Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233382e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233382e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          D/VD9dkz9biJsDzbwxXfbEW66xbZjXwvUxQ0wntZeNM=
Subject key identifier:   47:87:B3:BD:C5:F1:35:8F:4E:CD:B6:25:13:7B:6F:12:91:1E:83:98
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       2E231427B17713F01EB1DB62007E3A7EDFFB4C80
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233382e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 03 May 2022 17:00:02 +0000
ROA not before:           Tue 03 May 2022 16:55:02 +0000
ROA not after:            Tue 02 May 2023 17:00:02 +0000
asID:                     28338
IP address blocks:        189.84.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:23:14:27:b1:77:13:f0:1e:b1:db:62:00:7e:3a:7e:df:fb:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: May  3 16:55:02 2022 GMT
            Not After : May  2 17:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:c3:7f:a5:0f:3f:36:61:b3:aa:17:50:7e:
                    62:66:8a:1e:be:f6:a4:75:86:67:30:89:c0:71:e9:
                    26:a8:b6:b0:0b:be:5d:1d:ce:ea:e3:fc:30:a3:da:
                    e9:03:bd:fe:d5:c1:e2:74:af:e1:1a:33:c3:92:32:
                    47:19:48:ac:52:39:80:d8:9a:72:4b:14:45:a3:87:
                    27:2d:5a:dc:5b:1b:9b:24:09:ee:1c:62:d4:7d:86:
                    0e:8c:e1:1b:7a:c8:4c:cc:46:2b:f1:b8:63:d0:d9:
                    85:b1:ea:35:d3:ee:67:1a:4f:0d:c2:4b:c7:c4:57:
                    02:9b:2b:a8:53:d9:cc:a8:d0:1b:7c:22:91:c5:a9:
                    c4:16:70:fc:be:2b:8c:41:f5:a0:4a:b7:8f:f1:fe:
                    b1:40:3a:f4:82:3f:58:0e:13:da:2a:0f:a5:74:17:
                    43:b8:17:4d:75:9a:a3:42:d5:af:b4:50:0b:4b:0a:
                    05:ae:93:3d:66:74:c8:c4:48:af:d1:a7:74:03:3c:
                    d2:b4:0f:81:e2:53:cd:7d:55:db:6e:06:59:8a:6d:
                    51:51:27:f2:12:d4:c4:8b:3b:10:4b:34:da:4b:c2:
                    3e:77:21:29:94:41:4b:03:da:d6:e5:b3:0d:8d:b5:
                    3a:a2:ed:f4:90:1c:ba:1e:6c:ad:a2:48:27:35:2c:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:87:B3:BD:C5:F1:35:8F:4E:CD:B6:25:13:7B:6F:12:91:1E:83:98
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233382e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:df:6e:6b:32:8c:72:f3:b8:9f:67:0f:0a:c8:74:d0:1b:
         25:93:6d:ff:53:4e:5f:51:fe:da:96:f0:28:98:ea:d8:1c:75:
         3b:ea:74:7a:6e:25:71:fd:dd:8c:09:30:7c:9a:2d:44:50:4c:
         39:46:6b:0a:3a:e7:23:bb:81:c9:38:93:ba:08:84:2a:19:6a:
         be:b6:28:7f:d4:fb:2c:23:07:b9:1d:ac:dd:8b:6c:19:d1:06:
         e8:63:79:cc:ff:95:59:08:35:df:8c:23:a5:b0:d8:31:80:a8:
         de:4f:51:ff:aa:a6:ee:fb:73:e3:c2:f6:e8:21:e2:34:55:f5:
         c1:7b:f9:c1:e0:e3:67:ff:34:9a:97:f7:59:52:8a:b4:14:97:
         55:25:d7:f8:a0:74:a4:89:d3:cd:a9:9f:a4:5e:0d:23:5c:de:
         fa:ba:58:ae:17:6f:99:1b:ad:8c:51:82:6c:df:42:9d:3b:b5:
         77:3f:25:a5:64:ed:70:e1:06:1b:59:52:86:d3:4b:98:d0:b5:
         f0:5f:d8:c8:fb:3c:d4:7d:6e:ec:01:b8:eb:19:9f:53:e3:2e:
         1f:2a:42:ff:00:7c:45:57:02:f1:52:5e:b1:50:84:9c:47:a0:
         48:36:80:8d:20:da:70:58:fc:2e:29:40:48:89:2e:23:70:31:
         6d:94:7e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org