Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34332e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34332e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          JWLdi3Ez4VhhKZwaaCYVANyC6J4B+BFR82ehgFcwQfU=
Subject key identifier:   53:9F:CC:C5:4B:A0:63:B6:F6:BC:BB:26:06:35:A6:C3:6B:18:89:5F
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       2545EB07DFBB7995057544EAC384592A3A3EBFA1
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34332e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:44 +0000
ROA not before:           Thu 14 Sep 2023 18:42:44 +0000
ROA not after:            Thu 12 Sep 2024 18:47:44 +0000
asID:                     28309
IP address blocks:        189.38.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:45:eb:07:df:bb:79:95:05:75:44:ea:c3:84:59:2a:3a:3e:bf:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:44 2023 GMT
            Not After : Sep 12 18:47:44 2024 GMT
        Subject: CN=539FCCC54BA063B6F6BCBB260635A6C36B18895F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:b7:07:6f:6a:4c:43:c7:39:a5:bb:ee:26:
                    ee:7d:64:78:32:d0:90:bc:0c:c4:55:70:5c:87:0d:
                    05:2e:99:7a:ca:c4:be:4a:14:78:60:d5:87:bd:c7:
                    bf:92:97:03:52:d3:a3:51:69:c8:be:1d:82:02:d4:
                    28:4d:d8:ad:52:88:eb:8d:8a:b5:a7:16:83:29:fd:
                    46:63:83:a6:e9:44:ab:23:8e:8f:4f:eb:68:a0:b5:
                    e9:83:46:a2:cf:aa:7a:e0:cc:9b:cc:72:bf:e6:43:
                    2b:6c:89:08:72:dc:ab:fd:ae:1a:f9:a5:24:3e:ff:
                    82:14:6c:11:a8:eb:fc:c0:1f:35:89:69:10:9f:1d:
                    db:76:62:c5:58:46:5a:b0:21:32:8e:12:57:10:2f:
                    82:0b:97:1a:fa:04:ce:af:df:a3:92:17:0f:a5:95:
                    84:ef:e7:1c:f9:f1:f0:d2:70:e3:cb:4e:34:ca:90:
                    aa:62:41:05:e2:81:11:8c:f3:b8:88:54:36:e9:8f:
                    2c:c3:d9:00:f9:12:a5:3b:95:ca:f9:0c:99:f4:ec:
                    ae:aa:a6:cb:90:13:24:05:0d:a4:72:94:4f:45:da:
                    74:ca:9e:91:ea:52:b4:38:da:a6:b0:61:cf:b6:b7:
                    e1:9d:56:7a:cc:e0:49:8c:2d:36:c2:58:93:1a:f5:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:CC:C5:4B:A0:63:B6:F6:BC:BB:26:06:35:A6:C3:6B:18:89:5F
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34332e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:16:96:eb:39:3f:83:2a:b2:af:6f:3c:d7:db:d8:54:10:
         f0:fe:7b:66:1e:1b:8b:af:d2:53:26:2f:c3:86:5f:13:1b:25:
         5a:c0:5c:5e:40:eb:5d:29:09:a7:37:25:0e:c7:3f:64:ba:2a:
         e4:4f:fe:7b:63:d8:fe:38:a5:f4:86:f1:43:06:12:ce:37:93:
         41:32:e6:50:68:ca:2b:ff:5d:f3:99:1a:5c:c0:b9:cd:f6:28:
         0f:29:77:d1:a3:0b:75:c7:cc:66:2d:f1:f0:f6:a6:d0:e4:ad:
         b5:33:d5:7a:04:77:80:65:e7:77:14:22:78:02:77:0a:a8:24:
         86:7f:24:e9:d3:10:b7:5c:20:ec:2c:03:66:9a:49:37:ca:18:
         6c:b6:7f:6f:27:37:e1:d0:19:d9:3a:7c:18:bf:8d:39:83:2c:
         74:40:e1:4a:87:98:61:26:c4:6a:a6:0d:16:21:60:24:74:c5:
         b5:b5:0e:69:f3:5c:33:a7:3e:2f:54:c1:c2:61:43:98:e5:1f:
         df:1f:d4:d4:dc:b8:9b:05:91:60:70:4c:6c:4f:db:15:93:2d:
         df:14:5d:a1:4d:ca:1e:0a:bd:48:78:42:d2:14:24:cb:09:7d:
         10:14:ae:70:a1:1b:90:35:3b:70:fb:f6:41:e2:27:b0:af:00:
         ea:12:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org