Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233352e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          RS6rwKdMmRIzoYRothUje6YNKJjCnW3belFQKjowq4o=
Subject key identifier:   88:11:2C:DC:D8:15:17:D7:8C:73:A4:5D:62:3A:21:08:64:96:A8:73
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       566BA702DE372948C05D8FB41C8E790EB67CA21B
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 17:00:00 +0000
ROA not before:           Tue 05 Mar 2024 16:55:00 +0000
ROA not after:            Tue 04 Mar 2025 17:00:00 +0000
asID:                     28338
IP address blocks:        189.84.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6b:a7:02:de:37:29:48:c0:5d:8f:b4:1c:8e:79:0e:b6:7c:a2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 16:55:00 2024 GMT
            Not After : Mar  4 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:47:5a:f8:57:6e:6e:f2:8a:87:19:ac:e7:
                    58:4a:31:2a:15:44:da:da:98:e8:f1:a5:cf:df:f0:
                    af:6a:f0:7e:14:29:14:6a:f7:f2:be:d4:a3:85:19:
                    a3:84:ba:e5:1f:18:14:c4:20:6d:b3:8c:50:74:64:
                    15:b8:dc:10:78:23:f2:4e:2b:42:67:4c:25:7e:3d:
                    4b:98:7f:1e:22:27:70:ea:33:b9:86:4e:71:52:b7:
                    7a:17:aa:29:48:86:72:59:f9:1e:42:f5:58:b8:e0:
                    d5:72:69:67:5b:8a:f1:a8:b8:de:4f:84:92:33:fa:
                    7a:ba:c7:52:e9:61:5d:2e:e6:8d:65:6b:a2:9f:75:
                    5e:3d:04:88:25:c2:f5:f6:9a:3c:94:5e:66:7b:4d:
                    21:e3:32:29:45:cb:db:a9:4d:9e:07:bd:1e:f1:a5:
                    e0:73:fc:06:5b:61:a7:38:a0:a9:2e:4b:a9:86:29:
                    d6:13:7c:09:4a:72:d0:1a:39:9f:48:59:72:12:df:
                    1e:b2:ce:2b:17:f2:b5:d8:83:90:f1:78:69:1a:9a:
                    91:78:ce:b7:f1:81:ae:01:e1:c3:4b:0e:b4:2e:ff:
                    66:b2:ac:4d:2b:d0:c0:17:b8:a5:0c:8d:1d:a1:6d:
                    e4:bb:0c:d0:03:d8:d0:ee:2a:d4:73:84:b7:cf:96:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:2C:DC:D8:15:17:D7:8C:73:A4:5D:62:3A:21:08:64:96:A8:73
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233352e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:64:3a:58:1b:ed:f4:4f:cf:5a:16:eb:4c:ab:6c:93:b2:
         5a:04:77:8a:fc:f0:ea:e8:7f:f0:4f:5d:71:05:35:95:bf:dc:
         46:1b:84:b6:c8:18:3c:6c:75:ef:2c:9e:9d:19:71:b4:db:71:
         cd:67:52:a3:a0:16:4f:6a:76:44:b5:96:a7:b5:71:ff:42:f7:
         49:17:b1:08:2f:71:1a:ac:de:09:d6:82:39:a0:62:8c:97:28:
         99:25:71:b6:83:e3:41:ee:c3:cf:85:ca:a8:ea:ae:ff:45:b1:
         b1:eb:fb:66:89:9a:e1:c9:65:07:39:e2:88:62:7e:f0:78:ec:
         9c:de:8a:ca:43:35:4e:66:67:20:16:5c:9e:42:97:20:d2:a6:
         0b:4d:85:c5:f9:ad:96:f3:d0:fe:f3:df:21:3c:02:77:6a:aa:
         ed:da:17:e8:7e:56:a6:17:a2:98:ad:2e:75:64:7a:32:40:12:
         f0:18:58:93:90:d1:a9:c6:30:07:b7:ca:ba:2b:7b:11:dc:4f:
         c2:5c:89:12:00:2d:5d:3f:6a:36:81:66:65:dd:33:01:bc:9d:
         c2:90:df:7e:6d:97:16:ce:86:da:db:75:50:06:25:20:c3:68:
         21:a1:78:fb:64:69:96:42:df:09:24:ae:5c:bf:dd:b6:bc:ec:
         ed:84:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org