Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa
File:                     3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa (raw, json)
Hash identifier:          HY+RqDkddYGx9CgM1e5TctBiCz2gptuc1JiDMVYEO00=
Subject key identifier:   D4:80:C5:F5:54:C9:08:D5:25:60:44:93:3C:22:C6:B6:16:44:D8:3F
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       0787E3372398715B2D0E79017F844CD6A7536C91
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa
Signing time:             Fri 05 Jan 2024 23:00:00 +0000
ROA not before:           Fri 05 Jan 2024 22:55:00 +0000
ROA not after:            Fri 03 Jan 2025 23:00:00 +0000
asID:                     61888
IP address blocks:        186.235.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:87:e3:37:23:98:71:5b:2d:0e:79:01:7f:84:4c:d6:a7:53:6c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan  5 22:55:00 2024 GMT
            Not After : Jan  3 23:00:00 2025 GMT
        Subject: CN=D480C5F554C908D5256044933C22C6B61644D83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:7a:25:92:2f:d0:1e:0a:8e:af:e3:86:c9:
                    f4:49:01:23:22:a5:68:a3:2d:ee:74:ef:94:13:07:
                    d8:d6:c2:55:f6:de:a2:aa:4a:f9:c0:90:71:6c:56:
                    df:9b:87:f0:e9:09:ee:b0:fb:6b:fb:d2:4f:a5:87:
                    50:dd:00:95:be:aa:ea:4c:c9:53:17:59:45:9f:aa:
                    7d:2c:1f:55:5b:b4:25:81:68:77:43:05:46:05:e2:
                    89:52:d7:86:41:61:bc:d7:1e:17:21:a1:16:92:57:
                    9d:a1:00:a1:34:81:ad:a9:a4:27:5b:4b:ca:51:ae:
                    12:1c:72:de:65:e7:9b:f7:35:f2:ab:38:d4:8f:a3:
                    61:5f:59:ef:9a:b5:73:5d:5a:70:0f:a2:10:75:53:
                    91:be:75:14:b3:ce:32:4b:bb:7e:4b:0e:b9:96:e2:
                    bf:68:da:b7:6d:1f:53:d9:65:ad:ce:c7:23:df:52:
                    ac:5b:3d:10:e9:76:fd:8e:5a:a5:53:eb:19:cb:80:
                    ea:6f:b4:82:fc:57:a8:69:84:b6:14:bb:70:8d:59:
                    18:41:a7:af:98:18:b8:4b:b1:00:eb:9e:46:84:48:
                    eb:dc:c3:f0:ca:99:4f:a0:72:6c:ce:6d:37:15:30:
                    0d:85:10:01:97:43:fa:bb:88:f1:f5:78:fa:34:c0:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:C5:F5:54:C9:08:D5:25:60:44:93:3C:22:C6:B6:16:44:D8:3F
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138342e302f32322d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:c5:f6:ff:40:04:1c:58:49:81:0e:b2:45:1f:99:91:1b:
         bf:34:b1:e2:60:fb:ad:4b:41:43:7b:48:68:d2:54:e3:b7:80:
         3f:a8:b7:db:2b:1d:39:e8:ed:99:d6:28:47:ad:6e:b5:c3:86:
         e4:52:96:16:6d:74:f0:db:2a:ef:51:86:de:6e:d3:94:db:b6:
         93:a0:fc:75:77:32:ff:91:0f:47:89:f7:b3:d3:d7:06:44:d4:
         58:3e:34:81:b5:13:dc:b7:b4:92:1c:dd:c8:dc:9d:3d:0f:66:
         23:bc:6a:97:85:51:58:ca:14:bb:64:96:92:a1:26:87:39:3c:
         af:80:27:f0:b4:f0:17:b6:3e:63:1c:a4:46:05:ca:57:96:66:
         10:31:d3:d0:82:45:2f:7d:e1:ef:45:d6:aa:74:f6:9c:50:84:
         45:fa:89:ae:3f:5b:3c:d6:32:7b:37:a7:cb:4c:f0:c8:4f:89:
         a6:de:c5:7e:df:46:89:b8:79:72:50:b8:cc:42:4a:a7:1b:f6:
         86:cd:2b:e9:e5:26:c6:35:cd:dc:fb:cd:ff:6e:95:3d:ab:57:
         1c:3f:9f:8f:61:4f:f1:23:15:77:1d:52:e8:f4:2f:e0:57:90:
         cb:a0:23:b2:b0:26:aa:82:41:21:eb:4d:63:68:d1:c4:b5:73:
         b9:ef:14:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org