Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e312e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e312e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          tV86g3JE1nTuW3Q/06p2Iwffn3MsKsOHGp7NPW2o/Lw=
Subject key identifier:   41:34:30:E1:74:E1:4F:3B:74:DB:3E:E4:55:1B:05:14:BD:09:C3:58
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       27E0838839B93D327181914AEFC12325FE9C247E
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e312e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 16:00:00 +0000
ROA not before:           Tue 05 Mar 2024 15:55:00 +0000
ROA not after:            Tue 04 Mar 2025 16:00:00 +0000
asID:                     28338
IP address blocks:        189.45.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:e0:83:88:39:b9:3d:32:71:81:91:4a:ef:c1:23:25:fe:9c:24:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 15:55:00 2024 GMT
            Not After : Mar  4 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:8e:f6:b4:1f:c7:ea:fd:61:40:f7:2e:37:
                    ca:5b:18:d2:70:c3:da:db:e9:70:f6:a1:f1:cc:a7:
                    e0:00:78:88:c7:16:00:06:b9:9c:26:0c:3a:e0:71:
                    ec:a0:b1:6f:7e:57:71:fd:c8:2b:35:53:6d:8c:9b:
                    11:51:db:16:90:6a:3c:e1:0b:ac:3c:07:45:64:64:
                    5b:e1:0d:bd:67:a9:75:88:e3:02:6f:4c:84:e9:e1:
                    83:96:7a:3e:ca:35:aa:ff:b0:67:3a:a0:51:3d:d9:
                    71:87:38:be:c8:14:16:0f:f3:f5:19:9f:42:dd:ca:
                    72:21:f9:72:9b:ac:fa:ec:30:02:c0:5c:e7:c6:7a:
                    7a:d8:09:80:7d:d8:0b:16:7f:4f:a5:05:69:1e:f7:
                    f6:e4:ff:f2:95:49:3c:44:52:c9:62:39:52:16:c4:
                    66:1f:e3:87:9e:60:cc:58:67:e9:34:93:2e:9e:52:
                    a7:35:95:e0:9f:ce:d4:e4:a7:ec:3e:e5:cd:4f:7e:
                    11:11:90:fd:48:bf:2e:24:e8:39:f5:cd:43:41:33:
                    b6:16:c7:64:98:9c:d5:81:fd:5e:98:5d:22:7b:b4:
                    f6:52:37:03:fd:f6:c6:4e:59:fc:41:fb:c0:51:91:
                    30:85:f8:95:a9:35:e8:85:91:c4:79:3c:15:7f:c4:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:34:30:E1:74:E1:4F:3B:74:DB:3E:E4:55:1B:05:14:BD:09:C3:58
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e312e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a6:7c:6b:75:d9:84:b2:29:e7:82:d8:b8:bc:e1:d0:ec:a1:
         a2:58:62:3b:04:05:f7:3a:3a:ab:e6:8e:db:2e:85:29:20:47:
         00:61:60:23:6c:00:1d:6d:81:bc:1d:9c:31:ea:02:fe:9c:84:
         a4:11:cd:7e:3e:fd:ae:64:b6:3b:2a:ad:a6:ea:a7:e6:28:09:
         60:c5:33:90:af:b2:63:63:66:3e:0c:c7:e9:b8:3b:cd:b4:77:
         e3:00:e2:ab:1d:1b:65:77:b4:90:cd:8f:04:9a:87:61:85:61:
         84:bc:36:b6:41:55:31:78:7a:2c:9d:e8:33:fc:5d:ff:e4:6e:
         d0:e2:72:98:93:80:17:aa:53:aa:03:41:8d:ee:0b:6b:47:35:
         f8:73:31:ae:88:09:ae:9c:3e:bb:28:e2:28:47:2a:f7:c8:9d:
         0c:ff:51:40:7c:77:dc:54:b7:f6:48:67:94:dc:61:e9:07:64:
         53:db:ec:9c:35:7c:ac:5d:31:d4:d9:f3:63:1a:c4:26:fa:d2:
         79:e1:66:67:f4:f5:53:b5:3e:b1:36:69:43:c9:66:70:99:0a:
         71:92:86:b0:06:90:e6:e6:e3:ee:e2:ec:12:87:3c:c5:67:5e:
         fe:36:20:e5:64:22:5b:a8:af:13:b8:22:ef:03:6f:68:48:6f:
         42:54:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org