Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34362e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34362e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          yOLz+sV2XOrWRpCsGnyfHLlMJdL3JcqtJsfJTodoHS4=
Subject key identifier:   C8:4B:F3:8C:52:FC:BD:58:6B:83:4D:C4:CD:18:B0:55:2E:50:AF:9A
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       1044E4E8FEE42C7D66B60F31A587BC11328577F5
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34362e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:48 +0000
ROA not before:           Thu 14 Sep 2023 18:42:48 +0000
ROA not after:            Thu 12 Sep 2024 18:47:48 +0000
asID:                     28309
IP address blocks:        189.38.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:44:e4:e8:fe:e4:2c:7d:66:b6:0f:31:a5:87:bc:11:32:85:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:48 2023 GMT
            Not After : Sep 12 18:47:48 2024 GMT
        Subject: CN=C84BF38C52FCBD586B834DC4CD18B0552E50AF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a5:1f:da:d8:f1:fd:1f:b8:6d:8b:8d:f8:7f:
                    8c:0d:5f:b6:fb:87:ce:82:cf:f3:41:09:b4:87:6f:
                    34:2a:07:a2:98:79:03:db:1f:8f:44:05:59:f4:dd:
                    69:20:c6:73:81:75:ab:d2:a0:6d:3d:02:7b:0f:ba:
                    8a:52:02:c9:a7:0b:27:90:ec:a2:81:97:6b:d5:46:
                    72:ad:27:a9:f9:b4:a8:74:28:5a:a2:8c:91:69:f0:
                    fd:8f:f7:12:2e:42:fd:f1:83:2d:e7:64:bf:41:0e:
                    a4:cd:9e:7e:49:b3:6d:29:e6:5d:04:04:72:4c:42:
                    e0:82:4c:a2:d6:7a:7e:83:b0:e4:d5:a2:64:cb:f9:
                    e0:7d:0b:f2:c6:62:cf:1c:77:02:43:af:12:fe:65:
                    42:ca:d7:99:48:87:0e:c2:c0:ae:cb:2d:c8:77:d1:
                    39:d0:dc:2d:76:f0:66:98:d2:b3:fe:8f:67:e5:7e:
                    c4:ba:e7:b6:ab:bf:b2:eb:90:4d:e9:e6:dd:af:14:
                    b8:3d:19:15:bf:dd:75:a9:c8:6a:8a:84:58:bc:20:
                    11:2a:63:11:3c:1b:d6:5b:91:a8:20:f6:db:22:2f:
                    9e:ae:ae:f2:40:93:b9:f3:01:5a:63:8c:ae:e6:6d:
                    93:fb:70:81:b1:b2:ed:f1:78:da:ca:43:a4:25:04:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4B:F3:8C:52:FC:BD:58:6B:83:4D:C4:CD:18:B0:55:2E:50:AF:9A
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34362e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:02:5c:48:9b:74:99:80:18:bc:d8:c3:c7:38:1d:70:fa:a1:
         1b:5b:60:c4:06:46:ab:1b:5c:0f:f7:d1:a4:4a:06:c9:c2:60:
         dc:4b:29:8f:c6:ff:0d:14:34:2c:a5:bc:a9:31:8d:12:6d:7d:
         40:b0:aa:e1:38:4a:5c:3e:16:74:07:6f:c4:f2:be:24:25:1a:
         2c:97:f4:d5:f6:3e:db:4a:7d:1a:b7:c5:04:fa:be:56:93:a7:
         c1:97:e6:89:63:cf:ab:a4:7f:e7:04:f3:78:03:c7:3d:29:1d:
         ad:1f:e2:4f:a5:ef:bd:37:d3:ab:04:56:aa:dd:aa:53:73:8e:
         81:2e:cd:9c:6e:94:60:07:bf:bd:bf:52:7d:45:92:fb:13:6e:
         bb:b7:38:56:a7:57:a8:3f:20:99:94:8c:c0:3a:4a:7d:84:00:
         8e:93:95:73:7d:0a:f5:7a:e4:1f:84:2e:4d:61:bb:73:3b:d3:
         35:e9:f8:18:21:50:13:74:84:2f:d3:93:fb:a6:1f:8e:92:08:
         92:bd:61:1a:89:44:b9:0c:1e:5a:94:fe:66:1a:aa:fe:07:19:
         2b:f9:a2:6c:9d:53:1b:cd:70:48:55:00:e6:a2:a7:18:a7:70:
         20:6a:71:88:53:39:61:9b:72:04:e8:0c:b9:80:3d:01:7f:bf:
         dc:88:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org