Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32322d3232203d3e203238333039.roa
File:                     3138392e33382e34342e302f32322d3232203d3e203238333039.roa (raw, json)
Hash identifier:          1mgu6y3z7MZUhVlX7iBhxr2OEExlAsPSN7MQjNd+AgA=
Subject key identifier:   F3:96:FA:5C:D3:AE:9E:8B:29:1E:AF:32:F3:FD:E7:6F:85:07:AA:C6
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       49E96C2512A6D34074D769D85464BA2D5EF72736
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32322d3232203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:46 +0000
ROA not before:           Thu 14 Sep 2023 18:42:46 +0000
ROA not after:            Thu 12 Sep 2024 18:47:46 +0000
asID:                     28309
IP address blocks:        189.38.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e9:6c:25:12:a6:d3:40:74:d7:69:d8:54:64:ba:2d:5e:f7:27:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:46 2023 GMT
            Not After : Sep 12 18:47:46 2024 GMT
        Subject: CN=F396FA5CD3AE9E8B291EAF32F3FDE76F8507AAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:22:17:d1:ae:4a:0d:e0:b2:eb:b9:fe:62:
                    30:01:1e:b3:8e:8f:f1:19:1c:38:a2:61:68:b3:3e:
                    49:f3:9b:aa:ab:aa:35:5a:4a:89:96:37:6d:a6:80:
                    d1:00:80:02:e6:c3:95:ca:df:c8:71:b6:8a:13:89:
                    cd:40:b0:c8:7b:da:de:11:af:52:ed:bf:b7:39:aa:
                    82:70:68:3a:e5:4e:f7:50:cb:f2:0b:f3:97:57:62:
                    5c:08:5a:42:fa:c3:03:ac:1b:8e:37:a8:70:cb:02:
                    08:52:81:1e:cf:0e:38:c0:e6:c4:0e:4b:a2:82:01:
                    53:ed:d4:b7:79:ec:dc:32:46:81:e8:93:15:17:12:
                    56:43:fa:ac:24:21:41:34:bf:26:a7:6a:7b:57:00:
                    4f:42:d7:96:3c:60:f7:80:7f:0c:0b:c7:01:3c:51:
                    f0:92:4a:6f:47:d5:5e:8a:fa:db:30:32:9d:05:1d:
                    b7:c0:86:42:06:54:48:68:0c:56:98:31:75:07:bb:
                    29:df:09:96:fb:9f:e5:bc:e5:0b:94:6e:43:a4:08:
                    1c:c9:5f:d3:cb:64:30:18:0d:bc:56:8a:93:99:83:
                    69:cc:81:41:97:7b:55:62:0b:a6:3c:af:e2:45:82:
                    82:93:17:ca:8d:97:c0:f1:f9:55:bd:26:34:d6:88:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:96:FA:5C:D3:AE:9E:8B:29:1E:AF:32:F3:FD:E7:6F:85:07:AA:C6
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32322d3232203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:a6:5f:59:2a:88:9d:ff:53:1e:c1:d8:60:4e:d3:7c:af:
         86:60:35:eb:c2:a8:bf:d6:6f:13:80:23:df:86:55:42:78:28:
         94:0a:e8:76:69:a3:a5:d6:ff:95:89:4d:d3:79:6a:2f:db:fb:
         c0:8f:32:0f:2b:8d:eb:e7:bf:0e:eb:01:29:9d:dd:df:95:bd:
         ab:52:9f:f8:53:5e:8d:8c:82:f2:68:fa:51:83:88:9d:eb:43:
         83:e1:75:89:f0:1e:c6:de:c6:97:34:82:47:0c:0b:62:ee:ef:
         60:c9:90:f9:cc:9d:7f:02:6c:08:5b:fe:95:b2:ce:f6:0f:cf:
         6c:87:38:7a:c6:e2:cc:81:06:00:de:11:da:1b:fb:4f:ac:12:
         e5:7a:00:d6:51:c8:ec:61:b6:bf:23:ca:58:64:1b:1f:4f:9d:
         67:2c:d7:15:e3:68:33:aa:ed:87:29:25:10:3b:d7:50:78:b4:
         83:87:89:d9:d1:26:92:50:a2:d7:1e:6f:0d:a7:5b:18:70:5d:
         22:94:ec:c4:df:43:0d:43:6d:b3:55:f8:3e:10:a5:8a:6f:af:
         2f:90:67:7b:35:19:90:81:05:24:48:c5:81:38:06:d4:8e:fb:
         59:b9:7d:b3:66:70:e9:25:c5:f2:b8:a8:76:22:fb:3e:57:06:
         cb:20:cc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org