Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e362e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e362e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          0HX81JH49Ajxa5qYJiSQ3Kkml+Pp93kUFGSv9aFYsDg=
Subject key identifier:   A5:A7:48:2D:9E:2F:95:EB:B5:6E:CF:64:26:07:65:86:F2:DC:A2:2F
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       31567DC58F6F53FC03EED4E0472691583DCC7962
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e362e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     28338
IP address blocks:        189.45.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:7d:c5:8f:6f:53:fc:03:ee:d4:e0:47:26:91:58:3d:cc:79:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:36:39:95:24:d9:67:5a:0f:02:8d:ef:be:
                    06:21:7c:37:64:cf:7c:75:80:cf:02:d2:cb:66:f3:
                    5a:58:67:81:df:2e:15:02:f0:89:20:8f:ff:50:a5:
                    31:ba:88:63:53:25:ef:a0:64:b2:f9:bc:ea:7d:d1:
                    6c:3c:21:2a:97:36:af:e8:0c:74:c2:b5:75:19:c8:
                    07:92:1b:29:06:6d:7e:77:6a:03:1c:91:4b:6f:41:
                    26:7d:10:3c:fd:d1:81:17:09:7f:ea:66:7d:0b:cc:
                    b7:65:16:54:1b:1f:41:d0:05:f5:fd:b5:ad:85:76:
                    6b:31:e1:c2:eb:48:95:56:d1:83:be:7c:d1:c3:e4:
                    8d:92:0e:a8:fb:b6:bb:a4:2f:b5:78:f4:5d:2c:7d:
                    2d:55:ae:f2:1e:1a:94:db:f2:1c:c8:52:ba:c3:ad:
                    d8:7f:3c:7f:e7:58:79:8a:99:f0:d8:b3:ff:19:f6:
                    9e:5b:8c:34:8a:2c:15:d9:c7:72:3c:02:fd:07:42:
                    7c:01:65:f3:c7:39:46:9a:6e:a8:83:72:dc:84:ff:
                    0b:d8:a2:23:16:7c:1f:90:be:28:11:82:ea:ad:26:
                    96:9b:23:15:40:ea:14:c7:57:d8:b9:4c:ba:3d:6b:
                    f7:65:f5:56:a3:02:65:16:d0:5f:9b:3b:f9:cb:d0:
                    3f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:48:2D:9E:2F:95:EB:B5:6E:CF:64:26:07:65:86:F2:DC:A2:2F
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e362e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:38:d4:f6:72:a9:81:f6:bb:de:e9:24:04:fd:f1:ed:41:
         91:be:c9:49:89:a7:82:fe:f6:91:c5:f3:9d:f2:34:f6:78:d0:
         62:5e:be:13:d4:53:c2:6b:b6:53:11:9f:bc:e4:d2:a9:97:8d:
         fb:d7:7a:8f:5f:5c:b2:38:49:8f:4d:58:d7:bc:1d:ef:1c:63:
         5f:ad:34:66:9e:2a:7e:3c:1d:d6:af:b2:e8:16:c7:51:67:5a:
         2e:94:23:94:5d:c7:48:1d:f3:57:72:28:a5:a6:29:e1:95:40:
         29:f7:73:0a:14:87:81:1b:0b:a1:28:b8:3a:5e:58:f5:44:ba:
         d8:cf:34:ba:96:2d:bc:17:6d:e1:36:5d:29:3c:1d:05:67:23:
         32:64:13:de:33:4e:1a:c4:9a:db:fd:67:17:53:53:f0:43:e9:
         f8:65:9a:1d:9b:08:cb:c9:82:0d:1a:89:95:fe:79:0b:aa:70:
         fa:e1:4d:2d:54:f9:08:9f:78:a4:1c:15:39:cc:f8:ab:eb:4c:
         2f:b6:56:46:1c:23:74:96:fa:d2:d6:ac:98:73:0a:19:93:9a:
         35:a2:bb:59:2e:29:5e:9c:86:ae:55:d0:39:69:16:88:48:77:
         0c:bf:b2:26:21:69:9d:af:4c:cd:0c:91:bb:c1:5e:15:0d:bb:
         cc:36:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org