Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e302e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          OVa5Q9otoK62AfW/5J8sRFjqm2xN0FrzvLhNGlD2Ys0=
Subject key identifier:   30:D8:17:D4:8E:67:7A:26:5C:4F:A7:CE:60:14:49:79:B4:83:0B:96
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       328CC64FC77F33CE8BFE46DCDAB7CD5DB619511D
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e302e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 17:00:00 +0000
ROA not before:           Tue 05 Mar 2024 16:55:00 +0000
ROA not after:            Tue 04 Mar 2025 17:00:00 +0000
asID:                     28338
IP address blocks:        189.45.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8c:c6:4f:c7:7f:33:ce:8b:fe:46:dc:da:b7:cd:5d:b6:19:51:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 16:55:00 2024 GMT
            Not After : Mar  4 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:a6:6b:9e:ce:20:b0:5c:e4:30:9d:12:9b:
                    b6:9f:42:28:1a:6a:72:6b:e9:ec:15:2d:6c:e2:d7:
                    21:cc:8b:43:21:31:86:57:4e:af:22:f2:38:96:3d:
                    01:cf:b3:9d:90:ff:fd:74:2c:5a:df:19:cf:b6:16:
                    74:70:70:ab:2d:92:49:b8:68:66:31:87:81:6b:dc:
                    c4:ff:60:50:b2:98:65:f3:b4:71:2e:af:69:4a:8d:
                    22:36:69:af:47:2f:c4:db:57:3a:16:1f:a0:dc:5a:
                    92:d7:b5:56:2e:1a:d2:4a:66:a7:ac:9b:d3:e1:6f:
                    ea:4d:2e:b6:84:b9:f6:8b:a1:fb:ac:0c:d1:93:fa:
                    f3:b3:7a:e0:d3:27:e3:aa:b1:ce:4f:e8:46:9c:16:
                    d5:eb:82:d2:45:b9:c9:91:63:77:30:fe:47:02:7a:
                    5d:00:d1:65:e7:28:cf:24:be:76:86:c9:bb:69:d6:
                    ee:7e:dc:82:51:e0:0d:70:22:bd:92:a9:c5:16:b8:
                    6e:d1:6d:fe:a3:f2:de:5f:b7:a2:83:ef:f1:d9:96:
                    38:4e:cc:b6:ae:76:1b:62:b1:6d:94:ff:65:70:26:
                    4f:2c:6e:33:eb:ec:14:1f:63:9f:81:87:76:f4:a1:
                    e0:fb:30:1d:30:1d:90:8e:1f:c2:70:5e:a0:ab:7c:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:17:D4:8E:67:7A:26:5C:4F:A7:CE:60:14:49:79:B4:83:0B:96
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:30:2e:d2:d1:b5:71:b0:31:6c:24:78:3d:0e:8b:18:6a:
         4d:1b:80:83:ad:b1:bb:d7:3c:b4:39:81:9f:af:df:16:b3:20:
         df:9c:7b:19:d0:51:eb:72:53:a1:46:5a:fc:32:77:78:48:0c:
         e4:c2:67:70:11:7c:59:05:00:d4:f9:b6:3b:20:84:89:d6:e7:
         6a:b2:db:89:6a:8f:8d:54:89:fd:42:c5:ff:95:70:8e:01:76:
         4f:c6:6c:e0:f7:af:c0:cb:05:c8:cb:4d:7f:de:62:17:02:9f:
         f9:61:49:38:6e:ac:5b:78:c7:16:0b:c2:ed:48:8a:2d:33:1a:
         b9:16:3d:04:ce:82:46:f7:81:9e:fd:bd:8b:cc:03:3c:36:25:
         6c:da:d1:56:c8:b8:fa:94:b5:31:21:52:08:6f:63:1a:2f:f3:
         14:d9:2d:d8:c5:6e:08:88:6f:fd:30:66:8b:ae:c8:4d:b7:e0:
         df:04:7c:79:fe:4f:8d:0c:76:ff:9c:9c:d3:55:d1:a1:6a:d7:
         ab:f9:d9:38:2f:10:34:a0:d9:42:63:59:d2:00:04:9b:27:04:
         27:1c:50:ea:f4:0e:22:e8:7d:7b:58:7d:b5:8c:15:6f:8d:e2:
         b4:e8:60:9c:83:20:0e:21:4f:d4:5f:c9:5b:36:9e:67:65:fd:
         4f:bf:57:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org