Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34372e302f32342d3234203d3e203238333039.roa
File:                     3138392e33382e34372e302f32342d3234203d3e203238333039.roa (raw, json)
Hash identifier:          4D1c10lK15/52lDU2jGy5Oxck7+tlvM2mAH1tIfifXA=
Subject key identifier:   03:50:B6:F9:34:CE:B2:6D:22:D6:4C:0A:A7:FC:98:C7:A2:84:DB:A1
Certificate issuer:       /CN=61DF0BAB5B1E0942B264773D0F55A44166659326
Certificate serial:       738791FF7C644ADF6AD5D611A19C84232C282866
Authority key identifier: 61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34372e302f32342d3234203d3e203238333039.roa
Signing time:             Thu 14 Sep 2023 18:47:49 +0000
ROA not before:           Thu 14 Sep 2023 18:42:49 +0000
ROA not after:            Thu 12 Sep 2024 18:47:49 +0000
asID:                     28309
IP address blocks:        189.38.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:87:91:ff:7c:64:4a:df:6a:d5:d6:11:a1:9c:84:23:2c:28:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Validity
            Not Before: Sep 14 18:42:49 2023 GMT
            Not After : Sep 12 18:47:49 2024 GMT
        Subject: CN=0350B6F934CEB26D22D64C0AA7FC98C7A284DBA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:30:cb:c7:d8:f8:c6:22:6a:b3:5a:77:4b:
                    71:92:85:f2:37:28:73:aa:65:98:bb:ba:43:64:37:
                    e7:96:b0:e0:23:ca:c5:9a:42:e1:90:06:f8:b3:55:
                    e0:b3:be:0a:a4:8f:cb:33:0b:39:ad:05:85:24:fa:
                    94:91:26:ba:05:88:9c:05:8a:22:84:38:4d:42:e8:
                    67:3e:3d:cd:90:2c:80:6d:a5:fa:c9:a5:ba:28:a9:
                    55:d5:1a:32:a9:28:76:fa:b5:45:2b:3e:5d:7f:ca:
                    4b:26:2a:b3:73:20:cc:57:98:49:01:f1:51:3c:68:
                    56:66:ba:3f:20:30:aa:96:30:87:16:e0:ec:df:f7:
                    05:6f:81:8c:8d:0e:aa:4d:2c:18:c1:5c:53:07:6c:
                    af:67:dd:ae:08:2f:bf:67:d1:73:4c:38:f1:0c:0f:
                    4a:6b:aa:1a:c9:27:91:7f:f0:6d:3e:05:2f:00:b8:
                    b1:74:95:90:34:b3:3d:a1:c1:0f:8f:51:9a:f8:45:
                    1f:c2:67:14:23:99:01:a6:91:06:cb:7a:00:8b:6a:
                    de:7f:43:3c:95:63:52:9c:59:01:2d:f2:d1:9a:a8:
                    88:39:88:89:2b:f3:a3:26:66:63:c6:e0:df:c8:1c:
                    16:67:d6:b2:56:49:fd:0b:25:56:6c:ce:57:9e:97:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:50:B6:F9:34:CE:B2:6D:22:D6:4C:0A:A7:FC:98:C7:A2:84:DB:A1
            X509v3 Authority Key Identifier:
                keyid:61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/3138392e33382e34372e302f32342d3234203d3e203238333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:f6:80:b3:3e:c0:08:6b:35:7e:69:30:6c:81:75:5e:f9:
         9a:fe:b1:8d:fe:a9:ad:3d:48:00:95:45:87:82:13:62:75:fc:
         58:7c:dd:04:f0:ea:5c:99:f4:28:34:c7:34:3c:e3:2f:55:8a:
         bb:d5:0f:7d:20:20:28:45:e8:e8:61:c2:ed:43:46:cc:0b:df:
         b0:96:9d:48:e0:6c:cf:b0:62:2e:ee:91:a3:48:99:41:ee:68:
         d8:0a:e0:20:8a:dd:9e:68:bd:9a:e9:1e:48:4d:49:35:62:61:
         d2:89:5c:98:6a:52:a6:e6:14:96:4f:10:55:7d:8c:b0:b2:eb:
         5b:9b:3f:39:93:ff:88:65:ed:7a:77:13:e5:c1:ae:b8:70:4c:
         ae:b9:64:a9:f5:9a:aa:f0:d2:55:a8:2d:e9:0b:35:5b:4e:65:
         09:e9:ef:1d:73:7b:5d:b5:74:fb:94:cf:b3:cc:eb:a3:44:4c:
         54:58:e7:08:cd:c4:5d:33:7f:0f:28:02:12:4b:89:14:27:61:
         82:c5:5a:44:04:84:d6:c1:7b:f6:bd:e2:ca:f8:b5:4a:e1:11:
         dd:6e:a9:ef:13:61:12:b2:cb:88:59:25:70:58:97:c9:a0:ff:
         29:9c:dc:27:81:ec:22:2b:13:50:65:20:a5:0c:b4:f3:c2:d4:
         86:ac:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org