Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233322e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233322e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          A+zaQjpndjsIO8SlO81bcfpZwNQXJDL1QIKkMjiPhwk=
Subject key identifier:   B2:0C:94:41:0D:A3:DD:76:C5:A5:83:D6:F7:3B:98:BB:48:DE:01:5B
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       4F49413B7934479CFC335919F006D6D6F39B12F2
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233322e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 17:00:00 +0000
ROA not before:           Tue 05 Mar 2024 16:55:00 +0000
ROA not after:            Tue 04 Mar 2025 17:00:00 +0000
asID:                     28338
IP address blocks:        189.84.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:49:41:3b:79:34:47:9c:fc:33:59:19:f0:06:d6:d6:f3:9b:12:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 16:55:00 2024 GMT
            Not After : Mar  4 17:00:00 2025 GMT
        Subject: CN=3082010A0282010100D995C9EEB6222987307E8986B638FA2AFAA1CD99E5ABAAE2B9B021496B41C54D18275F87092E55B0B1A55E22A50509C0767AE01A8BEAF2DDAD361D40FF971B523BCA5FDCB7488DA807E2B1698BCF9916ECB4B76AABB230F5B7C1BE6A2D6CF3A3AD662637A0A78FAEF955B0AD3B017CF4A68143E48A4672C8697FCE474B6D33EFF2749EF0090C80AC7EDDA359C4557E69AD8E89A4E71EA4A70BAF2DFDCBCE145D609354A6DA8E5D14D751AC73BCF9EFA99C2BFE2B1CCD6676BE21B0952B2F7E5F37D2DB7AB4C4EEB96F281C3789A8476E56C3302A46163103D1224F441F604344D0919CA60630C211EDB2D27E5F130DF81D4B83CB389F6EBC1225C9E88AA4B0630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:95:c9:ee:b6:22:29:87:30:7e:89:86:b6:38:
                    fa:2a:fa:a1:cd:99:e5:ab:aa:e2:b9:b0:21:49:6b:
                    41:c5:4d:18:27:5f:87:09:2e:55:b0:b1:a5:5e:22:
                    a5:05:09:c0:76:7a:e0:1a:8b:ea:f2:dd:ad:36:1d:
                    40:ff:97:1b:52:3b:ca:5f:dc:b7:48:8d:a8:07:e2:
                    b1:69:8b:cf:99:16:ec:b4:b7:6a:ab:b2:30:f5:b7:
                    c1:be:6a:2d:6c:f3:a3:ad:66:26:37:a0:a7:8f:ae:
                    f9:55:b0:ad:3b:01:7c:f4:a6:81:43:e4:8a:46:72:
                    c8:69:7f:ce:47:4b:6d:33:ef:f2:74:9e:f0:09:0c:
                    80:ac:7e:dd:a3:59:c4:55:7e:69:ad:8e:89:a4:e7:
                    1e:a4:a7:0b:af:2d:fd:cb:ce:14:5d:60:93:54:a6:
                    da:8e:5d:14:d7:51:ac:73:bc:f9:ef:a9:9c:2b:fe:
                    2b:1c:cd:66:76:be:21:b0:95:2b:2f:7e:5f:37:d2:
                    db:7a:b4:c4:ee:b9:6f:28:1c:37:89:a8:47:6e:56:
                    c3:30:2a:46:16:31:03:d1:22:4f:44:1f:60:43:44:
                    d0:91:9c:a6:06:30:c2:11:ed:b2:d2:7e:5f:13:0d:
                    f8:1d:4b:83:cb:38:9f:6e:bc:12:25:c9:e8:8a:a4:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0C:94:41:0D:A3:DD:76:C5:A5:83:D6:F7:3B:98:BB:48:DE:01:5B
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233322e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:1e:5a:13:c1:a9:60:25:81:7f:72:a8:13:5b:a4:e1:4a:8c:
         07:02:5e:40:f4:15:e2:f8:92:7e:2e:3d:58:5c:2b:6b:b9:f3:
         9b:b4:e4:18:00:6d:b7:5b:20:b8:04:2e:77:7f:50:c8:f8:4d:
         de:64:91:55:f9:9a:83:b4:0f:03:b4:31:6a:4f:f4:4c:a0:98:
         b1:ca:94:d9:db:d8:85:a6:f3:c4:ac:67:0f:c6:b2:b3:22:72:
         7c:f9:d7:81:21:22:92:b9:b0:f3:9f:c2:04:39:15:8d:d4:64:
         50:ac:68:d2:92:e5:a0:9a:3a:d5:19:38:fb:bd:f6:19:21:71:
         40:15:b9:79:9e:ab:4e:bf:7b:64:7c:29:02:21:77:17:0c:ac:
         17:eb:eb:41:6c:dd:24:28:8f:21:ea:6f:28:47:f1:5a:e3:47:
         38:33:8f:6e:02:e3:19:8c:8c:71:ca:da:a5:c8:90:8e:60:fb:
         5c:ac:fc:27:01:f0:d5:81:df:e4:e5:32:1b:36:5d:94:49:a6:
         63:4b:44:59:4d:a0:5e:25:d9:2e:52:50:2c:40:c8:95:5b:fc:
         8f:0c:13:a4:86:5b:4f:5f:01:07:48:c7:c1:18:60:06:bf:ec:
         96:99:1a:21:41:00:cf:3d:d3:33:d2:75:a4:0d:b4:68:24:6f:
         b1:ad:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org