Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34362e302f32332d3233203d3e203238333039.roa
File:                     3138392e33382e34362e302f32332d3233203d3e203238333039.roa (raw, json)
Hash identifier:          RNhQ7i45c7hRtAueprT9qyEqrie1FmbtZXG9zsfXqFw=
Subject key identifier:   61:80:C5:47:7C:37:DA:8A:6E:AA:4F:DD:B6:05:8D:0B:66:5A:AF:AF
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       3F05EEB3AF4B9215AAAA94BC1100BAF93DDFD5B6
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34362e302f32332d3233203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:46 +0000
ROA not before:           Thu 14 Sep 2023 18:42:46 +0000
ROA not after:            Thu 12 Sep 2024 18:47:46 +0000
asID:                     28309
IP address blocks:        189.38.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:05:ee:b3:af:4b:92:15:aa:aa:94:bc:11:00:ba:f9:3d:df:d5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:46 2023 GMT
            Not After : Sep 12 18:47:46 2024 GMT
        Subject: CN=6180C5477C37DA8A6EAA4FDDB6058D0B665AAFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7d:f0:16:2b:85:ba:2c:1a:3e:a0:3e:28:be:
                    e8:16:2b:2b:0e:e1:f1:98:6d:76:12:cc:b1:b4:54:
                    55:18:eb:58:95:58:73:98:9c:99:9a:07:67:83:20:
                    9b:0a:af:23:2d:05:f0:dc:02:41:b5:82:39:1d:94:
                    1e:3f:c3:81:a3:03:99:be:26:9e:7d:e3:7a:cd:d4:
                    7e:28:ff:7d:37:04:ef:7f:8f:dd:2d:91:7b:3e:cb:
                    b9:6e:55:76:f6:7f:65:2e:e4:d2:a2:f0:80:f6:85:
                    a3:ff:3f:dc:53:2a:ee:b5:66:12:72:e4:40:d7:53:
                    19:86:d0:74:a5:d6:68:b1:4e:50:69:ee:00:f2:99:
                    b1:98:ab:25:08:1a:51:89:c1:f2:87:ea:73:15:a1:
                    f1:70:02:75:46:db:c7:52:47:08:0c:7d:ad:a7:12:
                    f8:00:7f:5b:b7:a6:e4:d7:cc:d4:ad:cb:d4:5b:0a:
                    5d:3d:4c:14:96:5a:96:b5:dd:12:85:82:9b:4a:3d:
                    29:30:95:77:4e:98:44:40:28:28:3d:a8:14:21:52:
                    ab:dd:e8:30:1d:6a:a1:7d:b6:d0:55:3d:35:b8:f4:
                    e3:3b:8b:3a:23:e7:83:45:20:56:a3:ae:b2:af:eb:
                    1e:3c:d2:6a:ce:91:9a:7a:53:50:6b:18:0d:cb:92:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:80:C5:47:7C:37:DA:8A:6E:AA:4F:DD:B6:05:8D:0B:66:5A:AF:AF
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34362e302f32332d3233203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:92:35:72:30:6d:1a:0e:3d:fd:83:5b:c3:e9:fb:a2:8c:
         df:c9:e2:f3:6f:a4:1c:a8:ec:4c:bb:73:c9:6b:a4:d7:eb:73:
         c0:cb:4b:11:27:3f:e4:2e:be:f5:bb:08:4d:06:72:35:ac:ef:
         3a:af:ae:80:5a:9c:ec:56:44:ac:b4:0a:1d:16:7b:1c:f5:79:
         00:eb:18:78:51:29:64:13:7b:42:84:77:4e:e2:8a:e5:35:4d:
         18:7a:62:b7:d2:21:ae:75:dd:cd:cb:a4:fa:5c:60:20:cf:4d:
         04:02:c4:8e:1b:f5:3a:08:bc:48:14:ec:01:3e:45:4b:9e:27:
         f3:88:7c:ad:37:6b:c7:4e:7c:4d:f1:a7:44:8d:ec:a0:d4:24:
         ea:30:20:13:0e:f0:55:90:37:ca:3d:a2:08:48:34:64:64:a7:
         cb:00:57:0a:2a:9e:34:dd:32:6a:b0:76:2f:44:fd:0b:3e:9a:
         cd:f9:44:4b:69:22:65:ec:ec:66:a7:a3:c7:41:94:ce:2d:dd:
         a5:64:32:d7:08:0e:de:b5:b0:16:37:da:b9:61:7f:3a:8a:e0:
         b0:b3:69:5f:b6:fa:42:01:8c:e4:39:4c:a9:f0:05:3d:53:f8:
         44:b0:fb:8c:1c:db:cf:fd:13:3a:2a:5c:b3:26:41:97:7c:96:
         d5:89:f0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org