Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
File:                     3138392e38342e3233382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          m8onrZ1bHSQ7xs1iTNnz7HTFjEWQebjZyEf49ifXdVg=
Subject key identifier:   95:F4:97:13:CE:4E:7C:39:8A:7F:D4:40:CB:91:2E:58:B9:6B:4A:43
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       303DD28EF8BF80DBA8D11DDBD210E0FEE534EDC0
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa
Signing time:             Fri 28 Jul 2023 21:00:00 +0000
ROA not before:           Fri 28 Jul 2023 20:55:00 +0000
ROA not after:            Fri 26 Jul 2024 21:00:00 +0000
asID:                     52468
IP address blocks:        189.84.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3d:d2:8e:f8:bf:80:db:a8:d1:1d:db:d2:10:e0:fe:e5:34:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Jul 28 20:55:00 2023 GMT
            Not After : Jul 26 21:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ab:a5:ea:6e:1c:d4:27:a0:58:b4:6c:a5:3e:
                    3f:9e:45:d9:cb:9a:e7:02:ab:72:1b:41:d7:a4:45:
                    e7:ac:95:e1:b7:8d:a4:9f:c3:7c:07:8f:2b:05:d2:
                    2d:b0:12:98:7d:12:f6:4f:81:e8:92:b5:79:8b:ba:
                    c7:99:06:f9:ca:af:8a:da:cf:c8:77:34:ba:30:10:
                    33:67:f6:86:50:17:0f:22:88:6d:cc:cf:45:4e:b2:
                    96:39:19:63:c7:72:e7:a1:85:d4:18:bc:37:75:3d:
                    9d:93:9c:01:e6:c8:07:08:98:8b:a3:81:54:fb:21:
                    88:03:97:7f:b0:f9:04:e9:e7:e0:de:46:a0:db:bb:
                    fc:1b:6f:5d:15:83:4f:16:af:ff:93:1d:24:97:46:
                    60:51:95:3f:ad:54:19:d1:41:a8:b1:34:ac:df:1d:
                    d0:b9:ee:8c:f6:aa:1f:36:d8:6d:27:3a:50:02:b7:
                    39:c5:73:07:f1:7a:e6:3d:9e:f9:da:45:40:2d:30:
                    d6:ea:e4:c5:d0:1a:0b:da:67:61:e1:86:0f:aa:6a:
                    19:b5:78:37:67:a9:b2:15:4c:a6:b5:c4:9e:ea:7b:
                    f8:9e:d3:89:e3:5c:9f:04:cb:58:91:30:1f:58:7f:
                    56:28:93:c4:ff:61:f3:41:fa:22:84:ef:e4:d7:eb:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:97:13:CE:4E:7C:39:8A:7F:D4:40:CB:91:2E:58:B9:6B:4A:43
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:15:44:f9:3c:34:9e:ce:0c:03:35:9a:33:bb:db:57:1d:46:
         28:23:33:b9:44:ee:da:6f:6f:70:10:79:b4:14:7d:bf:ab:8a:
         a3:68:67:a0:4e:dd:e8:2a:c6:93:22:ac:49:ea:e7:6b:ca:6f:
         ac:c8:49:59:6c:5a:b1:62:ab:ef:57:fd:04:66:34:6b:30:ff:
         c5:e8:5b:6a:54:53:9c:31:34:4c:a5:f4:38:c3:c6:87:e2:69:
         98:f0:97:4b:18:5f:70:ec:8a:f7:9b:a8:8e:6a:f5:5d:d4:87:
         b3:79:91:b9:23:69:2c:43:c0:0b:dc:b6:21:c2:2e:83:a4:70:
         55:f4:f5:88:64:eb:93:9a:bb:01:d2:ba:77:fa:12:fb:b2:f1:
         ac:38:9a:03:d5:a4:3b:51:59:79:59:c2:fd:8e:55:c7:87:0c:
         c0:26:30:23:01:15:2f:3f:b1:c1:56:ce:65:70:83:69:5e:98:
         79:ee:0d:f1:93:3d:8b:37:0e:27:81:c2:18:18:16:f9:a0:06:
         0c:95:85:24:08:81:7d:a0:49:53:3a:89:ca:f2:77:c8:f4:3f:
         13:9e:60:bb:23:3a:3d:85:91:6e:87:b6:20:99:c5:42:cb:12:
         01:b5:6c:da:ad:fc:d9:23:7e:8e:5f:3a:38:16:e5:ad:b7:9d:
         23:bd:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org