Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          VxFfIaMB+gkj+z4opaEwNSOC8GbIsp2sjIeaMVTZm5A=
Subject key identifier:   25:E2:75:AE:FB:E4:8A:7D:0B:C7:A0:36:49:A3:EC:68:25:11:C5:D7
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       0B05794BB7FA487FCBBC5F0B3478C1DD8B39A5FB
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31322e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     28338
IP address blocks:        189.45.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:05:79:4b:b7:fa:48:7f:cb:bc:5f:0b:34:78:c1:dd:8b:39:a5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:7f:17:f2:9f:79:2b:e3:f3:ba:4e:f7:c8:
                    2a:37:9a:08:57:11:31:45:b0:98:2e:68:39:52:4f:
                    a0:a0:f2:40:4e:c1:af:bc:29:9e:19:09:86:1a:32:
                    98:0c:25:3c:13:a6:95:78:f6:09:ef:61:39:3c:c9:
                    8d:fd:4b:4e:37:45:8b:f0:0f:01:1d:4e:57:f6:be:
                    3e:e6:28:cc:f2:35:5f:1f:0f:d4:02:73:5e:f2:b8:
                    1b:f2:c0:86:5c:10:dc:16:f7:8e:18:ae:2c:a1:02:
                    97:4d:db:b6:c2:a2:23:6b:1a:c9:02:9d:c5:86:e8:
                    4d:02:d9:a3:25:75:be:83:27:5b:5d:30:72:10:bb:
                    49:0c:f1:7e:a9:fd:f6:39:a8:81:32:41:21:3a:aa:
                    37:43:15:e4:46:3b:6d:3b:96:04:2a:74:e5:c6:f7:
                    d5:9d:01:c2:24:36:62:15:f3:41:57:92:dc:02:73:
                    89:23:bd:27:b7:d4:49:6c:96:5e:a8:1b:d1:1e:30:
                    30:29:26:25:fb:1e:d8:0d:5e:6a:6a:f3:78:11:a8:
                    e6:b7:67:3e:5c:a1:5d:03:0b:cc:72:d1:ef:0b:0e:
                    99:c7:dc:ae:2c:30:4e:1b:0b:d3:d7:09:1e:e4:0b:
                    9b:06:1e:fa:7c:fe:35:72:28:c7:16:48:c8:1f:97:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:75:AE:FB:E4:8A:7D:0B:C7:A0:36:49:A3:EC:68:25:11:C5:D7
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:de:0a:52:51:74:87:ba:83:fa:08:06:1b:e1:f1:6e:4a:
         60:68:63:a3:71:f0:a3:68:7e:f9:ad:20:8c:59:2b:cf:f9:5b:
         d6:4f:3e:e7:ac:5b:72:18:d2:fd:f4:a9:2a:45:be:92:4b:53:
         de:bb:78:17:05:97:6a:fa:ba:c2:61:e5:ba:02:d1:b7:2b:94:
         83:8c:6e:dc:86:fa:46:82:0c:88:43:78:9e:27:e3:3e:ae:63:
         5d:2b:88:11:0e:cd:c6:d4:3a:86:e7:82:19:1e:9a:1a:8a:ab:
         04:07:ca:35:6a:fe:79:c5:06:a0:0e:4e:1a:4d:50:24:18:3e:
         8f:74:a9:96:fb:9b:f5:8b:92:90:f0:26:fe:1c:a3:55:09:67:
         26:3f:3b:a3:08:51:0f:36:b5:71:71:91:ab:df:0c:c2:d7:ee:
         41:df:a7:81:95:4e:11:96:e7:95:fa:14:b5:97:6b:21:9d:27:
         ca:e9:58:7d:3c:f9:8d:b1:23:bb:d2:91:37:76:7e:fc:cf:4b:
         0d:4f:0a:b7:eb:85:74:32:38:ee:33:76:1b:58:84:5e:d9:97:
         44:dd:5e:c1:80:bf:51:0c:5f:32:9e:ac:fa:22:10:41:fc:b5:
         3a:14:93:f2:54:d1:ef:06:4a:26:77:0f:b0:81:46:ea:24:41:
         6f:e2:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org