Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e34342e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          2Gx2CKlwv62EWwoue6M0H/EEyp1tN1h5euiHuuDdzt0=
Subject key identifier:   63:F9:C9:8B:C6:76:75:45:A6:54:05:60:1C:4C:CB:59:96:EE:D8:F0
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       07F4257E2A1AFF755BECD47792E69968B4A9EB8A
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:43 +0000
ROA not before:           Thu 14 Sep 2023 18:42:43 +0000
ROA not after:            Thu 12 Sep 2024 18:47:43 +0000
asID:                     28309
IP address blocks:        189.38.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f4:25:7e:2a:1a:ff:75:5b:ec:d4:77:92:e6:99:68:b4:a9:eb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:43 2023 GMT
            Not After : Sep 12 18:47:43 2024 GMT
        Subject: CN=63F9C98BC6767545A65405601C4CCB5996EED8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:65:28:2d:03:99:10:39:ca:64:fa:9d:d5:e4:
                    59:59:84:9a:99:aa:14:fa:03:f6:cb:ec:b7:d9:32:
                    61:b6:75:9e:e5:c3:c6:d6:24:e9:72:6b:44:23:01:
                    05:38:c0:6a:a9:5e:8d:5f:87:75:b8:b3:1a:c8:71:
                    1b:4f:91:3d:08:97:42:d5:35:ad:d3:6a:d0:52:b3:
                    a5:78:04:c3:6b:3a:31:c0:f1:c8:38:4c:bc:f5:c3:
                    6b:d3:29:d5:13:ff:c4:dd:29:09:a7:9e:6e:a9:91:
                    d0:e5:1a:95:a4:b8:15:cb:b7:c5:fd:b9:68:08:ed:
                    2b:47:7e:a2:83:53:17:8d:ab:b2:47:82:5e:70:be:
                    a8:5a:82:d8:da:6e:ee:a6:a8:72:bc:dd:80:f3:70:
                    98:e8:f3:47:03:64:cd:63:1a:39:70:75:d8:71:dd:
                    1a:90:6c:99:00:68:11:df:c9:e8:b9:ee:22:05:ec:
                    c6:16:11:8b:38:64:07:5d:a9:0f:f3:3d:d3:13:b2:
                    94:12:d9:25:2f:b8:d1:91:52:60:9b:4c:07:14:bd:
                    72:14:42:ef:0d:35:53:15:f0:d6:96:9f:5e:20:7c:
                    bb:0b:5b:29:03:e7:92:41:14:cc:c2:55:4f:0b:15:
                    ca:f9:a6:6d:dc:c3:57:c3:45:ca:6b:21:c6:17:25:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F9:C9:8B:C6:76:75:45:A6:54:05:60:1C:4C:CB:59:96:EE:D8:F0
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:30:09:89:b8:9f:6c:95:e0:2c:69:e2:e1:4d:aa:9d:6c:
         5e:0f:71:3f:ea:d2:bb:70:29:26:22:53:15:00:fc:a0:ec:6e:
         f6:a0:12:6c:95:12:82:fd:09:7e:95:23:9e:03:16:27:3d:14:
         47:dd:49:33:62:30:60:17:e9:43:0e:35:3d:99:96:8f:df:c7:
         dd:42:f0:ab:9e:ea:33:e3:cc:65:d6:f6:cb:04:8e:36:a2:c9:
         22:4d:c0:98:25:67:18:87:26:b9:f3:34:88:37:4d:6a:96:67:
         ad:76:13:ed:17:3e:b8:1f:9d:fa:5a:65:47:93:77:52:fd:72:
         88:64:60:31:3e:da:7f:21:0a:b8:09:7b:2e:24:79:c8:ba:85:
         ee:0f:9b:5c:1d:6a:7d:dc:fd:9a:4d:5a:a1:0e:8f:52:46:6b:
         6d:09:b2:89:55:ac:27:9b:68:de:8c:78:3d:5f:13:71:d9:4a:
         08:8c:c3:0d:71:72:b3:af:8f:c3:57:cc:de:0e:d7:e0:63:1b:
         ac:7d:6a:e1:57:ce:83:d4:e1:10:ba:d7:77:53:6d:5f:b9:97:
         18:2b:7c:99:84:2c:7d:8f:11:d0:5e:33:da:fd:0e:17:70:c2:
         c9:6c:0e:9c:8b:9c:07:02:0d:ff:88:ea:69:02:76:e1:b4:d0:
         8a:b3:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org