Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233332e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233332e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          PzIXpJZAIdsoIOhaqBu7MvqlQG9IvkPT7lpwY8/LYIQ=
Subject key identifier:   2D:61:29:03:69:0B:6A:FB:11:4B:5F:91:A6:1D:6A:8B:45:40:37:D8
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       633CE82ABF1CFDE9883332243148611C4E72DCE4
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233332e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     28338
IP address blocks:        189.84.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:e8:2a:bf:1c:fd:e9:88:33:32:24:31:48:61:1c:4e:72:dc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:64:6d:7f:20:eb:8a:65:8e:a2:13:0c:7d:
                    d5:4a:cb:9f:07:f2:f6:bb:ce:52:8b:8c:b2:0b:51:
                    3c:41:0c:fd:6e:e3:2a:42:b9:37:b7:ea:df:6d:6d:
                    22:0e:7f:05:ab:a2:15:97:f2:59:b4:da:06:ee:bf:
                    2b:0f:bf:f9:5f:cb:fb:1c:a9:f2:43:a4:a9:34:7e:
                    a4:4a:ea:1f:29:11:69:6c:37:55:d4:83:1d:f6:b4:
                    92:d6:31:00:87:e7:a4:d7:5a:19:49:b4:a4:59:e4:
                    f8:d5:99:e6:d1:85:ad:59:b4:cd:f5:84:d7:e0:a0:
                    bf:91:98:7d:fd:af:ce:7b:3e:b9:87:06:0e:ed:1c:
                    50:54:57:e4:32:e8:3f:79:25:dd:89:48:63:c6:48:
                    ef:41:b8:f1:63:a0:6e:8c:3e:6b:04:de:42:78:b1:
                    b4:e6:3f:6a:18:f2:6e:9d:fa:da:d9:13:c2:f1:5b:
                    d4:02:fe:52:f7:ad:ac:38:cb:5f:d2:f4:f6:f6:46:
                    c1:1f:83:8f:0b:88:bb:c1:01:fd:9f:51:5b:cd:03:
                    c6:af:3d:e5:b5:86:ab:8b:81:23:74:f3:62:7c:2d:
                    d3:c0:80:77:d7:fe:b7:cf:02:0b:2c:de:44:35:e5:
                    54:c2:ba:b9:f2:f1:15:1b:40:35:bf:3c:22:74:61:
                    4a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:61:29:03:69:0B:6A:FB:11:4B:5F:91:A6:1D:6A:8B:45:40:37:D8
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233332e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:43:9f:e5:49:a4:cf:62:b5:41:a0:d8:2a:e1:46:68:06:dc:
         b3:db:cf:43:aa:4c:1c:a9:3f:cd:64:5a:27:4a:a4:1d:98:c6:
         81:da:c5:4f:84:28:ea:d8:93:f9:14:81:b1:ae:0f:56:44:9d:
         84:0f:0b:7a:c8:ca:3f:4d:dd:bd:ff:4d:90:9d:dc:8e:63:87:
         5c:44:6d:1a:80:52:2f:cd:46:ea:73:02:f5:83:66:83:c0:95:
         8c:9d:89:49:fe:53:57:a5:52:42:ed:68:c2:70:4f:23:b9:bc:
         04:0b:66:3a:54:cf:74:34:21:33:3e:7d:e7:c8:0d:2a:28:22:
         5c:2a:50:67:11:aa:c5:cf:f8:b2:44:4d:56:10:c0:5d:5d:d1:
         e3:28:27:c0:1e:98:98:60:dc:4b:d0:f1:0d:d1:9f:a5:8b:51:
         82:59:cc:f3:34:07:51:fb:8f:5c:aa:80:06:84:0f:c6:bb:8d:
         d9:71:5b:6b:05:96:13:3e:ea:cd:8b:c5:dd:5e:81:c6:d2:1d:
         d6:25:78:24:50:47:b5:35:1d:16:3d:2a:6b:f6:f9:d4:95:e4:
         8d:47:a9:8b:5b:09:9f:47:b9:e3:6d:94:c3:78:18:72:dd:8f:
         3c:77:11:d1:73:73:7a:06:68:98:2c:ab:c3:45:e0:e9:f3:be:
         8f:7c:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org