Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32352e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          +4wlNG52gEsl+oJD2k4n0p6jorgNX2U0wv+TZZeZDJA=
Subject key identifier:   C7:45:15:B6:32:5C:F2:C1:19:B9:FF:BC:73:FD:57:50:91:EA:F0:28
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       6C80CC0D9C8313D651C4E779038801F88FAC7920
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32352e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     28338
IP address blocks:        177.87.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:cc:0d:9c:83:13:d6:51:c4:e7:79:03:88:01:f8:8f:ac:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:80:78:f7:21:58:d5:3b:36:3d:e4:e8:d3:
                    d7:29:10:1f:84:f8:0e:02:00:f6:cb:31:28:b0:63:
                    3a:2c:6e:ef:65:47:31:bd:e9:49:ae:e0:07:f3:22:
                    98:3a:cf:19:b9:72:79:75:eb:3a:98:48:78:dd:29:
                    ef:54:64:38:a8:41:a8:49:4d:1c:57:c2:e1:32:1f:
                    50:2b:09:fa:e2:28:10:8f:bc:e6:3f:c5:2a:98:71:
                    b9:78:4c:6d:f2:e6:37:7d:89:53:78:96:cd:25:3b:
                    48:2b:16:09:62:a2:76:8a:4e:56:83:7d:69:4b:f1:
                    6f:26:3d:cd:ba:40:5b:da:ca:cb:60:e2:cf:98:92:
                    4c:10:a5:6c:ea:66:63:5f:68:30:89:86:01:14:a5:
                    6e:f9:59:35:52:e8:34:f8:8a:d1:a2:64:48:fa:af:
                    9b:1b:0d:1b:85:97:95:fb:f7:66:7d:4c:82:f5:d6:
                    8c:09:ff:d7:ba:f5:e7:2e:5c:b8:60:e6:6c:f6:70:
                    65:18:a2:17:cd:61:da:43:8e:d0:29:4e:e9:0b:1f:
                    36:06:3f:53:4d:7c:1e:6b:56:e9:b2:15:77:a9:b4:
                    53:89:9b:26:a8:af:ff:b4:97:00:df:60:74:6a:e5:
                    3c:b4:32:dd:b3:af:ba:fc:af:d5:37:ff:a1:20:06:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:15:B6:32:5C:F2:C1:19:B9:FF:BC:73:FD:57:50:91:EA:F0:28
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:c8:6f:b3:af:c7:0c:4f:ae:6b:da:ee:93:e7:63:02:57:
         99:ca:00:a3:9b:90:51:4c:aa:b6:6c:9f:1b:f5:aa:32:b4:17:
         ae:60:88:ed:24:95:d7:bc:28:31:3d:6f:0c:56:8c:11:76:89:
         15:fe:ee:ae:be:fb:33:6a:74:bc:f1:89:18:a3:82:1c:81:2d:
         c4:2a:fc:5d:9a:ff:40:01:2e:e7:fd:3e:d2:78:89:c3:4f:f8:
         b1:17:9c:d6:23:46:27:82:56:e5:d7:18:64:f2:3f:76:b8:ea:
         8d:d5:4a:77:d9:93:00:28:6f:e2:6e:15:9f:75:2c:68:5c:c5:
         cb:fe:e4:97:70:ed:93:9c:03:d0:b1:9c:10:66:66:8e:72:19:
         d8:02:96:86:ee:8e:72:fc:56:08:1d:ed:c5:7a:ba:aa:4b:11:
         8a:4c:6a:02:7c:b5:cb:3e:9e:e2:87:3e:46:cf:b0:95:a5:73:
         04:db:3d:ee:b1:8c:74:d2:ac:8a:a5:9c:8f:ee:f2:56:37:c5:
         e5:a1:90:b0:d5:40:35:3e:76:56:60:e0:e9:4f:91:56:cc:c0:
         8f:b9:73:1f:6b:14:31:74:de:9c:f0:3b:6c:81:47:fd:8d:ec:
         6b:c5:6e:b8:5f:7b:de:a9:90:52:64:20:d3:8f:0a:2c:6d:75:
         18:14:ca:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org