Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa
File:                     3138392e38342e3233392e302f32342d3234203d3e203238333338.roa (raw, json)
Hash identifier:          aijWlraaK0tCZ8uEEDdG0CRq4DFSXrGBo+jjppvx48w=
Subject key identifier:   03:39:A1:7D:39:78:76:0F:55:EB:C4:52:42:48:00:CA:39:78:79:0C
Certificate issuer:       /CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
Certificate serial:       34CD6B72F6E7963DF8433D46F472642963FDAFE2
Authority key identifier: 61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     28338
IP address blocks:        189.84.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cd:6b:72:f6:e7:96:3d:f8:43:3d:46:f4:72:64:29:63:fd:af:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:4e:c6:51:a3:05:5d:d0:e3:f0:1a:e8:ed:
                    07:88:9a:97:84:93:95:40:5d:9a:21:aa:21:1c:d7:
                    f1:79:b1:67:96:6d:12:50:c1:60:07:c7:8b:ad:95:
                    dd:96:62:54:d9:94:a4:0d:00:3b:2f:a5:bf:1a:20:
                    98:d1:eb:d6:41:7e:cb:f3:9e:cb:bb:c8:9e:5c:59:
                    7f:c7:0e:3e:ee:5c:0b:d3:85:d5:4c:a4:c0:bf:24:
                    09:8c:bc:d3:2d:e1:eb:d3:52:7d:e3:f8:76:92:9e:
                    b3:d7:97:9d:ca:c6:af:95:bb:4f:d0:00:cd:02:59:
                    c2:d0:78:64:36:30:5b:df:66:70:64:83:21:d4:b0:
                    37:4b:b5:97:ef:46:d6:28:b8:35:09:a9:6c:3c:09:
                    a8:08:67:f1:d9:aa:d7:c6:aa:a9:fc:fc:2f:f4:20:
                    f9:2a:26:e3:96:66:7f:91:0a:f8:46:cb:d8:d9:ab:
                    41:2a:07:0a:93:ed:43:24:11:28:8e:0f:69:cc:bb:
                    07:39:0d:aa:da:82:75:d1:c3:6b:fe:d6:1c:d5:70:
                    22:73:5f:39:94:ea:58:45:ac:92:cd:a8:dd:4c:75:
                    71:c8:2b:a6:b5:73:81:af:b0:06:ee:44:b3:f8:4c:
                    8f:fa:0d:3b:47:c8:a1:8c:f7:74:d6:d7:fa:01:78:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:A1:7D:39:78:76:0F:55:EB:C4:52:42:48:00:CA:39:78:79:0C
            X509v3 Authority Key Identifier:
                keyid:61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/3138392e38342e3233392e302f32342d3234203d3e203238333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:49:bf:d1:ff:ee:19:2e:d1:b8:0a:88:aa:07:f8:fe:c6:f2:
         a4:55:80:8e:a8:29:15:32:e7:30:68:db:11:7d:f6:98:0b:4b:
         c8:54:ae:67:61:5e:61:b2:cd:1f:5d:e9:bd:aa:01:9d:2b:f5:
         9b:ca:f5:2e:c2:74:0d:20:d5:c4:60:94:7c:6b:dd:9d:b4:11:
         74:5f:46:e4:39:2a:ae:87:6c:2d:73:f2:f9:8b:fe:2a:84:3b:
         2b:4a:59:06:6c:07:6c:f2:ae:1c:b0:44:fe:78:57:4a:02:4f:
         5b:bb:41:ca:76:e1:ff:bb:fc:50:fe:5b:78:fa:86:f6:48:e0:
         02:2c:81:9d:c8:4d:55:11:16:60:bd:2b:69:b7:1e:5a:fb:c3:
         11:8f:b2:6f:0c:c4:8e:97:20:76:37:9d:ee:f4:62:1b:2b:1f:
         e3:f8:b8:ff:fb:53:4a:21:cd:f3:6b:fc:52:90:4b:dc:19:e8:
         89:86:ec:2d:4e:67:18:4c:dc:bb:63:9f:a3:12:2c:c8:3b:e6:
         e4:1a:14:68:d9:63:98:c4:36:83:7f:98:ec:91:d1:04:d8:e2:
         8b:62:1d:5d:f5:70:d8:9f:ca:b9:bd:23:9d:2a:29:e1:41:ae:
         db:02:a2:9c:63:a4:ca:75:80:38:aa:7c:a7:9f:51:9f:54:92:
         02:fe:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org