Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31312e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31312e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          eutzhoG9LOK1VYF5ixPWysSryHYvAyMqWrkrOYc40Lg=
Subject key identifier:   80:9F:4D:E8:A2:EE:A9:22:C9:81:59:C4:A2:60:6D:B1:6B:6E:38:F6
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       51E43A84DBEEB6BB590617A14CEC2A7ACCDE6EA7
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31312e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 17:00:00 +0000
ROA not before:           Tue 05 Mar 2024 16:55:00 +0000
ROA not after:            Tue 04 Mar 2025 17:00:00 +0000
asID:                     28338
IP address blocks:        189.45.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e4:3a:84:db:ee:b6:bb:59:06:17:a1:4c:ec:2a:7a:cc:de:6e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 16:55:00 2024 GMT
            Not After : Mar  4 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:8d:f4:9e:4b:d5:7c:b3:43:24:39:6b:c7:
                    dd:0d:56:55:34:00:a5:05:6e:c2:5c:13:33:4f:41:
                    13:69:cc:a0:7e:88:fc:43:58:4f:f0:6d:08:66:d4:
                    63:e3:8f:f2:91:ea:b3:91:07:aa:b5:c6:f7:fd:ea:
                    84:dd:fb:f0:81:21:77:0d:89:75:47:ee:1a:70:47:
                    61:04:05:bc:cc:fc:1d:a1:53:82:3d:c2:b1:26:aa:
                    38:0f:26:d7:cf:d2:7d:e4:fb:e5:7a:89:37:72:c0:
                    5a:d8:cb:89:87:14:4c:b8:cf:d5:bd:02:af:ec:b1:
                    99:b1:ba:54:df:34:c0:a3:24:e8:9f:25:eb:73:23:
                    aa:80:d1:d7:35:00:10:e4:55:af:ce:f5:86:e5:35:
                    10:c7:c7:f5:21:dc:ba:d1:c4:d1:cc:7d:f5:33:6b:
                    a8:72:4b:83:6a:a4:f7:14:70:76:71:7f:52:e3:4e:
                    12:1e:f0:1e:60:1a:21:8e:17:d9:48:df:1b:31:87:
                    09:23:2d:33:da:2c:18:d1:7c:e1:2b:bc:76:e4:47:
                    4c:82:12:52:06:b2:2f:39:d6:c0:c0:e1:e1:ee:83:
                    bb:fa:d2:ad:d3:30:85:22:7e:07:da:3e:28:e3:20:
                    cc:24:d9:34:b0:e3:8d:00:c6:0b:1f:fc:54:71:21:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9F:4D:E8:A2:EE:A9:22:C9:81:59:C4:A2:60:6D:B1:6B:6E:38:F6
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31312e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:c8:1f:6b:f8:60:0e:74:21:4b:69:f3:33:69:95:e9:2d:
         51:07:c9:50:99:ba:d1:1e:05:ea:22:a3:50:f5:03:8b:b7:22:
         0e:af:30:da:f2:11:cd:bd:4f:5b:b8:70:cf:99:54:8e:67:94:
         34:12:35:03:86:6a:01:81:0e:14:0a:bf:de:94:0c:43:c8:56:
         11:34:99:ee:47:dc:ec:7a:59:49:87:a7:80:3c:19:d4:30:f6:
         cb:c3:d8:16:29:eb:d6:44:bb:f4:e6:5c:e0:9f:d2:2a:47:9e:
         bd:a0:a8:e6:79:0d:44:a6:73:41:03:67:0b:71:7b:1b:9b:f0:
         ca:10:a8:91:cb:86:f1:0d:f9:09:b1:78:17:75:21:60:c5:c4:
