Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233372e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233372e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          k5FfitvcOSGmYG54maXrT4WJ1gJMViQH3Y0f1UdZtkE=
Subject key identifier:   A8:20:90:B2:77:CF:BB:B4:F2:A2:20:2F:C4:2F:B5:52:49:95:06:5C
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       0930A2E15FF8D6F690D14BFD11C7D414B68AFD68
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233372e302f32342d3234203d3e203238333338.roa
Signing time:             Mon 13 Jun 2022 20:56:12 +0000
ROA not before:           Mon 13 Jun 2022 20:51:12 +0000
ROA not after:            Mon 12 Jun 2023 20:56:12 +0000
asID:                     28338
IP address blocks:        189.84.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:30:a2:e1:5f:f8:d6:f6:90:d1:4b:fd:11:c7:d4:14:b6:8a:fd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Jun 13 20:51:12 2022 GMT
            Not After : Jun 12 20:56:12 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e3:6e:a8:e6:bc:70:1f:c9:64:bf:0b:f3:5e:
                    cb:a7:b9:35:03:4c:41:50:6d:60:78:03:bd:38:78:
                    7b:20:65:e5:21:7e:77:c7:f6:28:aa:5c:54:50:c0:
                    e1:99:0a:0a:0a:40:9b:e3:f5:29:45:40:0c:01:c5:
                    4f:50:2a:23:8f:c1:fa:71:f3:a3:d0:1d:b5:10:33:
                    17:e6:ff:0d:d4:12:59:10:eb:1c:94:53:79:4c:82:
                    12:21:9d:d5:18:49:80:3a:0e:99:7c:c0:c2:a6:58:
                    1f:9c:fd:f2:20:55:6b:df:08:02:0d:c7:4c:ac:1f:
                    31:74:31:3f:3a:e0:1b:fd:90:13:7d:72:fa:cd:fd:
                    80:a0:6e:6c:3c:c5:a2:5a:c1:03:f3:d2:09:a9:9a:
                    da:d0:5c:ab:37:a9:00:06:1f:50:aa:51:f5:83:23:
                    c7:77:e5:53:1e:94:48:ee:fa:f6:de:90:ad:5b:74:
                    7b:d3:0f:f2:81:8c:ca:9d:a7:ce:07:66:0b:32:8d:
                    91:a5:09:34:a7:c4:73:9a:7b:00:71:22:dc:29:e3:
                    38:8e:2e:89:f8:c3:98:ae:b6:1b:d9:56:26:4e:2a:
                    8c:23:19:0f:98:e6:5c:6c:a0:00:3e:2a:64:c7:3d:
                    cb:95:78:ae:b8:f5:4f:ac:a8:d7:a1:40:ac:e7:95:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:20:90:B2:77:CF:BB:B4:F2:A2:20:2F:C4:2F:B5:52:49:95:06:5C
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233372e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:b2:79:7a:b3:56:41:02:12:6d:fc:26:b9:b2:93:55:34:
         90:ab:f3:b3:35:bf:46:9b:67:04:0f:e9:94:5c:61:03:9a:c2:
         60:80:57:12:71:3d:53:3f:7e:c7:cc:e7:d4:d3:73:42:31:1a:
         3d:61:ea:56:2e:4f:c7:61:eb:1e:32:f1:7a:b5:0b:71:af:dc:
         bc:58:f5:85:38:43:74:7f:17:1d:97:82:5b:4a:d4:5e:b2:3a:
         e1:de:22:5e:99:87:85:48:4a:bd:b2:36:ac:9c:1b:0a:0b:67:
         a7:2b:ab:7c:02:2b:5c:5b:49:2b:fb:95:fd:49:c6:75:20:de:
         70:03:7b:a1:da:eb:98:7f:76:9e:a7:27:50:64:a8:11:17:46:
         51:1c:14:fb:6e:aa:d6:49:36:e9:df:91:6c:72:83:b7:7d:7c:
         92:24:0e:3e:8f:6d:82:09:7d:50:10:8c:97:ba:d9:78:f7:c2:
         ef:42:b0:57:84:5a:05:55:89:e0:31:f1:0c:f2:a1:12:e1:fd:
         e1:42:c6:85:5b:1e:73:dd:36:43:e7:de:f9:b5:9c:88:94:29:
         1a:1d:5d:4a:ac:76:90:e4:41:b7:e3:71:07:62:f8:2f:5c:79:
         39:4a:8b:4a:86:3a:b2:52:c7:f0:c1:02:89:c6:d5:4e:cb:a3:
         27:73:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org