Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          tHnENrzJstwJOZ0nNLY7rSyR43PHBPr0BSqBViJSYoY=
Subject key identifier:   2E:B8:C3:34:F3:55:F6:B5:CF:CC:76:8C:7E:97:C6:6F:52:A2:66:5F
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       06C5E536DF60F90BC804FCA17A6676341CEBEEE6
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Thu 25 May 2023 13:00:00 +0000
ROA not before:           Thu 25 May 2023 12:55:00 +0000
ROA not after:            Thu 23 May 2024 13:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c5:e5:36:df:60:f9:0b:c8:04:fc:a1:7a:66:76:34:1c:eb:ee:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: May 25 12:55:00 2023 GMT
            Not After : May 23 13:00:00 2024 GMT
        Subject: CN=2EB8C334F355F6B5CFCC768C7E97C66F52A2665F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:4b:74:7a:76:28:62:e6:18:14:ab:f0:7d:
                    12:df:b4:10:d5:f0:c3:0d:49:cd:da:ce:cb:07:fc:
                    20:e3:a5:4c:3d:68:ae:98:49:27:ee:d0:d6:6e:bd:
                    da:02:c1:ce:f6:d1:2d:74:c8:e6:ce:45:db:50:67:
                    24:3d:b1:8f:f6:df:a1:67:55:d0:b2:c2:b6:a9:d1:
                    48:ba:08:4f:01:d5:1d:68:47:37:fc:fa:03:71:b5:
                    19:00:23:49:5e:65:26:d1:7b:bf:8c:b0:84:f5:fa:
                    46:94:1d:02:b6:04:f4:ad:fc:9e:87:98:06:66:7e:
                    8c:67:dd:b0:ee:ad:23:2f:d5:38:a0:89:5d:d1:88:
                    f8:e6:69:ff:cf:2b:ae:1b:66:fc:9d:2d:9f:55:44:
                    35:a2:7b:7f:29:07:4b:42:4c:b2:59:d8:b7:d2:ea:
                    9f:3a:0a:6d:98:4d:3c:12:7d:6c:35:bc:05:81:5c:
                    2f:8d:4e:14:c9:1d:ff:eb:2a:bb:19:9c:7d:f6:bb:
                    4e:5a:12:1a:d4:4a:b9:af:7c:9d:a9:24:21:8e:83:
                    01:86:93:c9:77:c9:f0:bd:e7:3e:c6:76:14:ca:14:
                    40:e3:a6:fe:e3:9b:d3:91:7d:53:6f:81:76:d9:e7:
                    c4:25:dd:35:08:d3:f8:ab:c0:8f:6c:ef:cb:97:3c:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B8:C3:34:F3:55:F6:B5:CF:CC:76:8C:7E:97:C6:6F:52:A2:66:5F
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3130303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:93:89:14:e2:4e:30:aa:39:ce:6e:c2:ed:57:28:fe:05:
         79:55:76:d7:94:3b:0c:c9:c0:39:39:fe:a8:a8:42:d9:f1:3f:
         1a:27:d3:5d:1f:4d:10:06:bd:b3:18:7c:59:bc:8a:12:c0:6c:
         cf:fb:a5:3a:8a:97:d6:e1:8c:34:36:47:05:4c:88:d9:1e:c5:
         0c:d9:f2:e3:2d:65:c9:18:a0:16:b0:a0:bd:42:29:24:b8:00:
         8d:06:21:3b:ad:e9:4a:cb:89:87:34:51:4d:35:59:32:03:a4:
         ca:d6:7b:35:db:05:8d:84:11:9b:44:59:a1:9d:42:f8:10:a7:
         b6:a9:b7:4d:78:45:14:3c:07:2e:6b:43:4d:02:c3:a4:63:b1:
         87:ad:20:ef:c8:0e:a1:09:8b:5b:94:72:f1:62:0a:c2:1c:0f:
         ce:c3:e5:04:81:71:54:ad:ee:cf:40:c6:b3:4b:2b:5b:41:43:
         a3:db:e3:2e:e2:08:0b:ba:8f:a7:b7:fb:38:7d:d3:91:c0:bd:
         63:48:82:ea:f7:fd:ab:16:ee:49:86:36:47:19:f7:79:fb:fe:
         6a:84:ca:d2:00:5d:51:f2:2a:5e:a7:e4:e7:bd:de:2b:57:23:
         4a:a9:b3:78:a5:c5:37:77:87:48:8a:2f:ba:1a:f5:1c:f4:14:
         6e:66:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org