Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233302e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          vh2oKvoi0DxHngFAcmqBXB5vWzcKCYCM5yr/EWOA7Es=
Subject key identifier:   D3:A3:46:D0:96:6C:B0:F3:0F:98:D3:2D:CD:07:C4:04:DF:32:9B:95
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       4364DE2FA947C12E19B9F5BE680EF1202A9BD756
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 16 May 2023 20:00:00 +0000
ROA not before:           Tue 16 May 2023 19:55:00 +0000
ROA not after:            Tue 14 May 2024 20:00:00 +0000
asID:                     28338
IP address blocks:        189.84.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:64:de:2f:a9:47:c1:2e:19:b9:f5:be:68:0e:f1:20:2a:9b:d7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: May 16 19:55:00 2023 GMT
            Not After : May 14 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:98:9d:be:7d:4c:20:ef:3d:b7:78:ca:dc:
                    db:12:ee:b5:0b:3e:ae:32:e1:79:f4:2c:47:48:4a:
                    f6:e0:ce:92:12:92:78:ea:83:a9:2d:f3:34:ea:23:
                    a1:40:d6:fb:63:4d:32:c9:a5:38:92:9d:57:a0:63:
                    cf:a0:e6:ac:51:e4:1e:27:08:4a:58:f2:6a:e3:82:
                    d5:8c:ca:01:e4:b2:83:e7:f8:95:32:db:ab:f5:26:
                    30:da:c9:ee:97:88:4b:14:b7:cb:35:61:d7:ef:05:
                    e2:96:f6:82:46:6c:d6:6c:d4:eb:9a:85:f8:c6:0d:
                    08:b9:1d:91:77:77:4c:d6:56:16:77:83:cf:d7:4f:
                    33:27:4b:d0:ab:e4:2a:fb:63:93:4a:4c:9b:e3:a9:
                    d7:57:2a:12:48:7a:2c:ed:1c:5a:01:33:55:94:32:
                    75:38:cc:b2:c2:62:a5:7e:4a:92:56:51:40:24:05:
                    96:29:87:e9:c3:73:e5:a3:ac:2b:a3:34:dc:b5:85:
                    a3:bc:6d:5f:a6:22:2c:a3:25:c6:95:b6:ec:49:9c:
                    05:e5:d4:b6:cf:54:85:09:b5:2b:35:f2:ed:db:66:
                    94:ae:d2:6e:ff:51:19:6e:96:3f:28:05:87:24:a6:
                    50:14:f2:9b:aa:d6:64:ba:1c:8d:12:be:cd:b5:81:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:46:D0:96:6C:B0:F3:0F:98:D3:2D:CD:07:C4:04:DF:32:9B:95
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233302e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:a9:ad:79:40:d2:a0:ae:16:93:d8:7c:95:3b:13:65:e5:
         1b:59:7c:32:48:03:15:9a:f2:5d:30:a3:19:34:ab:e3:4b:a5:
         8c:78:f2:03:a3:55:84:37:d6:5f:53:ef:5e:02:b1:65:27:a5:
         b9:60:2c:82:54:57:13:c6:5b:21:05:e7:59:28:e8:69:c2:0d:
         41:b4:47:b0:c2:94:dc:07:87:0c:c3:40:a5:97:43:f4:e9:5c:
         05:8b:2b:29:eb:27:5a:70:d7:37:0d:a5:0c:5b:e1:f1:a7:55:
         60:59:32:80:c7:08:6a:14:b8:0f:4e:c4:01:c0:f1:dd:8c:8c:
         97:a6:71:b1:a8:19:f3:45:3a:74:ac:2e:e2:c2:9b:22:ab:a5:
         b0:64:82:61:d5:57:cf:ba:52:fa:6c:7c:18:96:86:52:27:5c:
         b5:38:a3:8f:d0:dd:dc:f1:d4:b2:5a:6a:37:7c:5c:ce:f0:5e:
         99:d9:f2:24:a4:c0:bc:de:46:c4:4d:a3:fb:2c:74:0f:f6:1e:
         f1:9a:9c:2a:44:60:d5:a6:52:48:9a:ef:fd:c5:ca:b1:c4:d3:
         58:e8:1c:5b:6c:cf:39:77:6e:95:fc:02:39:6e:a3:7f:4a:dd:
         88:28:95:3d:41:72:5c:21:86:0f:68:ba:cb:8a:e3:a6:eb:03:
         7c:f5:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org