Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Vn6cJt1FNuFHvQH1iIwopZeFT/tkDOAOGC/YGVpTF+U=
Subject key identifier:   A6:F2:0F:D2:EF:22:47:6A:9B:23:FE:93:8B:42:8C:E9:B0:D1:81:F0
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       77121758AF5B42D0ADA94BE53E2F68733F9004A8
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 28 Jul 2023 21:00:00 +0000
ROA not before:           Fri 28 Jul 2023 20:55:00 +0000
ROA not after:            Fri 26 Jul 2024 21:00:00 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:12:17:58:af:5b:42:d0:ad:a9:4b:e5:3e:2f:68:73:3f:90:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Jul 28 20:55:00 2023 GMT
            Not After : Jul 26 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:97:41:0d:0e:03:e8:2e:b2:13:71:77:ed:
                    76:6a:9e:74:b7:0e:6b:4d:93:6c:76:7c:3c:6f:3b:
                    8d:87:fe:f7:b6:75:2a:70:13:66:b9:f4:19:df:48:
                    17:60:a5:fa:e6:8b:c1:84:1e:66:f8:d7:2e:0f:25:
                    76:dd:3d:3a:b6:70:24:74:36:0d:16:3e:11:27:f8:
                    7e:a6:b3:d5:56:24:38:e9:35:07:8e:13:28:c5:73:
                    dc:86:01:d4:ac:d7:97:b1:35:87:f8:5b:0f:12:28:
                    55:bb:1b:df:99:ba:c6:4a:06:3c:dc:f2:19:e7:ad:
                    a2:38:2a:d5:0f:b9:36:44:83:8f:33:78:85:c8:ff:
                    b3:8c:31:ba:14:e4:8f:97:37:63:e5:8b:c0:db:58:
                    28:03:f0:a5:10:8b:0c:e4:ad:b8:2f:ef:34:29:6f:
                    2e:78:2c:55:d8:18:3f:0c:33:f2:46:4f:86:71:d0:
                    8e:a4:25:54:80:78:54:b1:1f:e9:91:9a:da:cf:e3:
                    c8:01:f2:6a:ef:a9:cd:36:85:c1:db:78:ef:ee:af:
                    52:00:99:59:a3:fa:13:4e:51:8a:65:cc:d8:0b:d4:
                    75:32:66:ac:19:95:8a:61:1a:e4:69:46:8b:b7:5e:
                    35:9d:9e:bb:72:a1:72:01:a8:92:53:1a:b1:91:22:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F2:0F:D2:EF:22:47:6A:9B:23:FE:93:8B:42:8C:E9:B0:D1:81:F0
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:31:f4:a6:2f:e8:c9:15:d8:a2:f5:cf:43:d1:73:b7:d2:86:
         89:98:c7:89:3a:f1:68:f7:ef:8e:ea:6e:49:3a:5f:ac:5e:c6:
         b6:35:37:75:25:a5:dd:0e:89:61:70:4e:7a:d8:df:78:b8:68:
         22:7f:81:fd:16:f2:fe:d6:8e:8a:ee:81:8f:c1:bf:38:83:3c:
         ec:4d:19:30:a3:c5:31:be:c0:c5:99:be:d5:b2:98:d7:0f:ac:
         fc:25:46:e0:9e:9c:af:8c:3a:5b:4d:26:9c:95:22:e3:c8:1e:
         22:bd:c6:c0:1f:4c:79:f3:c5:d8:af:97:de:3b:3f:70:e0:16:
         63:94:6d:9f:ed:19:c8:c1:8e:cf:62:65:09:04:f4:31:ef:ac:
         47:4b:76:d4:08:da:f8:63:16:21:02:e1:1e:76:8e:e9:f2:53:
         4e:aa:a5:63:4c:6a:c9:c0:c1:6e:ca:28:73:d6:5d:a9:e2:96:
         28:fb:4d:23:64:56:50:b0:c7:c7:ac:9c:4e:01:07:ac:e5:d0:
         ff:be:6d:43:cb:51:5c:9d:35:ad:9d:9c:f9:d3:f9:a8:33:44:
         4c:01:71:2b:57:e2:8e:ed:c7:18:f0:65:68:0d:cd:7b:4f:79:
         a5:a1:df:59:51:a0:c9:2d:d6:36:9f:f4:90:10:f0:e5:12:cd:
         16:59:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org