Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34342e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          wMYO1yBEMAhW7wf/sZcBsiDQsbSdKRieFI/tcEMNVGo=
Subject key identifier:   79:13:0E:1F:D0:BB:6E:2F:20:51:1A:06:C4:4A:E3:D7:98:F8:E9:CE
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       580BF173EBB94A6570039AE136C6BDEEF2721544
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:50 +0000
ROA not before:           Thu 14 Sep 2023 18:42:50 +0000
ROA not after:            Thu 12 Sep 2024 18:47:50 +0000
asID:                     28309
IP address blocks:        189.38.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:0b:f1:73:eb:b9:4a:65:70:03:9a:e1:36:c6:bd:ee:f2:72:15:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:50 2023 GMT
            Not After : Sep 12 18:47:50 2024 GMT
        Subject: CN=79130E1FD0BB6E2F20511A06C44AE3D798F8E9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:ea:a6:28:aa:8f:99:44:83:cb:33:e0:9a:
                    ed:b0:7c:03:9e:c8:4d:e6:f1:9f:d8:e8:28:d2:00:
                    0b:df:98:5f:61:ef:87:95:f0:3b:45:53:d7:1f:98:
                    30:41:58:c0:af:7d:9a:42:5d:4f:7d:1f:1b:a7:d7:
                    77:63:78:fb:1b:96:ed:f4:91:0e:4f:b0:56:d2:39:
                    7d:6d:28:39:43:49:1e:9b:bc:93:37:b2:8b:c2:22:
                    54:6b:30:2d:e2:09:4d:cc:31:84:09:06:11:43:88:
                    4d:d4:93:0e:cc:97:8a:23:af:09:69:df:07:86:6e:
                    29:30:8f:0b:11:cb:9c:02:16:c0:a6:cb:47:01:15:
                    14:e6:ed:06:fd:bb:d3:8c:8f:ae:a6:26:cd:1c:0e:
                    68:7c:a3:5c:c1:0d:59:18:5f:a7:8b:bc:35:50:53:
                    5e:99:16:c4:cc:48:1a:d0:4e:f6:42:75:cc:f0:4d:
                    c5:db:73:ac:75:09:68:54:e6:bf:9b:12:3d:e8:d7:
                    8a:dc:cc:cf:6b:a7:e8:f1:9c:07:ab:76:82:11:6a:
                    bb:c5:64:b0:0c:69:4c:88:19:27:ac:e9:d9:54:c9:
                    02:19:ae:12:7c:81:fc:69:89:b7:89:c1:d3:88:be:
                    c0:53:6f:25:2e:b3:67:5d:1f:fe:55:70:b2:bc:fb:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:13:0E:1F:D0:BB:6E:2F:20:51:1A:06:C4:4A:E3:D7:98:F8:E9:CE
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34342e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:46:ed:ed:98:f9:eb:49:99:b8:4a:d6:91:10:62:2c:2c:
         7f:69:67:03:1e:5b:38:93:ab:65:4d:a0:78:33:8d:dd:06:9f:
         57:7e:7d:a0:e5:ec:a5:8a:26:cb:20:4c:e8:78:30:aa:06:d1:
         74:00:8f:2d:6c:d0:5e:c2:4f:b9:44:9c:5a:5d:ec:be:c8:27:
         e6:28:9d:18:76:e9:d3:4c:d2:cc:46:06:db:55:d6:df:43:98:
         76:46:f8:dd:8b:70:97:9a:ce:8f:c8:e7:11:0f:b8:f7:26:1f:
         9f:99:25:cc:78:33:5d:4e:94:1d:fb:58:dc:7a:f9:04:f1:1c:
         82:63:a8:ca:4e:32:99:00:80:2e:e7:4a:c4:5c:3c:36:18:26:
         10:9c:d9:67:43:94:a4:83:e7:04:21:d7:8c:d2:72:62:e4:b3:
         b2:64:fb:3d:e4:f0:50:ad:42:99:b4:1f:97:60:b7:e1:62:a2:
         29:59:42:cf:1b:bc:a3:b7:a0:88:41:34:5b:f5:84:1b:3b:f2:
         73:31:f1:69:42:63:ac:2b:b5:db:55:e1:0d:e6:9c:41:8c:c8:
         83:2d:b6:ec:20:ee:1b:a1:c9:09:39:50:ed:aa:0e:ed:a1:3b:
         49:88:a4:09:91:a7:da:f2:b7:12:ee:6c:dc:f8:b9:8c:9d:d6:
         38:57:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org