Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34352e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34352e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          7TTrPjzYs+bo/HAqsL0RJdgdmgUsvbPlHbu3yZUYMUM=
Subject key identifier:   50:88:5E:51:E6:7F:CB:4E:B4:A4:52:F5:01:C0:C5:1D:93:CD:95:4E
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       4D4E8C3D77BCB43E9B4565495F05801FB29C3B24
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34352e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:47 +0000
ROA not before:           Thu 14 Sep 2023 18:42:47 +0000
ROA not after:            Thu 12 Sep 2024 18:47:47 +0000
asID:                     28309
IP address blocks:        189.38.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4e:8c:3d:77:bc:b4:3e:9b:45:65:49:5f:05:80:1f:b2:9c:3b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:47 2023 GMT
            Not After : Sep 12 18:47:47 2024 GMT
        Subject: CN=50885E51E67FCB4EB4A452F501C0C51D93CD954E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:76:e1:b1:02:cf:28:de:ef:0e:be:b4:a5:
                    b2:47:b8:71:9c:01:31:4e:48:cb:68:d6:c6:8d:bb:
                    cf:7d:af:7c:a1:cf:e1:1b:e2:6c:84:db:b7:88:33:
                    ba:48:18:a0:b4:2e:ad:7d:39:f2:50:95:21:5b:08:
                    31:c4:64:fa:84:b9:b0:b9:bd:83:1d:e3:8d:ed:89:
                    9b:eb:57:ac:15:42:d1:19:b9:76:4c:9e:a1:68:a2:
                    04:fe:1d:18:7c:08:d4:23:62:56:ef:ad:6c:eb:dc:
                    19:7a:73:74:20:0f:78:91:cf:cf:0b:2c:8a:68:85:
                    3b:ea:2e:89:3b:e4:1f:4d:1b:bf:80:f2:64:6f:e3:
                    67:da:66:61:53:24:f3:fa:f9:a2:29:0d:8f:2b:ac:
                    bd:27:77:a1:b2:d9:d4:d6:7b:67:62:88:ba:7f:0f:
                    15:a5:42:aa:d6:63:35:a8:5a:a7:0c:91:68:0a:b2:
                    7d:12:fa:d1:76:ad:11:88:b9:ca:5e:70:af:e0:78:
                    6f:8d:a6:ce:3e:b1:b7:0d:80:09:b8:dd:8d:ae:c1:
                    ea:26:97:8f:21:e1:c9:a6:fc:ae:7d:0d:e7:90:a5:
                    28:4e:39:48:74:57:6c:f6:64:25:de:ae:d2:64:f0:
                    01:7d:84:7c:de:38:35:48:7e:7c:36:a1:9c:ff:2e:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:88:5E:51:E6:7F:CB:4E:B4:A4:52:F5:01:C0:C5:1D:93:CD:95:4E
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34352e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:09:09:55:b0:97:c3:b7:2e:e5:ba:8b:a6:f9:3f:4b:94:49:
         3f:0e:ef:04:0f:c1:df:8a:f9:31:c1:28:de:2d:03:9f:23:5a:
         f6:2e:21:5b:47:09:2a:75:c5:14:5e:b2:49:5f:c9:91:ad:8c:
         df:6f:af:e1:cc:86:a1:1f:86:85:02:af:39:ff:9c:14:3d:6d:
         b6:ec:69:a0:44:10:9b:7e:8a:e9:2d:7a:5e:50:39:91:70:a4:
         a1:bf:3d:13:19:48:3a:3f:ff:d8:32:95:26:3f:a5:95:65:e0:
         b1:3a:43:46:8a:fc:d6:89:4b:3d:95:52:fc:74:8e:70:35:50:
         72:3a:80:09:b7:76:e5:d3:d0:1e:eb:9b:80:53:73:5b:73:dd:
         d6:86:f8:18:30:49:05:14:b0:38:d4:c3:40:c3:68:4f:d9:5a:
         83:fe:44:e1:84:59:dd:89:f6:f4:76:f0:c1:33:4a:6c:3f:58:
         ed:5d:91:c2:cc:e2:bd:d0:1e:1c:cd:fc:86:88:ad:c8:3e:e0:
         51:61:96:d4:65:9d:53:94:5e:3c:9a:bd:9a:cd:0a:25:9a:18:
         8b:55:2c:ae:bc:be:20:25:d6:e1:77:dd:4d:85:c2:b0:2d:c9:
         00:03:ee:87:21:9d:a9:4b:59:36:62:9f:9f:54:58:67:0d:c5:
         e1:1e:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org