Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e382e302f32342d3234203d3e203238333338.roa
File:                     3138392e34352e382e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          4WX+3CfP4C3fOeuB6jhwI3KYINJcnOPkgBJux06RcEI=
Subject key identifier:   AB:27:EF:53:E5:49:F0:5C:62:B5:88:97:83:5E:5B:37:AF:43:25:9A
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       7EBE880AD9EED4E3547652DCE6C7C9F02EE718D2
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e382e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     28338
IP address blocks:        189.45.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:be:88:0a:d9:ee:d4:e3:54:76:52:dc:e6:c7:c9:f0:2e:e7:18:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:1a:59:05:21:46:b4:ec:38:70:07:4b:b2:
                    e8:4e:09:17:03:55:ef:71:9e:3f:7a:a2:4f:18:f2:
                    cb:03:bb:f5:bb:d2:f5:84:c2:f9:0c:9a:80:4d:48:
                    9a:87:6c:a3:8a:b0:f4:85:02:a5:73:1a:9f:66:6c:
                    73:b0:8b:7b:97:28:4a:06:06:50:36:7d:34:c5:1c:
                    77:d7:24:34:43:c4:63:eb:43:48:c9:63:34:d3:c9:
                    af:a3:a5:ba:d3:43:1b:af:e2:8f:17:73:a3:a7:e1:
                    91:c3:18:1c:cc:02:86:b7:9b:f7:94:43:f6:6e:7e:
                    a9:4e:ee:7e:54:ec:78:a6:24:8e:1c:4b:a1:5e:d4:
                    05:9b:41:fe:76:0b:83:fe:28:d1:73:17:6b:00:23:
                    00:47:3d:d4:3c:d8:e1:f1:71:7c:46:45:da:12:0f:
                    26:76:0b:c5:5d:61:f6:a6:52:42:9c:17:3d:08:bd:
                    53:cd:dc:aa:92:78:3b:1a:bc:fa:2e:6c:2d:ea:dd:
                    ab:e2:1b:81:c8:fe:51:5e:76:0d:07:af:cf:38:f5:
                    9d:8e:83:8f:a5:26:eb:f3:78:3c:cf:00:43:37:69:
                    eb:51:e5:58:d6:8c:e1:43:97:fd:35:df:2d:60:ee:
                    eb:44:26:12:b7:3e:ee:55:3e:02:5c:08:b6:1b:ea:
                    ec:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:EF:53:E5:49:F0:5C:62:B5:88:97:83:5E:5B:37:AF:43:25:9A
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e34352e382e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:07:b3:20:35:52:1b:76:75:42:81:e0:e6:82:42:b8:d4:46:
         2a:87:fa:83:24:f4:71:87:86:8d:75:2b:b2:95:c9:3d:d1:46:
         d8:ca:90:69:ec:28:1b:30:0f:95:ff:66:62:b5:d9:98:4f:d4:
         fb:a3:d0:d3:58:99:bc:18:ae:5e:17:72:4e:c7:01:93:af:8e:
         06:cc:2b:9d:78:fc:b2:0a:e0:97:80:af:bc:1a:42:54:69:21:
         8b:8e:be:7c:d6:bf:5b:d3:ea:c8:c6:26:be:c3:3d:2a:d6:d5:
         d5:1a:b7:b3:a7:8d:9d:fb:52:6e:e9:1e:d1:14:65:e1:4d:f1:
         31:6b:32:5e:5b:58:f4:0c:c4:3f:7a:55:cc:83:3b:28:76:15:
         b1:bf:b0:f2:85:b4:ea:1f:16:66:78:e9:b8:14:93:08:5a:3c:
         ec:34:9a:c9:e3:07:28:1a:10:3b:8c:84:f1:ea:dc:7a:62:aa:
         42:44:03:12:09:c7:6e:f1:6a:a8:c1:bc:38:e6:0c:70:9a:b6:
         59:eb:7d:8c:53:af:28:ff:c0:15:fa:f4:08:74:60:41:3a:ee:
         22:8e:61:c4:dd:4a:1e:a1:0a:f2:d0:f4:a8:dd:c3:5e:8e:51:
         a5:af:18:b8:e8:fc:61:3c:73:7a:9c:bc:a8:7b:8d:7c:ab:d9:
         12:37:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org