Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e332e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e332e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          f2LZRGjK4AtL7DHpKsKIW0iTuQGnOSMxs/l84iC0KlA=
Subject key identifier:   BA:91:CC:DC:2E:C2:16:E1:DF:D7:9B:C4:B5:7C:D1:35:FC:95:CD:A0
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       24C70ECDFDABF93F22464685D1030E9A677F91AF
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e332e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     28338
IP address blocks:        189.45.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c7:0e:cd:fd:ab:f9:3f:22:46:46:85:d1:03:0e:9a:67:7f:91:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4a:2d:b6:cc:c6:04:0b:78:4a:11:c6:45:80:
                    78:9c:15:40:8d:2b:f8:d1:63:53:61:fe:a2:d3:59:
                    3f:a0:07:f0:65:aa:74:2b:d5:59:49:f6:a8:e1:9c:
                    64:3e:6a:21:67:c6:9c:83:f5:f8:a2:e2:88:87:92:
                    55:7c:7f:e9:57:b3:57:11:ba:c6:d8:77:8b:0f:59:
                    f4:89:da:0e:b3:10:e6:1e:96:22:59:12:bd:88:fd:
                    5c:45:c4:21:33:0a:ed:9d:d3:2f:af:4e:64:ee:69:
                    d1:3d:2b:13:75:63:ac:dd:cb:95:27:e9:59:ba:0c:
                    61:be:b6:62:0f:0d:03:d5:34:e9:41:d2:ba:03:27:
                    ca:6d:2f:de:28:b7:f1:cb:eb:c9:3e:bc:39:84:4c:
                    44:a2:a2:a7:95:99:f7:f4:e5:f7:91:20:e0:dc:33:
                    91:36:15:19:4a:0e:65:23:8c:1a:1a:0e:ec:81:1f:
                    3d:8e:d7:e8:68:e5:be:30:c3:b6:c1:3d:5b:c2:6f:
                    04:80:a3:2f:07:d0:7d:5f:f7:89:56:86:23:68:1e:
                    e9:94:ea:27:6d:7d:75:24:2f:ec:48:02:e5:76:a0:
                    2a:59:9e:d4:26:a1:cc:03:52:db:e0:dc:2c:18:81:
                    b7:fb:f2:53:a0:34:9c:5e:8f:c6:18:40:81:0b:bf:
                    a9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:91:CC:DC:2E:C2:16:E1:DF:D7:9B:C4:B5:7C:D1:35:FC:95:CD:A0
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e332e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:47:a6:b5:40:ab:1a:78:7b:80:df:65:8f:06:2b:2b:24:
         47:dd:75:06:9b:63:88:8b:a5:cd:cc:da:9b:54:b7:f0:10:d2:
         fc:78:3b:05:3e:0a:7c:06:5a:1b:45:a2:eb:9d:c5:11:78:fd:
         8e:d9:49:21:ff:5d:8d:8e:d8:dc:6b:8e:bb:06:26:19:cf:5a:
         f8:c6:db:80:d3:6b:5d:06:eb:cb:bd:5f:61:95:0b:f6:1a:41:
         0e:29:95:cc:c8:92:86:5e:7e:a9:97:55:27:8b:da:97:4b:76:
         f7:c6:ed:b8:7d:4a:6c:8a:8e:39:c7:06:b3:9a:e9:bc:83:44:
         37:08:31:4d:4e:2e:a9:a2:a8:ff:ca:57:09:1b:7e:e7:89:b6:
         d9:fa:34:a7:db:9f:f5:d6:93:97:46:a5:36:38:d0:68:8a:48:
         ed:7d:21:de:8b:68:66:f6:72:2b:53:61:b7:fb:cb:81:f3:45:
         f8:b6:fc:67:f7:69:60:86:44:df:ed:30:ce:99:91:a0:87:68:
         81:3a:41:43:b2:65:63:ba:67:d9:09:34:97:80:a0:20:4f:e9:
         eb:de:84:d0:1b:6e:04:9f:69:09:f0:aa:d6:23:c5:09:66:00:
         34:53:19:5f:98:a6:1e:06:da:7a:ab:9e:cf:09:eb:92:e4:97:
         6e:74:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org