Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32362e302f32342d3234203d3e203238333338.roa
File:                     3137372e38372e32362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          NQFW8/SYh+GnRLsuy2a7Vl4lhJEc/SlfPnnyp9fFYlU=
Subject key identifier:   9C:6A:B6:58:C0:06:BB:1D:EA:B9:B6:8B:43:0B:51:33:E3:04:81:62
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       34545C366190E295853EB770EA047811876D8122
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32362e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     28338
IP address blocks:        177.87.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:5c:36:61:90:e2:95:85:3e:b7:70:ea:04:78:11:87:6d:81:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:28:99:58:26:35:25:57:b0:e5:1e:60:72:
                    cd:c0:ab:32:89:43:e8:07:46:2c:0a:57:4e:6e:da:
                    e7:5c:e3:e7:69:c4:31:7c:75:48:3a:91:4c:63:6c:
                    27:0f:cd:69:69:c4:50:8e:9b:c3:3e:2b:21:f3:43:
                    f9:b8:1c:5a:c4:7c:02:72:b4:3b:c0:a4:46:f1:9b:
                    68:88:68:f6:1d:d9:84:29:c2:72:8b:fd:b0:b5:a0:
                    22:04:e6:2c:e1:2b:1d:ed:2e:89:45:e5:af:24:03:
                    2c:8a:77:f3:1e:c7:49:0c:e8:03:27:db:cc:ae:1f:
                    1a:2a:17:4b:8b:66:e7:e0:63:3f:94:3b:c7:6d:08:
                    a4:e5:6f:5c:87:a0:33:ef:bb:7b:3e:94:b9:1f:e5:
                    7f:25:05:50:29:44:06:3f:e4:ef:07:2c:28:65:8a:
                    bb:47:c9:dc:cb:94:3c:8d:09:3c:b2:cd:19:c7:0a:
                    b4:04:fd:02:0c:5a:ce:fd:02:75:a5:34:9a:1a:e0:
                    c6:cc:eb:fe:90:37:9d:14:15:a3:89:3a:56:d7:fe:
                    cd:34:f0:09:4b:3b:b7:20:f6:5e:c3:e9:0d:24:6c:
                    86:f6:c9:4b:eb:8f:ff:4d:10:66:dc:85:66:0b:cc:
                    8c:7f:f9:ad:64:c3:0d:28:86:e8:81:c4:20:48:69:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:B6:58:C0:06:BB:1D:EA:B9:B6:8B:43:0B:51:33:E3:04:81:62
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3137372e38372e32362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:21:85:3f:3a:15:af:b9:85:ce:54:b4:07:8a:11:63:6f:
         55:63:14:02:df:3b:da:ec:36:2e:c8:be:48:03:eb:48:59:83:
         58:0a:e2:39:84:28:a0:0d:14:42:f3:4d:2d:c7:47:f6:a5:83:
         f7:d3:bd:2b:b2:95:79:cb:61:cd:ec:14:4f:c5:82:00:ee:ce:
         9a:9f:da:95:45:eb:b7:26:d5:64:37:7f:17:c3:7b:87:b4:35:
         5f:e7:27:9f:26:7d:0a:d8:95:66:c6:9d:fd:d0:4b:d8:d1:7b:
         06:d7:9d:a6:01:6f:04:76:dd:41:83:f5:31:e5:d0:f4:29:bd:
         69:07:a8:3c:99:1f:88:52:ba:d1:bd:d6:cf:f0:69:fd:06:2e:
         dd:a9:7b:9d:02:5b:f5:95:d6:25:1b:5a:31:83:bd:1f:49:81:
         30:2f:56:36:fe:d1:28:ae:33:fa:d1:aa:2c:d6:7d:18:e4:08:
         22:b8:a8:4b:b8:52:e0:99:40:a2:82:a2:e0:33:f0:d9:0e:23:
         b1:e4:64:24:09:e9:3b:f4:46:91:1a:60:00:c2:12:11:29:29:
         8d:93:ad:3b:a4:79:20:ad:28:5e:4f:1e:70:db:a2:60:d4:4f:
         02:4b:0c:19:22:76:e4:1b:b6:e1:c1:a8:9e:02:9b:22:95:ad:
         17:f8:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org