c4:57:
                    ba:94:f7:f6:d6:9f:e9:49:df:f4:50:b2:55:dc:be:
                    25:c2:7f:70:95:29:b9:37:05:f1:e8:c7:30:4d:00:
                    2e:d0:93:28:54:bb:b6:76:6c:2f:c5:6e:a6:b7:97:
                    7e:0c:25:a0:16:aa:01:9b:53:fe:8b:cc:72:f2:f3:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:54:9A:30:E5:06:7D:F9:D3:84:B2:EC:22:EB:9E:55:53:00:A7:EE
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34322e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:99:f7:bc:62:a8:d5:44:4c:88:e6:3f:3f:28:3d:66:31:
         0d:80:a3:fd:d7:9c:c6:bf:6c:c1:d7:e3:d1:a6:91:6a:ea:d4:
         c0:42:0e:6d:dc:61:78:b8:9e:5c:21:fe:d8:bc:10:0f:44:1d:
         ee:55:5a:01:b7:d8:c8:89:f3:a8:4d:b0:2f:95:10:d9:9b:45:
         e3:a4:7a:06:52:af:6f:f5:8d:a1:7c:11:de:50:15:48:03:4b:
         83:88:33:1c:53:02:e3:7b:c4:fe:73:2c:66:cc:65:67:e1:bb:
         b5:a1:cf:98:0a:e9:11:3f:df:9b:dd:44:f2:b2:d2:02:f1:2b:
         19:54:63:12:86:1f:a9:cd:38:8c:b1:16:99:a0:18:40:be:46:
         c6:94:e3:fc:01:b6:36:cb:5f:3e:91:02:c1:23:5e:07:52:3d:
         1f:c0:8c:d2:b4:be:6f:b3:05:cd:0f:58:96:18:f2:9d:ca:58:
         29:8d:84:16:01:e7:a0:ce:ce:0f:97:0d:43:c6:52:c7:9b:d6:
         2c:cc:13:da:2c:59:b7:0b:1b:69:c3:b7:56:a7:2b:d5:8e:fb:
         26:b0:04:f3:75:3e:a9:07:77:b5:a6:d3:06:11:a6:1b:88:2b:
         d1:a2:95:72:1a:dd:f4:ed:ed:7d:42:44:de:ce:af:8d:9c:51:
         67:f3:81:d9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdExQEnW+JAN6o0wWZzVyTV7eAnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFERjBCQUI1QjFFMDk0MkIyNjQ3NzNEMEY1NUE0NDE2
NjY1OTMyNjAeFw0yMzA5MTQxODQyNDZaFw0yNDA5MTIxODQ3NDZaMDMxMTAvBgNV
BAMTKDdGNTQ5QTMwRTUwNjdERjlEMzg0QjJFQzIyRUI5RTU1NTMwMEE3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEetE1smPQwu8KYxotV0v/6eZd
UlYfNQRmBg2/D9iJ10Dm8LeH52/UPOKFMifFOuhxx6Oylie3tajp9OfcgwKPmbLU
v2dzG+iQZl9dIsD91c8MF+Y9uq3l2zm0L7jmK5YnqEJuf2+qGCS3JR0Z2Q/1db9H
W3kvsKOw3noczSKGeDGodpWbzD8GNHh4BFFlX950CSTVBYNHAsYhaYMykU2NmeVi
UgvgRuCmsh8RExURTYut/GQGU+uydNnlEsBV6y3EV7qU9/bWn+lJ3/RQslXcviXC
f3CVKbk3BfHoxzBNAC7QkyhUu7Z2bC/Fbqa3l34MJaAWqgGbU/6LzHLy8ymbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUf1SaMOUGffnThLLsIuueVVMAp+4wHwYDVR0j
BBgwFoAUYd8Lq1seCUKyZHc9D1WkQWZlkyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBpTnBTdnhGdWFWaG9aekx3WER1aDJ6a1B0Y1V4RXQ1VWI0YUdDZlp5
SDQvMC82MURGMEJBQjVCMUUwOTQyQjI2NDc3M0QwRjU1QTQ0MTY2NjU5MzI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzYxREYwQkFCNUIxRTA5NDJC
MjY0NzczRDBGNTVBNDQxNjY2NTkzMjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQaU5wU3Z4RnVhVmhvWnpMd1hEdWgyemtQdGNVeEV0NVViNGFHQ2ZaeUg0LzAv
MzEzODM5MmUzMzM4MmUzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0mKjANBgkqhkiG9w0BAQsFAAOCAQEALi2Z97xiqNVE
TIjmPz8oPWYxDYCj/decxr9swdfj0aaRaurUwEIObdxheLieXCH+2LwQD0Qd7lVa
AbfYyInzqE2wL5UQ2ZtF46R6BlKvb/WNoXwR3lAVSANLg4gzHFMC43vE/nMsZsxl
Z+G7taHPmArpET/fm91E8rLSAvErGVRjEoYfqc04jLEWmaAYQL5GxpTj/AG2Nstf
PpECwSNeB1I9H8CM0rS+b7MFzQ9YlhjyncpYKY2EFgHnoM7OD5cNQ8ZSx5vWLMwT
2ixZtwsbacO3Vqcr1Y77JrAE83U+qQd3tabTBhGmG4gr0aKVchrd9O3tfUJE3s6v
jZxRZ/OB2Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:31 2025 by rpki-client