         98:60:cd:2c:91:63:22:58:83:72:65:7a:52:6e:5f:31:58:0f:
         0f:43:c2:a7:22:6c:74:77:0e:f7:bb:15:92:89:40:d9:6b:63:
         0f:9e:02:3c:6f:e2:0b:30:67:bf:da:30:dc:c0:c2:6d:72:42:
         ba:43:43:20:69:e7:cf:b4:71:27:3b:24:b7:bb:58:6f:71:1a:
         d3:e9:83:f6:37:96:cc:0e:f2:8e:00:2a:cf:9b:eb:18:8d:4f:
         c5:a6:4f:32:9f:cf:e0:51:3d:15:f3:0b:74:32:88:91:55:46:
         d6:4c:bc:be
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUUeQ6hNvutrtZBhehTOwqeszebqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1RTA2QjI0OUZENzEyQzMzNkQ2REJEODc3MTNENUEy
QjdENEM0NDAeFw0yNDAzMDUxNjU1MDBaFw0yNTAzMDQxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTMxRjhERjQ5RTRCRDU3Q0Iz
NDMyNDM5NkJDN0REMEQ1NjU1MzQwMEE1MDU2RUMyNUMxMzMzNEY0MTEzNjlDQ0Ew
N0U4OEZDNDM1ODRGRjA2RDA4NjZENDYzRTM4RkYyOTFFQUIzOTEwN0FBQjVDNkY3
RkRFQTg0RERGQkYwODEyMTc3MEQ4OTc1NDdFRTFBNzA0NzYxMDQwNUJDQ0NGQzFE
QTE1MzgyM0RDMkIxMjZBQTM4MEYyNkQ3Q0ZEMjdERTRGQkU1N0E4OTM3NzJDMDVB
RDhDQjg5ODcxNDRDQjhDRkQ1QkQwMkFGRUNCMTk5QjFCQTU0REYzNEMwQTMyNEU4
OUYyNUVCNzMyM0FBODBEMUQ3MzUwMDEwRTQ1NUFGQ0VGNTg2RTUzNTEwQzdDN0Y1
MjFEQ0JBRDFDNEQxQ0M3REY1MzM2QkE4NzI0QjgzNkFBNEY3MTQ3MDc2NzE3RjUy
RTM0RTEyMUVGMDFFNjAxQTIxOEUxN0Q5NDhERjFCMzE4NzA5MjMyRDMzREEyQzE4
RDE3Q0UxMkJCQzc2RTQ0NzRDODIxMjUyMDZCMjJGMzlENkMwQzBFMUUxRUU4M0JC
RkFEMkFERDMzMDg1MjI3RTA3REEzRTI4RTMyMENDMjREOTM0QjBFMzhEMDBDNjBC
MUZGQzU0NzEyMUJCOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAox+N9J5L1XyzQyQ5a8fdDVZVNAClBW7CXBMzT0ETacygfoj8Q1hP
8G0IZtRj44/ykeqzkQeqtcb3/eqE3fvwgSF3DYl1R+4acEdhBAW8zPwdoVOCPcKx
Jqo4DybXz9J95Pvleok3csBa2MuJhxRMuM/VvQKv7LGZsbpU3zTAoyTonyXrcyOq
gNHXNQAQ5FWvzvWG5TUQx8f1Idy60cTRzH31M2uockuDaqT3FHB2cX9S404SHvAe
YBohjhfZSN8bMYcJIy0z2iwY0XzhK7x25EdMghJSBrIvOdbAwOHh7oO7+tKt0zCF
In4H2j4o4yDMJNk0sOONAMYLH/xUcSG7kwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FICfTeii7qkiyYFZxKJgbbFrbjj2MB8GA1UdIwQYMBaAFGFeBrJJ/XEsM21tvYdx
PVorfUxEMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRCeDg4RlhlOG41Ujc0
OXBXZ3JrQVMzZGV5cjVtZHl5ZnhCTmlXejV5dnZNLzAvNjE1RTA2QjI0OUZENzEy
QzMzNkQ2REJEODc3MTNENUEyQjdENEM0NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82MTVFMDZCMjQ5RkQ3MTJDMzM2RDZEQkQ4NzcxM0Q1QTJCN0Q0
QzQ0LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80Qng4OEZYZThuNVI3NDlwV2dy
a0FTM2RleXI1bWR5eWZ4Qk5pV3o1eXZ2TS8wLzMxMzgzOTJlMzQzNTJlMzEzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMzMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC9LQsw
DQYJKoZIhvcNAQELBQADggEBAELSyB9r+GAOdCFLafMzaZXpLVEHyVCZutEeBeoi
o1D1A4u3Ig6vMNryEc29T1u4cM+ZVI5nlDQSNQOGagGBDhQKv96UDEPIVhE0me5H
3Ox6WUmHp4A8GdQw9svD2BYp69ZEu/TmXOCf0ipHnr2gqOZ5DUSmc0EDZwtxexub
8MoQqJHLhvEN+QmxeBd1IWDFxJhgzSyRYyJYg3JlelJuXzFYDw9DwqcibHR3Dve7
FZKJQNlrYw+eAjxv4gswZ7/aMNzAwm1yQrpDQyBp58+0cSc7JLe7WG9xGtPpg/Y3
lswO8o4AKs+b6xiNT8WmTzKfz+BRPRXzC3QyiJFVRtZMvL4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org