Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233342e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          +8uAROVUO7HiKwZqXWfKd9M5a4ptBtlmODk/5mrKtog=
Subject key identifier:   C4:EC:0B:15:5B:15:1E:17:8F:38:88:FF:85:F4:1E:60:58:4A:7A:9C
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       01FD1DAF2AEA4DEA18A748A39FB930084310F9A0
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:03 +0000
ROA not before:           Tue 05 Mar 2024 17:55:03 +0000
ROA not after:            Tue 04 Mar 2025 18:00:03 +0000
asID:                     28338
IP address blocks:        189.84.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fd:1d:af:2a:ea:4d:ea:18:a7:48:a3:9f:b9:30:08:43:10:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:03 2024 GMT
            Not After : Mar  4 18:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:e8:43:a0:b8:65:37:14:17:00:04:25:0c:
                    f3:8b:43:08:ac:6b:4d:0b:ff:aa:f0:6e:c8:b6:68:
                    ca:ac:22:7a:4c:1a:cb:fc:85:0c:29:d8:2b:ab:29:
                    93:5b:92:a3:38:43:8f:84:a9:96:c9:49:de:ba:43:
                    81:41:45:dc:a9:58:28:fe:83:ae:0d:e4:20:d0:88:
                    2f:ff:fe:ce:c8:63:6e:f4:89:a6:1a:c0:1d:2a:8b:
                    54:06:da:92:07:61:6d:57:94:0e:bf:af:3d:7b:a2:
                    a9:29:82:0e:b4:8b:e8:91:d7:fd:b2:a2:e0:ac:70:
                    97:c7:63:1a:7e:1f:72:a6:14:b1:6c:59:df:7a:77:
                    db:69:9f:79:c0:58:7a:07:c5:6c:cb:14:78:de:f9:
                    31:f0:64:68:89:9f:8b:3d:38:d1:1b:2b:5f:01:29:
                    18:8e:5c:ca:9c:bb:16:5d:55:57:85:2d:17:a1:b0:
                    28:29:63:b5:c8:fe:d8:ce:76:71:49:c4:a1:c7:d0:
                    11:f6:0c:dc:5c:4d:04:48:7a:7c:16:23:50:1a:29:
                    cb:22:2b:e9:56:5c:c5:18:7e:8a:12:96:0a:b2:15:
                    7d:1b:93:e1:7a:b6:a0:27:28:25:28:5e:65:3f:6f:
                    ce:ed:43:fc:bb:f9:a3:aa:79:68:2d:e4:b4:51:55:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:0B:15:5B:15:1E:17:8F:38:88:FF:85:F4:1E:60:58:4A:7A:9C
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233342e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:99:99:89:84:d9:90:10:c1:3e:e0:d8:65:5d:9e:e9:be:
         1d:c1:17:b1:b8:09:fb:7a:e9:1c:fc:67:c1:87:af:40:86:90:
         ff:87:7c:2a:f6:77:c4:ec:04:c5:9e:d1:0e:57:76:90:54:2f:
         7e:99:c2:29:f8:0c:18:d9:a3:dd:3d:08:47:f2:5b:23:b1:c5:
         7e:54:ee:f7:b4:01:82:85:03:1e:f8:cf:f9:6a:67:3b:4a:6e:
         7f:c5:5f:0e:89:c2:33:2c:7d:89:01:d0:f9:15:b6:b8:16:da:
         1b:13:07:94:97:b8:ae:f4:9a:d3:5b:f1:1e:c6:d7:46:e6:eb:
         5c:0d:30:af:db:2c:4d:8a:1b:3e:4a:ba:16:22:4a:9e:2d:d0:
         6d:af:58:9b:ee:a4:cf:5f:d0:23:37:e6:6b:cc:b0:87:ed:e8:
         ba:49:a1:6d:42:b6:fb:e5:6b:25:f5:ae:c7:9d:ba:70:01:f8:
         bc:34:b0:f5:2f:fd:c1:7b:e3:32:26:35:df:15:c6:1e:f5:21:
         02:93:6c:96:ef:d6:26:16:69:11:f5:2e:9c:e7:8f:23:41:86:
         12:f7:d5:e3:58:c0:6f:94:9a:a4:10:bb:8c:ee:23:62:5e:db:
         f1:3d:27:91:a5:0b:87:88:e8:b8:f2:a8:ec:e0:03:c3:9d:c4:
         7b:a7:25:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org