Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          bLk6W3VrxjCmtzYkntY2vGhEBJMVUVhcD22mrjFSFiQ=
Subject key identifier:   C0:90:9E:71:C6:4C:DC:C1:FE:64:C7:D7:AC:89:A4:2D:DF:9A:B2:43
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       2C8A5435809FC624F6A9591957FC1189AAA17EB7
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa
Signing time:             Mon 15 Jan 2024 13:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:55:00 +0000
ROA not after:            Mon 13 Jan 2025 13:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8a:54:35:80:9f:c6:24:f6:a9:59:19:57:fc:11:89:aa:a1:7e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan 15 12:55:00 2024 GMT
            Not After : Jan 13 13:00:00 2025 GMT
        Subject: CN=C0909E71C64CDCC1FE64C7D7AC89A42DDF9AB243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:6a:4e:11:61:d3:44:1a:0f:3e:72:47:e5:
                    71:62:db:5e:a7:4a:71:5d:63:d9:bb:f7:39:ee:7a:
                    98:fe:48:89:ff:6d:86:ef:91:0a:c2:36:25:09:8b:
                    ea:19:eb:fa:3e:d5:62:2f:66:54:15:fe:00:ab:d3:
                    bf:72:0b:b4:d2:c0:9d:16:14:e1:58:4d:01:a3:9b:
                    b4:10:a1:96:9a:62:c3:49:ec:f3:80:77:97:c3:4b:
                    c8:0e:6e:78:be:31:8b:c2:b0:7f:9c:79:b6:7a:7b:
                    54:6d:c4:6c:10:c9:eb:a4:8e:85:94:56:36:d1:8b:
                    21:9e:f8:6e:38:53:75:09:41:08:4d:75:36:99:a0:
                    79:f6:4e:4d:00:07:9b:3d:9e:b5:3f:70:d9:35:d0:
                    ac:5a:55:50:d0:38:3c:8f:f9:dc:8c:c7:f7:40:7f:
                    bb:aa:c6:e7:20:53:57:ce:02:74:aa:10:93:dd:30:
                    aa:af:75:27:de:4a:29:88:1d:d9:55:e4:c9:cb:88:
                    a7:d4:d8:6f:cf:eb:0d:79:bf:60:e8:3c:de:f4:38:
                    51:f8:39:39:b5:13:87:81:7a:45:5b:5a:71:34:8b:
                    e1:c7:51:f1:6b:c5:66:52:f5:bb:16:04:6d:a8:eb:
                    8e:4a:9f:63:15:e9:2f:55:75:42:0e:91:f4:3d:6b:
                    3f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:90:9E:71:C6:4C:DC:C1:FE:64:C7:D7:AC:89:A4:2D:DF:9A:B2:43
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31343a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:f5:d5:24:4e:ff:fa:ed:60:49:ff:43:7f:d9:c6:3e:3a:3f:
         9c:f3:36:6e:a0:93:f6:3c:17:cb:77:c8:11:f8:97:07:bf:b1:
         93:0e:af:a1:bd:1b:d9:9c:4b:99:1a:33:db:72:71:ac:22:3b:
         9c:6b:98:ac:ed:44:2c:f3:54:06:28:fb:8f:72:1e:e2:33:17:
         4c:ef:bc:f4:9d:93:18:aa:a7:5c:e1:c3:82:d4:5b:6f:e2:76:
         6a:dd:30:5f:96:7a:6f:7a:67:a5:fe:b9:f0:88:4f:35:dd:51:
         dc:52:7c:89:5c:c0:34:ee:89:a5:b6:97:2a:dd:f5:ad:a8:be:
         c2:c5:6c:d1:4f:cd:d9:05:08:17:1a:31:70:86:12:7c:6f:16:
         76:4b:2b:38:c7:30:93:8c:9a:a2:6d:9b:00:d2:94:19:42:c1:
         f9:a8:4d:e2:6b:18:10:65:ee:83:dd:01:e8:42:c1:82:95:33:
         bd:75:76:9d:68:f9:6c:8a:19:17:40:97:dc:d6:b7:08:c5:48:
         3b:6c:00:c5:85:76:77:89:4f:52:00:ce:21:a0:ac:ea:6f:d9:
         9f:0c:c2:17:4e:60:e4:c2:d8:35:44:70:89:0a:ba:04:96:e2:
         b3:45:66:ac:b7:ff:7e:89:77:7b:02:76:68:53:8c:fa:db:d7:
         cb:91:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----