Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31332e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31332e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          E/Vcq5qlNHULkEDopjJyz0NkYl2VdiaiaeZbb83UeKM=
Subject key identifier:   44:FF:62:22:4D:EE:02:CC:26:B7:0B:C4:20:A8:14:21:A2:DF:E6:66
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       4F7389D216B9D9A4E12A421C2497FB6332DA7B78
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31332e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 16:00:00 +0000
ROA not before:           Tue 05 Mar 2024 15:55:00 +0000
ROA not after:            Tue 04 Mar 2025 16:00:00 +0000
asID:                     28338
IP address blocks:        189.45.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:89:d2:16:b9:d9:a4:e1:2a:42:1c:24:97:fb:63:32:da:7b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 15:55:00 2024 GMT
            Not After : Mar  4 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:70:24:8b:b2:f2:c3:5f:24:56:a8:ea:46:
                    62:0a:4d:18:85:ca:a5:f1:2e:5f:a0:89:8e:00:4a:
                    f2:94:36:b5:df:20:52:a7:eb:80:f8:0c:ad:6c:20:
                    5d:97:1d:23:28:6f:76:2c:a3:15:f8:a5:c3:de:80:
                    5c:ce:b3:de:1d:f5:82:83:60:cd:fa:99:60:84:28:
                    19:e0:33:94:09:bc:31:f2:eb:ba:03:66:db:0b:21:
                    4e:5d:35:91:ca:9c:92:72:39:0c:56:f5:15:cf:af:
                    f5:91:da:42:da:01:42:2c:ec:4c:86:89:1c:5e:7c:
                    64:35:e7:29:e9:46:cd:1c:8f:1a:bf:22:5d:ac:7f:
                    19:6d:3d:43:ef:26:39:b8:85:ba:5e:d0:65:8d:0c:
                    a3:2a:65:22:1c:11:96:73:82:07:96:db:43:a7:5d:
                    55:65:f3:da:2b:0c:a3:50:dc:13:ac:69:22:da:d1:
                    54:e9:20:2b:9d:db:06:15:68:da:e9:a1:4c:6a:d2:
                    18:1f:fe:11:ac:45:f9:0c:83:ab:f7:82:f9:18:6e:
                    ed:24:4a:7b:ca:d3:6d:94:56:ba:7a:58:1e:1f:46:
                    89:a2:77:ae:4d:ea:ca:08:7f:4d:84:e6:0c:9c:1a:
                    d0:5b:fe:e7:9e:44:e1:e3:1c:f0:80:64:d0:00:b1:
                    d0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FF:62:22:4D:EE:02:CC:26:B7:0B:C4:20:A8:14:21:A2:DF:E6:66
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31332e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:87:bf:71:f8:43:bd:76:89:a5:23:af:37:55:28:54:a7:35:
         67:01:67:56:b8:91:91:31:40:53:c3:af:80:65:ff:5a:4d:eb:
         7d:b5:53:6b:f9:46:75:87:9d:e7:20:c9:22:56:40:87:0e:b5:
         29:31:a3:4e:c9:a3:52:78:fe:27:65:fb:74:79:d5:6a:c0:75:
         c3:78:ca:81:e7:17:7c:99:6e:c9:6e:3b:b3:50:ab:df:75:9b:
         30:52:21:81:7a:59:d8:a5:bc:03:e6:d9:ce:0c:10:fc:62:a0:
         05:40:c8:da:bc:f7:ac:ab:68:c5:38:1e:4c:8f:86:a5:c3:15:
         71:ff:41:83:38:ed:fb:90:3e:e1:d3:94:57:40:ab:fb:f0:d6:
         45:37:cf:e7:87:db:a7:7c:35:ac:e0:28:17:90:97:f6:0b:d9:
         a6:6f:4c:77:2e:a6:2c:ae:72:76:79:59:00:7b:ca:ad:c6:3a:
         3c:fa:97:b5:ce:f4:3f:d1:e9:89:ac:02:ac:7a:1e:b1:a8:4a:
         4d:86:88:2c:d8:d4:d1:b9:02:37:95:28:fc:88:e5:e6:6b:c5:
         8b:7b:b9:bb:f4:bb:74:ad:cf:d4:10:63:39:2e:25:ff:5c:68:
         cc:36:de:c0:7e:d5:74:80:13:56:fd:43:bd:d9:c1:e8:b5:af:
         84:9f:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org