Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e342e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          llyMeUzbbAwvQ4fFUAdm1/M0TWCkHxNEeFQoDY12PGI=
Subject key identifier:   F4:A1:9D:08:E4:AD:1D:A4:B7:33:47:8D:B9:CB:EB:8F:59:5C:4E:91
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       405ED7D347C587CEE935D9C5F076C1CAD4CF8F8C
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e342e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     28338
IP address blocks:        189.45.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:5e:d7:d3:47:c5:87:ce:e9:35:d9:c5:f0:76:c1:ca:d4:cf:8f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:c3:f9:d9:f9:bc:f5:6c:ea:92:ad:cd:db:
                    f7:4f:d8:a8:73:87:c8:89:fd:3c:44:90:a7:81:c8:
                    f5:83:5e:ba:c2:7e:06:f6:db:4b:e5:e0:d0:dd:53:
                    b4:c7:d7:22:f9:b1:6c:d4:bf:ca:f0:55:60:67:5c:
                    d4:40:cf:cd:45:77:5c:1d:30:21:68:43:8b:d3:08:
                    f8:57:41:78:07:40:dc:90:2f:44:2d:49:db:e3:61:
                    a2:b8:79:72:1e:41:73:58:42:fe:85:8a:7a:b4:9e:
                    7c:3b:6d:3e:ed:f0:fd:12:bb:5f:3a:5b:86:e0:1b:
                    ab:91:71:84:de:20:bc:e9:40:f8:bf:5f:16:ab:c7:
                    a5:43:a9:01:fc:dd:47:e5:33:31:85:3e:32:6c:1b:
                    11:da:82:37:b8:d6:43:e4:de:32:42:57:45:5a:cc:
                    a1:99:75:4f:24:10:58:ec:14:9a:6e:d3:41:c3:c9:
                    8a:0f:3f:88:2e:af:83:ed:d3:93:83:9d:d5:f4:a5:
                    2a:04:1b:e5:80:8f:06:60:66:1d:36:61:3b:a1:53:
                    30:f1:64:68:e1:a9:72:62:6c:13:30:60:d2:be:0f:
                    aa:34:3b:92:0d:45:e7:27:f7:19:34:dd:83:83:4a:
                    4e:e8:a7:15:1e:e6:7d:f2:61:bb:a1:de:f1:98:d7:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A1:9D:08:E4:AD:1D:A4:B7:33:47:8D:B9:CB:EB:8F:59:5C:4E:91
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:ee:b7:d7:74:62:dc:6c:a8:ac:4a:83:62:6b:e7:fe:d5:
         22:51:90:f9:69:11:0c:6f:f0:2c:7a:c4:bc:d1:86:75:c8:40:
         21:af:c5:5c:6e:48:7c:71:eb:b2:e2:06:81:de:22:23:cd:2e:
         e8:52:66:97:58:41:7f:1d:a0:ac:ea:0a:89:31:ef:96:89:da:
         b8:1a:ac:cb:60:e9:99:8a:f5:58:0c:68:c7:cf:d0:cb:2e:12:
         87:78:9a:34:da:c9:c6:0f:e8:6d:49:af:63:ca:1e:80:27:ff:
         cb:ab:f3:44:07:06:a6:ce:7a:cf:05:c5:3f:d3:03:90:b4:7b:
         27:39:a3:ea:ea:7d:91:ef:20:b3:a4:e5:b6:ae:a6:9d:9f:3c:
         08:32:59:bb:fc:5d:90:c5:fa:e5:f1:4c:6e:5d:e6:fd:71:38:
         16:fe:2f:58:3a:6c:07:0b:4b:ef:14:17:fb:4e:11:43:b8:0a:
         47:8c:8d:b6:89:f9:f9:d9:2a:1c:34:44:90:8e:13:72:4e:7d:
         c4:6a:48:f1:88:6f:67:a9:02:0b:7b:5c:3e:1b:e1:5a:5f:06:
         ac:0f:8c:c4:69:5d:6d:07:0c:b7:c6:49:b4:94:76:2f:4d:92:
         02:f7:7e:b7:fe:06:ba:19:3d:19:3a:82:98:3f:49:e2:07:db:
         ce:4c:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org