Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
File:                     3138392e38342e3232342e302f32302d3230203d3e203238333338.roa (raw, json)
Hash identifier:          a5EHKJQwKF9bOdZFMM1F+qzVws+c3v7ZkoDoN1+9wPg=
Subject key identifier:   D9:26:FA:C3:A4:A1:F0:57:81:31:03:0A:DC:0A:BD:C4:40:E9:59:06
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       2AB55F86D64EA600970C720F4DD2D66CB97C377F
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 19:00:00 +0000
ROA not before:           Tue 05 Mar 2024 18:55:00 +0000
ROA not after:            Tue 04 Mar 2025 19:00:00 +0000
asID:                     28338
IP address blocks:        189.84.224.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b5:5f:86:d6:4e:a6:00:97:0c:72:0f:4d:d2:d6:6c:b9:7c:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 18:55:00 2024 GMT
            Not After : Mar  4 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:46:8c:98:c4:24:73:3e:b9:f4:6c:d2:00:
                    38:74:68:9e:84:41:92:ae:87:8d:07:72:a9:b1:d1:
                    e6:f1:c4:08:7c:4c:24:a5:e2:64:9f:9c:3f:d6:8a:
                    86:c3:e5:d0:6d:dc:f1:fa:25:2a:86:bd:0d:1e:0f:
                    46:67:cc:35:04:db:db:19:b7:f0:28:63:77:de:10:
                    ac:0c:b6:de:2a:b0:b0:5b:fa:b6:11:25:27:04:48:
                    49:68:1c:3d:2a:32:eb:c7:7a:b6:47:20:57:09:f4:
                    8b:2c:d4:2c:79:5d:9c:d2:73:98:a3:2a:2f:0f:8a:
                    42:d3:81:e3:e2:2b:b7:18:b1:4d:bd:07:78:22:64:
                    3a:8e:60:3c:72:af:09:b4:a5:c1:74:ec:2c:c3:91:
                    0d:fc:fe:cb:79:d5:db:a7:c8:36:5c:63:03:98:c5:
                    0a:0e:0d:e4:30:90:3f:e7:af:29:d6:36:a5:0a:23:
                    63:ca:b1:3f:b8:bb:cb:9a:74:97:09:5b:8d:48:28:
                    de:0d:a4:3d:21:3f:95:f7:23:72:b4:30:b7:e7:bc:
                    96:8c:f8:52:0e:16:85:b3:b8:40:dd:a5:57:17:79:
                    02:7c:ab:31:f1:01:76:76:6a:ff:87:ce:b6:6d:4a:
                    5b:ec:86:bf:fc:38:1a:a2:d4:66:a0:82:f7:b9:f9:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:FA:C3:A4:A1:F0:57:81:31:03:0A:DC:0A:BD:C4:40:E9:59:06
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3232342e302f32302d3230203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:ef:89:6d:4e:9e:08:2d:f0:51:b9:21:5d:a4:db:20:52:2b:
         93:99:6a:dc:e9:8b:53:91:7c:5d:d1:a1:e5:27:4d:7e:54:fa:
         ef:54:c5:9d:fc:4e:24:75:e6:46:95:1f:cd:6e:4e:80:19:90:
         18:05:c7:b3:2e:87:a4:39:c2:5e:ae:f8:c5:69:ac:35:d7:b8:
         e3:92:87:9a:b2:dc:41:6f:d0:68:38:66:8d:aa:42:a5:6f:f0:
         fd:41:b3:d1:89:9f:3c:b0:e9:c1:3d:c2:f5:d3:bd:36:e6:14:
         1e:56:97:a4:b0:76:17:0a:6b:a5:c5:c7:4e:13:28:d6:ae:21:
         d3:8a:d0:88:37:11:97:f0:3d:a3:3e:59:67:3c:6f:23:01:69:
         bf:4e:7f:93:74:eb:7d:ab:98:75:98:ed:74:8a:80:63:d7:9a:
         8b:99:ec:c5:07:1a:65:36:a2:ec:d6:e0:3d:cc:b5:15:58:5b:
         68:d7:85:0a:52:ec:1d:86:0a:5e:84:52:b1:eb:a9:5e:ab:d0:
         10:8a:48:f1:4a:eb:81:f0:0e:a3:28:f3:74:e9:c0:8d:29:1e:
         d7:bc:44:67:6e:0e:6c:9c:78:01:f4:23:14:98:4b:28:f1:6c:
         83:db:99:f3:20:1e:17:06:c2:ca:ca:ca:a7:b0:02:8d:45:11:
         63:4f:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org