Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31302e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          Y3YWp83WENBz/VTjSu3hjbccU/BaKarzkl8jfmYrBoI=
Subject key identifier:   F1:23:94:FF:76:AA:BD:78:BE:56:91:4B:DD:AC:D2:6A:8A:B6:10:46
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       399E3DF4E61584D8D2A2484BA20050825E95FEE4
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31302e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     28338
IP address blocks:        189.45.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9e:3d:f4:e6:15:84:d8:d2:a2:48:4b:a2:00:50:82:5e:95:fe:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:dc:f7:b0:9b:71:55:2e:dd:96:13:6f:35:
                    dd:d4:21:99:0a:c4:5e:46:da:ef:73:1c:00:5a:6f:
                    97:e3:13:b2:09:73:ab:94:30:1b:b7:a4:71:f4:51:
                    10:b4:b7:7f:b9:da:02:1f:35:a7:c7:d6:fa:00:bb:
                    61:82:b9:91:72:19:6c:3b:17:17:7c:b7:04:db:cb:
                    29:34:3b:59:66:d4:29:be:d7:28:96:59:d2:7c:a4:
                    fb:64:1e:ff:dc:31:9d:b4:d6:55:1d:9a:23:79:d8:
                    36:22:9c:6a:a6:e7:fb:3f:96:66:f2:41:9f:19:45:
                    72:1d:8e:72:1b:25:5b:ed:6a:af:f5:a0:a3:0a:2c:
                    a6:48:a5:99:ea:ed:9c:4a:34:b7:e3:c5:91:4f:62:
                    c6:ad:df:24:ea:62:fe:34:67:6a:35:b0:38:01:4b:
                    b1:c5:0d:dc:29:3a:b8:f1:0f:55:33:e7:95:9b:22:
                    ba:41:26:8e:d5:59:91:7a:85:22:db:88:6f:59:31:
                    c2:43:8f:37:74:f7:1e:6f:9f:8f:c3:77:85:aa:60:
                    a1:98:9a:14:93:db:f6:ba:63:e8:d9:6d:4b:5d:75:
                    eb:a7:9a:e8:00:1b:14:8c:32:7f:b4:e3:c0:7a:b1:
                    95:e7:62:94:38:d5:85:38:62:88:61:39:16:3d:99:
                    58:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:94:FF:76:AA:BD:78:BE:56:91:4B:DD:AC:D2:6A:8A:B6:10:46
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:87:d6:d8:eb:e8:96:46:7c:02:08:61:46:14:99:0e:80:a3:
         b3:24:8b:f6:43:be:00:fb:40:0c:58:23:b1:34:15:e3:ae:3b:
         66:a9:98:5d:b2:e9:c6:2c:05:97:21:24:fd:17:5e:c7:c8:1f:
         9e:65:0e:0c:6c:6d:08:5a:78:d3:6b:9a:bd:23:a8:10:9b:12:
         7a:1b:a7:6f:33:2c:a1:83:3b:8b:7c:13:1a:d2:71:f1:54:c3:
         71:1c:39:34:5f:77:08:c9:4d:01:d6:d1:55:b7:30:9e:16:83:
         2b:e3:8e:3a:99:7c:2c:76:e9:82:97:72:b6:73:cc:72:d3:49:
         fd:83:db:53:58:39:56:04:c8:da:c0:be:a1:bb:28:09:60:fe:
         0f:b9:42:36:45:0e:de:ae:d6:ee:67:21:cd:61:76:c6:68:1c:
         dc:06:6f:85:9f:b6:67:1d:a0:a9:91:63:1c:1b:4e:35:4b:e3:
         72:10:a2:b3:52:98:9e:24:1e:53:ae:80:50:55:1d:2f:bf:f3:
         17:2a:0d:05:e5:f6:cb:e8:97:15:c5:c0:83:27:e2:42:57:ce:
         72:55:a0:b1:12:4e:c4:e0:b2:71:68:b9:df:b4:33:1f:18:c7:
         d7:fc:ff:e8:da:52:4b:a3:85:0f:9f:22:ba:41:6f:25:4f:9e:
         f0:a7:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org