Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e322e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          HvcJgu/mrm1NZwU+Ujmq0qOHKZfnUB/+aPHqv3Lrqe8=
Subject key identifier:   B2:65:30:4B:F6:2B:53:57:74:B6:D8:2D:5C:16:17:AE:51:4B:39:75
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       48EAAD52B2885B71A8E8E193A2CE0E842633CCC4
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e322e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     28338
IP address blocks:        189.45.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ea:ad:52:b2:88:5b:71:a8:e8:e1:93:a2:ce:0e:84:26:33:cc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject: CN=3082010A0282010100B45FB513E0AF98DBACD05374BDFFDD4BEE864BEEEC79129C8A382F52418E6CCF430A072C29BA6864D7D6422061712CCF92F39F731A5F4017FFF0EAE3C86AF7D70045446DF2C32006880D9E6F5B3A3B71BF678D6F5A87FF122ADED8FB93C3ED8010C2505E249E229DFB8FA68F89125A642A8BEA3DF32613EE1834AC08F370BD3816829713168F9030EE914C3065EE124E1C0C04C31FA2D9BC4F0378CB0370E22014519512C9818BA10E3C481650D46571F199937984BA83F55B3CF40EFE1DF86B6EFE2C67386801CD8A562265D72379AE6123F2474285E6F64D45DDE3FA7ADA0497898ACA966C7A4AB8C5928C9236FE3F830615ACD0F16FF3A56536E3971B4AF90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5f:b5:13:e0:af:98:db:ac:d0:53:74:bd:ff:
                    dd:4b:ee:86:4b:ee:ec:79:12:9c:8a:38:2f:52:41:
                    8e:6c:cf:43:0a:07:2c:29:ba:68:64:d7:d6:42:20:
                    61:71:2c:cf:92:f3:9f:73:1a:5f:40:17:ff:f0:ea:
                    e3:c8:6a:f7:d7:00:45:44:6d:f2:c3:20:06:88:0d:
                    9e:6f:5b:3a:3b:71:bf:67:8d:6f:5a:87:ff:12:2a:
                    de:d8:fb:93:c3:ed:80:10:c2:50:5e:24:9e:22:9d:
                    fb:8f:a6:8f:89:12:5a:64:2a:8b:ea:3d:f3:26:13:
                    ee:18:34:ac:08:f3:70:bd:38:16:82:97:13:16:8f:
                    90:30:ee:91:4c:30:65:ee:12:4e:1c:0c:04:c3:1f:
                    a2:d9:bc:4f:03:78:cb:03:70:e2:20:14:51:95:12:
                    c9:81:8b:a1:0e:3c:48:16:50:d4:65:71:f1:99:93:
                    79:84:ba:83:f5:5b:3c:f4:0e:fe:1d:f8:6b:6e:fe:
                    2c:67:38:68:01:cd:8a:56:22:65:d7:23:79:ae:61:
                    23:f2:47:42:85:e6:f6:4d:45:dd:e3:fa:7a:da:04:
                    97:89:8a:ca:96:6c:7a:4a:b8:c5:92:8c:92:36:fe:
                    3f:83:06:15:ac:d0:f1:6f:f3:a5:65:36:e3:97:1b:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:30:4B:F6:2B:53:57:74:B6:D8:2D:5C:16:17:AE:51:4B:39:75
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:c1:ed:54:84:b5:b7:7d:13:9b:ba:8b:97:6c:ff:1f:4c:b8:
         73:04:3e:33:ff:eb:a0:8a:eb:2e:2f:1a:82:e8:c1:2a:ca:68:
         73:18:a5:86:a4:69:5b:97:aa:9d:f8:8b:0a:0a:4e:16:6c:aa:
         db:ec:79:3f:6a:61:9d:81:03:07:8e:33:37:99:46:44:46:5f:
         2f:62:e1:01:4e:30:d6:e4:ab:df:68:4e:0b:6c:3c:95:68:f4:
         97:a4:27:20:6a:6d:9a:00:68:6c:93:20:97:b9:5f:4d:6c:2d:
         8c:d3:92:3d:a9:3f:98:00:15:cb:b6:83:96:f0:09:df:32:b5:
         aa:3e:4b:27:05:76:e0:53:0a:60:87:fd:f1:53:67:aa:d6:df:
         ab:17:2f:22:04:45:27:da:bb:5b:21:25:44:7f:9a:aa:1f:9a:
         c0:cd:95:0a:16:49:7e:ae:7b:85:4f:08:1b:b9:0d:e9:67:13:
         97:3d:1b:9c:dc:8e:84:cf:0e:4a:09:c2:2a:1b:ee:09:78:33:
         fb:14:a8:d6:11:1e:b9:09:01:2e:55:f9:a1:58:18:71:00:57:
         55:57:4a:1b:9d:e0:47:54:11:93:76:20:46:2e:47:73:0e:bf:
         74:42:bc:cf:37:2b:44:c0:64:08:93:e6:96:ac:75:69:3a:ff:
         99:bd:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org