Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e352e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          Mh2iOiphk8Tupy6GF/CjEub+rgBwc7QjREBHws6XwLw=
Subject key identifier:   E0:72:1F:8D:9D:42:39:83:8C:65:3A:1A:0F:5D:BE:34:6E:75:08:8F
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       704CEC82F978CA3A0151B2CEB436D895597B1EC7
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e352e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     28338
IP address blocks:        189.45.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4c:ec:82:f9:78:ca:3a:01:51:b2:ce:b4:36:d8:95:59:7b:1e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:c4:6b:73:ea:53:7f:0e:8d:9f:9b:87:39:
                    17:b7:67:ad:23:18:96:91:18:80:dc:1d:27:b5:3d:
                    34:0f:47:ce:f4:ad:14:2f:95:ea:bd:2b:3a:c9:c2:
                    0a:e4:45:60:ef:36:7c:9c:d3:6b:09:88:26:2b:c9:
                    d3:85:77:ca:cd:76:68:ad:b0:a3:f2:73:6c:a2:9b:
                    6b:96:66:41:16:86:d0:a7:81:b9:ca:cb:22:fc:f2:
                    96:dd:83:9d:88:71:cb:2d:c9:5a:23:9a:d9:10:85:
                    b4:d2:e4:30:f4:a2:1e:64:37:16:19:b3:5e:c4:5b:
                    31:2b:6d:3c:88:dc:aa:fa:c7:f7:a9:cf:9a:41:fd:
                    ad:31:0d:22:17:87:0f:d7:73:1f:cc:a1:32:df:d6:
                    f1:69:4c:5b:7d:21:9a:60:95:1f:b3:8d:ab:2f:bf:
                    94:1b:38:a2:b8:99:31:31:6b:c1:56:33:d0:76:f4:
                    64:d4:92:d7:f6:c1:0d:5f:09:9c:a6:b5:1e:18:11:
                    ec:dc:32:69:5f:a0:9e:77:39:e5:3e:b1:f5:95:24:
                    55:3e:66:dd:d9:e7:21:05:d0:5b:ac:ba:b9:cc:40:
                    8a:a4:6d:4e:87:25:27:1f:d4:fb:7d:bf:d1:62:10:
                    eb:1a:67:e9:4d:48:a7:f9:28:18:bc:d6:7c:9c:80:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:72:1F:8D:9D:42:39:83:8C:65:3A:1A:0F:5D:BE:34:6E:75:08:8F
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:8a:43:19:83:19:7e:79:da:00:f8:0d:f2:9e:66:02:34:
         4f:8e:8f:1b:87:2e:db:06:35:45:99:f2:d6:54:ce:a5:2b:6f:
         46:83:cd:21:2d:d7:42:b2:9a:5b:60:fd:18:d1:6f:62:66:35:
         41:ec:07:3f:95:a9:1c:e3:d4:94:d9:b0:db:8e:67:ee:b4:e9:
         95:48:f8:bd:8b:0b:fb:ef:99:34:ca:2e:71:a0:e7:ad:5e:72:
         2f:d2:35:48:68:f1:5a:1f:fb:16:ff:c2:90:70:2f:df:a1:ee:
         71:1d:ca:a6:76:a4:9e:de:2b:3e:93:fe:80:b3:7a:8d:2c:ae:
         0a:a5:4d:3c:0a:4d:6d:7c:be:32:df:4b:43:b2:61:8e:37:ea:
         c4:62:35:65:cc:c5:00:1d:69:32:6a:f2:df:cb:5c:e9:34:af:
         be:26:ab:bf:14:b6:3c:7e:fa:0b:f1:17:85:bb:7f:4d:ed:76:
         61:f7:f1:dc:ff:aa:07:9c:ec:e5:93:4b:7b:22:3a:64:af:27:
         cf:c7:91:dd:22:c0:b3:18:5f:76:28:38:01:11:43:e8:68:90:
         71:fa:fe:b6:24:43:4b:7a:2f:17:ac:09:f1:fd:15:60:7f:f4:
         e7:02:99:c1:35:f7:ef:6d:cf:83:4d:d9:ec:66:50:13:de:0a:
         ae:7f:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org