Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa
File:                     3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa (raw, json)
Hash identifier:          OdlVXVKszjo2U07mIqon7jh0f5nP75jKQ3cfKJUlnzE=
Subject key identifier:   9E:B6:EA:6F:01:43:57:99:18:8F:9D:18:35:49:ED:B3:66:49:CF:B2
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       7DF0AE95ABCD0966A177A36AE10C8F1F1003855F
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa
Signing time:             Fri 15 Mar 2024 12:19:39 +0000
ROA not before:           Fri 15 Mar 2024 12:14:39 +0000
ROA not after:            Fri 14 Mar 2025 12:19:39 +0000
asID:                     61888
IP address blocks:        186.235.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f0:ae:95:ab:cd:09:66:a1:77:a3:6a:e1:0c:8f:1f:10:03:85:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Mar 15 12:14:39 2024 GMT
            Not After : Mar 14 12:19:39 2025 GMT
        Subject: CN=9EB6EA6F01435799188F9D183549EDB36649CFB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:31:3e:e8:82:13:d2:80:a4:82:9c:b5:c2:
                    74:a3:1c:aa:7b:67:eb:95:9e:65:a1:93:29:32:95:
                    28:78:4f:ba:a4:c5:24:12:d5:85:47:c3:a4:b6:7a:
                    00:da:8a:fa:2e:d8:e9:00:58:7b:3a:24:37:30:af:
                    c1:64:c6:10:a8:f9:0f:5b:27:0f:4c:f7:30:de:78:
                    00:55:18:48:ea:31:75:d8:aa:88:bb:42:df:2d:c0:
                    67:ea:8a:d7:bf:40:03:b1:64:06:8e:e9:1e:eb:3d:
                    4d:17:69:44:db:b6:55:5d:f8:91:4e:72:76:08:ab:
                    d9:f3:1f:12:0d:21:6d:4d:58:2d:75:79:b2:e6:6e:
                    a4:82:af:9c:8d:2d:7a:d9:ca:8d:a4:e4:37:78:f9:
                    92:e5:1f:d2:e0:b1:1c:68:47:0c:ac:ef:de:f6:5d:
                    40:12:1a:41:1f:75:f8:91:de:3a:b9:89:7c:39:43:
                    c3:c3:3d:20:27:ce:6b:a2:56:20:f6:79:c0:72:0f:
                    82:0b:f5:71:8b:d5:8d:dc:00:d2:96:b5:cf:ba:a4:
                    47:14:e9:f5:81:96:41:5c:fb:56:fb:77:a7:54:d7:
                    f1:a9:cf:d9:d7:57:6a:e6:ab:f1:63:68:02:d3:39:
                    87:ba:e5:0b:42:ec:bf:e6:57:99:0a:e1:f2:c4:96:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B6:EA:6F:01:43:57:99:18:8F:9D:18:35:49:ED:B3:66:49:CF:B2
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3139302e302f32342d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b0:49:47:df:52:da:c5:2f:63:88:87:40:6d:d7:aa:7d:ec:
         3e:6f:8f:0f:60:e6:da:c4:85:b1:42:1f:2e:fa:7a:f1:55:90:
         cc:17:f2:a8:6b:c9:e4:28:b1:7d:27:dc:59:9c:de:65:3c:72:
         1e:6a:1f:eb:a9:25:9c:44:9b:d8:9b:2b:45:12:db:df:92:f5:
         b7:7e:8d:51:6d:8b:09:fb:b6:03:d9:2c:d8:2f:74:fd:f6:34:
         f8:39:60:1f:30:2c:fc:b5:bf:41:4d:5d:76:8e:b8:d8:71:23:
         1b:00:5c:92:39:0f:ec:27:63:b4:87:10:3e:49:3a:84:8c:23:
         88:2e:6b:bb:55:c3:b1:9c:9c:b6:68:a5:dc:4b:78:b9:91:92:
         3f:02:bc:76:c4:56:4d:32:76:bf:e2:91:04:bf:2c:27:dd:18:
         04:6c:07:69:89:bb:4e:7c:12:af:1b:50:cc:9d:79:e8:ed:2e:
         ab:54:56:30:00:b0:2c:77:5c:85:f6:85:09:74:f0:ce:44:8e:
         30:ca:87:9f:68:e6:6a:50:c1:6c:58:64:10:cb:cf:1d:19:ec:
         8f:17:98:97:83:1a:6a:20:22:97:9c:29:4e:00:a2:7c:47:db:
         7b:bf:cb:3a:a0:bb:5d:7a:a5:43:d2:64:c9:06:46:80:ff:55:
         c8:63:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:38 2024 by rpki-client on console-fra.rpki-client.org