Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e31342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          jleHo/D70XRfBkDJBZ/bq79AufPiRREhhUFW//tkky0=
Subject key identifier:   2A:F4:E5:80:C8:62:96:24:A3:B2:26:7C:06:99:ED:27:51:FC:8D:74
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       616A9E243B653F5DDBF49C345D1725EEEDE628E8
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31342e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 16:00:00 +0000
ROA not before:           Tue 05 Mar 2024 15:55:00 +0000
ROA not after:            Tue 04 Mar 2025 16:00:00 +0000
asID:                     28338
IP address blocks:        189.45.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6a:9e:24:3b:65:3f:5d:db:f4:9c:34:5d:17:25:ee:ed:e6:28:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 15:55:00 2024 GMT
            Not After : Mar  4 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:d1:4a:be:fc:4e:22:e7:63:ba:8d:1c:94:
                    9a:0f:94:83:eb:d8:e3:e9:97:f5:b6:55:4f:b0:79:
                    a9:d7:0e:7c:1b:55:08:eb:c8:d2:bb:1b:e7:fa:72:
                    9c:10:57:f3:ef:c0:44:2b:f4:09:db:74:40:a8:94:
                    fe:c4:3a:8c:41:f9:57:2f:79:5d:d7:14:95:32:89:
                    18:ae:5d:19:03:0e:49:38:8c:f6:ee:c7:c3:ef:fd:
                    3e:65:77:b7:6c:2d:fa:37:a0:04:57:fd:ed:42:63:
                    33:ab:e6:bf:ee:24:01:36:d6:f7:ee:e1:a6:f7:fa:
                    66:85:13:39:de:86:d0:a2:eb:3d:23:87:d7:99:b3:
                    46:a5:12:c0:e3:88:05:e2:83:51:d3:30:ef:f6:04:
                    9b:b7:a9:48:fc:44:94:16:86:e0:2e:7d:f3:d0:22:
                    62:18:1b:52:ec:8c:85:31:84:2b:29:13:aa:f5:3a:
                    98:7b:ef:05:0d:cc:ef:23:44:c6:dd:10:d3:3a:f4:
                    d5:12:3f:ac:d2:5e:83:bc:4b:81:9d:f3:fc:0a:db:
                    06:11:d1:b4:96:0a:87:a1:52:53:c9:46:17:27:68:
                    da:7a:98:5c:0b:af:ab:cc:72:08:81:dd:23:a2:cb:
                    bc:aa:ab:37:d2:c6:49:b6:25:1f:f0:3e:8f:90:3d:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F4:E5:80:C8:62:96:24:A3:B2:26:7C:06:99:ED:27:51:FC:8D:74
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e31342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:96:1d:49:3f:71:ef:0d:ae:7f:0c:a5:ec:6e:52:f4:d0:e0:
         fe:c1:35:ab:05:f8:2d:46:5e:60:98:42:4d:a4:50:66:c1:3a:
         1c:2f:99:45:9d:3d:a7:ba:37:d1:d2:3f:ca:d1:74:b8:05:21:
         26:ff:15:ec:e2:1e:5a:e7:f4:b3:f6:e5:ed:11:c9:8e:88:72:
         81:be:f6:91:13:ee:7e:47:6a:47:2c:bb:a0:f1:39:c6:b5:14:
         5f:38:cc:98:0e:82:7f:22:01:86:04:23:89:b1:c1:a5:c7:bf:
         4c:d5:52:cb:e6:04:25:6d:82:fc:5b:a6:e9:b3:ce:a0:76:91:
         56:b2:6a:96:3f:48:76:9d:a1:a9:83:51:44:40:19:24:fe:99:
         2c:8d:15:f6:8a:05:5f:62:c1:82:4a:28:bd:e6:b8:93:2f:da:
         8c:51:ca:27:21:f7:6e:45:0c:00:08:8e:07:77:79:9c:2a:f3:
         d6:41:6f:be:83:c9:1b:1c:02:4b:56:a6:cd:42:ff:25:c1:5f:
         0b:65:09:fa:9d:a5:15:31:07:9d:24:91:5f:e1:c5:33:1f:54:
         2b:bd:72:73:0b:0b:c3:cc:32:30:b0:14:e6:26:ed:67:56:cd:
         7c:d1:bd:ea:f1:54:78:82:d3:ad:e6:c5:40:99:fe:b6:b5:f4:
         28:4e:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org