Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e372e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e372e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          49Z2uDJN8ZKma6JUbvTcEvJzaAFYI4QB5N4dYyEUlv0=
Subject key identifier:   9F:9C:DF:D4:4A:16:DE:7E:65:C1:3F:4E:79:75:B2:3C:87:4D:45:3B
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       3B1807587F4CBB553E5E184F9B956D5E4BD749E6
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e372e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 03 May 2022 16:00:01 +0000
ROA not before:           Tue 03 May 2022 15:55:01 +0000
ROA not after:            Tue 02 May 2023 16:00:01 +0000
asID:                     28338
IP address blocks:        189.45.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:18:07:58:7f:4c:bb:55:3e:5e:18:4f:9b:95:6d:5e:4b:d7:49:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: May  3 15:55:01 2022 GMT
            Not After : May  2 16:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:ae:6a:8d:78:05:ee:8e:32:a9:f9:58:46:
                    ec:8f:f2:f0:07:0e:ce:0f:ca:64:fd:16:ab:80:a3:
                    9d:48:14:d3:33:97:49:01:01:d1:39:54:84:9a:c1:
                    23:04:8c:24:2b:18:0e:07:19:7a:3b:b8:68:65:df:
                    a5:c7:b8:21:45:fd:39:9f:bd:e6:39:42:ac:2b:62:
                    6e:59:c7:fe:c8:69:8c:9f:1f:f9:fd:07:cf:19:9f:
                    3a:ec:02:50:49:7b:7d:e3:6f:ca:c1:92:86:8b:b7:
                    07:4a:17:9e:31:70:01:85:62:a5:43:a0:4e:b8:47:
                    e9:6c:8e:aa:d9:26:9d:1b:b5:ca:6a:90:38:fb:e5:
                    42:b2:3e:28:eb:e7:36:63:f8:9c:68:74:cb:80:0a:
                    bf:78:88:f1:55:41:3e:e9:85:aa:cb:f6:fb:c2:c3:
                    00:54:80:d4:32:5e:45:4b:a1:4f:7a:29:58:dc:c5:
                    a9:63:74:7a:d7:50:37:1f:23:6c:16:e7:27:4b:3a:
                    36:38:ce:23:b6:67:15:60:17:c9:93:ce:c1:fc:5a:
                    ad:24:50:0b:f9:50:67:28:67:ee:0d:3c:37:c5:a7:
                    d1:37:9d:73:73:05:2f:bf:cb:3b:8c:2f:03:7d:c2:
                    60:8d:b2:40:5c:ba:f1:a0:fa:a4:be:09:a6:c9:02:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:DF:D4:4A:16:DE:7E:65:C1:3F:4E:79:75:B2:3C:87:4D:45:3B
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e372e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:dd:3c:4c:3d:3e:49:c0:b8:7e:c4:99:1c:f4:f2:25:f4:
         70:1c:dd:39:bc:80:a9:a9:48:4e:ba:7d:3f:5b:11:42:cd:68:
         82:8d:bc:5e:d9:9c:e0:95:6e:9e:e7:0c:f8:5f:49:91:43:5a:
         fe:50:59:8b:84:21:1a:30:bf:43:7d:a5:8d:5c:f7:af:7f:b6:
         23:48:e1:b0:5f:7f:5b:56:cb:94:33:db:a3:69:7b:9b:1b:08:
         4c:87:c7:fc:c3:21:74:43:fd:a8:6c:11:54:45:7e:18:f8:ae:
         16:7f:c9:c4:29:0f:d2:e2:9e:a6:d5:b4:b2:59:d9:85:d1:d7:
         be:a0:44:16:3b:6c:1f:1a:62:a4:f0:69:36:23:5a:84:4d:bd:
         52:60:59:d4:ae:cf:78:c2:2e:5a:ee:da:bb:4b:cb:76:b6:89:
         e5:b7:1f:fd:74:a9:70:45:38:13:a7:71:16:cc:34:43:81:42:
         9d:0a:26:7b:db:83:04:6a:74:f6:3a:41:f0:ca:08:8c:b8:0e:
         5e:74:60:cb:cf:4e:61:54:f5:aa:66:ac:06:d6:32:ab:10:fc:
         bf:d6:7c:6f:03:ed:95:67:78:4f:0f:d3:d1:f1:16:4b:51:d1:
         51:52:af:b7:c6:62:2f:a2:0d:f0:eb:7f:69:a7:32:63:d4:87:
         b7:18:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org