Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e302e302f32302d3230203d3e203238333338.roa
File:                     3138392e34352e302e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          OfgNisMdCky0+ZPjpKNXYHyfF7DRwXT6EAGLGVK5UcE=
Subject key identifier:   73:8A:85:12:32:A3:D2:7A:E6:14:C4:D1:82:79:B5:6D:A6:F8:CA:F4
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       6E3976A8FD3C50716BA7C233FDD228A7A7150B00
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e302e302f32302d3230203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 16:00:00 +0000
ROA not before:           Tue 05 Mar 2024 15:55:00 +0000
ROA not after:            Tue 04 Mar 2025 16:00:00 +0000
asID:                     28338
IP address blocks:        189.45.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:39:76:a8:fd:3c:50:71:6b:a7:c2:33:fd:d2:28:a7:a7:15:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 15:55:00 2024 GMT
            Not After : Mar  4 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:c3:96:da:f6:56:e6:e3:a0:17:d8:25:4b:
                    91:08:96:b6:79:10:72:03:f5:32:50:a6:76:91:e1:
                    93:f4:b8:4f:9e:06:76:d5:a3:c4:d8:3a:42:25:6d:
                    9a:17:19:5b:05:2e:5a:fc:9c:e7:4f:28:c0:aa:cc:
                    4a:6c:89:55:7c:e8:74:19:93:a2:af:96:8a:2b:2d:
                    47:8c:2e:47:ab:ff:28:68:d6:9d:55:b0:6f:2e:a7:
                    9e:21:45:87:ed:08:30:fe:98:39:0a:ca:9b:26:da:
                    ff:21:3c:83:7e:0a:da:b7:2c:ea:85:2b:d9:5f:11:
                    e9:33:a4:63:1e:d9:ab:ff:1a:77:20:e7:36:0f:5a:
                    7f:92:8b:7e:7b:a1:8d:5f:c4:86:73:64:2d:da:5a:
                    dd:f2:b0:54:48:bf:52:30:ec:bf:e0:8b:f0:ec:06:
                    95:25:eb:c9:ff:9d:02:a1:13:8a:07:d1:5a:22:cc:
                    61:08:77:a5:f8:3c:0d:16:ec:cc:cc:54:11:9c:57:
                    ab:f2:31:89:2e:81:a7:c3:a9:da:70:b0:52:73:6a:
                    61:04:65:ba:64:2f:c6:19:fd:fa:7b:ad:9d:cd:8d:
                    8e:f8:ed:7b:2b:5b:f9:a9:23:23:f5:c4:89:2e:e8:
                    5d:50:59:5d:c9:ba:43:cd:23:e8:93:c5:bf:96:dd:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:85:12:32:A3:D2:7A:E6:14:C4:D1:82:79:B5:6D:A6:F8:CA:F4
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e302e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:3f:4a:7d:d4:c3:37:85:7e:d1:09:3e:64:36:36:5f:ad:
         00:f1:fc:31:1a:45:e5:29:d3:95:ae:71:c7:b6:a1:86:49:cf:
         cd:7a:98:29:25:93:91:f2:61:1c:99:fd:71:56:1f:77:c9:9e:
         bf:1e:79:53:e5:12:ec:fb:d9:03:23:00:12:13:2b:84:de:32:
         7c:a8:6b:cf:76:3b:88:54:05:9c:a8:fd:d3:ba:b7:71:ff:81:
         10:fc:ec:d0:6d:3f:35:74:cf:08:64:93:bf:1d:d6:41:c8:22:
         b9:1f:12:12:9e:37:c5:2a:51:fc:82:38:09:5a:a6:52:a3:ed:
         14:c2:35:46:7b:8b:c7:0f:2e:81:13:fb:e4:4c:f6:d6:ca:8f:
         2f:ba:4c:58:72:dc:60:0c:18:c7:87:fe:4d:5e:9d:37:6e:63:
         d7:dd:5f:12:bd:d3:83:e5:d5:29:c7:82:25:2d:bb:47:9e:7f:
         b2:25:40:96:8f:66:ab:eb:45:4b:b0:e5:62:bc:c2:2b:67:d9:
         fd:88:1f:c4:1d:cb:5f:d1:6a:3a:5e:ca:36:34:f1:56:21:6c:
         fb:24:ab:2e:a0:a3:4d:04:2a:b7:d4:a3:98:d5:44:2f:06:25:
         ca:ce:97:b9:29:f5:db:62:ca:1b:7c:8b:a0:5d:b5:1a:35:af:
         c2:95:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org