Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa
File:                     3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa (raw, json)
Hash identifier:          FZy3wHCCQ59sJQmZBiY8Mk0WLyebiDj6UHoJ38v/cEM=
Subject key identifier:   84:5E:BE:06:9B:5B:C7:EC:9F:11:47:AE:D4:4A:44:95:85:BD:E2:0C
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       3535D454B2B923CC8F49DD4ABB46754201837E0F
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa
Signing time:             Fri 15 Mar 2024 12:19:03 +0000
ROA not before:           Fri 15 Mar 2024 12:14:03 +0000
ROA not after:            Fri 14 Mar 2025 12:19:03 +0000
asID:                     61888
IP address blocks:        186.235.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:35:d4:54:b2:b9:23:cc:8f:49:dd:4a:bb:46:75:42:01:83:7e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Mar 15 12:14:03 2024 GMT
            Not After : Mar 14 12:19:03 2025 GMT
        Subject: CN=845EBE069B5BC7EC9F1147AED44A449585BDE20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bb:4f:25:d9:c9:64:32:5e:22:0a:06:1b:1f:
                    eb:cf:9f:be:70:e4:16:e7:ce:1e:2a:4e:2d:af:6c:
                    8b:f1:68:87:6d:14:7b:4e:ff:11:9e:18:1e:7e:97:
                    d5:50:d2:60:cb:13:c1:ca:df:dc:f3:db:90:d6:b9:
                    df:f8:1c:c0:1c:63:0c:5d:e2:56:ac:24:4d:69:d7:
                    d0:94:c6:0d:ce:f3:08:65:a9:de:01:bd:dc:d1:c4:
                    0c:9e:bb:11:4a:76:14:f2:11:2c:ec:2c:ab:03:19:
                    25:2b:c4:1a:d9:30:61:4c:e9:13:90:7f:09:5b:cf:
                    ef:c1:67:38:5c:7d:d3:0d:f3:b8:57:86:1f:98:a5:
                    0e:5d:56:a8:33:82:b1:99:1d:d7:cc:d6:c2:7d:22:
                    7a:43:c6:ec:da:4e:d1:e4:9f:c1:87:35:5e:3e:22:
                    4c:2a:50:09:26:12:32:0a:ec:d4:7e:ea:4a:36:c0:
                    28:71:2a:77:68:22:c1:95:c3:dd:07:1f:86:84:7b:
                    0c:0f:38:0d:1a:0b:5e:0f:ce:c3:70:31:93:ff:99:
                    e5:27:4b:47:ba:21:6c:53:1a:07:fd:83:a5:88:ce:
                    b3:15:1c:3c:9d:61:ff:ed:bf:9a:c2:78:a4:7b:88:
                    02:e4:6a:cb:a9:14:8d:85:33:e9:4d:03:4d:cd:6a:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:BE:06:9B:5B:C7:EC:9F:11:47:AE:D4:4A:44:95:85:BD:E2:0C
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32322d3232203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:13:cd:c7:29:3f:b7:e0:d7:24:22:69:c7:e7:9e:db:48:
         96:6f:fb:90:59:98:dc:14:6b:d7:ac:ef:76:16:5c:3f:42:a1:
         07:8e:32:ef:37:cd:b5:12:8a:3a:82:10:b4:9a:4d:58:44:d8:
         3c:a5:6f:73:8a:aa:b6:2d:ab:4d:a6:4d:3f:c5:82:96:e1:44:
         dc:0b:34:6a:0f:65:91:64:84:d4:a1:7f:55:39:dd:fc:26:51:
         f5:d8:99:56:be:86:49:4b:6b:18:e4:59:10:12:ff:b0:b2:af:
         bc:cd:57:16:9e:48:02:85:c3:6f:b5:d4:cd:52:69:61:39:56:
         c4:38:4b:b5:32:ee:2d:79:9a:38:e6:42:8b:d0:18:76:2f:d0:
         4b:65:f4:6c:f4:e5:e7:9d:40:ef:ff:bc:03:24:43:b1:06:74:
         c9:68:3c:a3:7e:db:da:1d:d6:fa:aa:be:29:0c:97:38:01:64:
         83:c3:1a:53:72:6e:31:47:e3:c6:cc:cf:3e:ec:9b:56:05:0c:
         0a:47:c7:67:e7:40:73:cf:80:56:20:50:71:e8:ac:d5:c2:26:
         2e:51:ed:c2:82:09:e1:6a:55:65:58:16:9f:4a:c1:62:3f:89:
         f6:89:9c:fd:e8:3a:88:6a:9e:ef:b3:86:dd:c9:f7:fb:fc:cc:
         7d:12:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org