Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32322d3234203d3e203631383838.roa
File:                     3138362e3233352e3138382e302f32322d3234203d3e203631383838.roa (raw, json)
Hash identifier:          DbBf59JCNyk9t+5q47mc9suKdt1utSDQPHyqPVTKU1U=
Subject key identifier:   0E:76:E1:F0:DF:9F:92:F0:8D:DD:67:76:2C:42:E1:3D:05:0A:E9:57
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       5BDFE3E59231103C308D651639FDB249811D8F33
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32322d3234203d3e203631383838.roa
Signing time:             Fri 05 Jan 2024 23:00:00 +0000
ROA not before:           Fri 05 Jan 2024 22:55:00 +0000
ROA not after:            Fri 03 Jan 2025 23:00:00 +0000
asID:                     61888
IP address blocks:        186.235.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:df:e3:e5:92:31:10:3c:30:8d:65:16:39:fd:b2:49:81:1d:8f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan  5 22:55:00 2024 GMT
            Not After : Jan  3 23:00:00 2025 GMT
        Subject: CN=0E76E1F0DF9F92F08DDD67762C42E13D050AE957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:41:a3:2d:bd:3c:f1:4b:0d:ef:52:67:84:
                    0f:5d:eb:d2:ff:f2:b4:b6:10:af:34:6e:12:90:c4:
                    c8:ee:29:5a:76:66:2f:8c:10:90:4b:dd:f5:71:5e:
                    15:4d:15:8f:6c:3d:16:42:0f:75:4a:f4:b1:91:54:
                    19:34:a0:93:a3:05:47:f7:ff:07:8f:10:75:d6:23:
                    c1:9f:63:c1:0f:1c:64:98:56:1c:c0:cd:49:08:7e:
                    3e:14:19:f7:27:6c:34:aa:bc:95:25:06:08:b4:f4:
                    2e:6d:ab:d7:ea:ba:e7:7d:7f:46:7a:ca:fb:ae:68:
                    5e:32:a0:2e:f8:de:c1:a2:1b:39:23:ee:47:66:39:
                    14:99:c8:eb:15:38:a4:1b:57:39:e7:9f:50:d7:5a:
                    85:e7:bb:43:6a:01:88:6a:60:65:87:95:70:2c:a5:
                    bf:26:e6:81:b9:ef:84:b8:5e:0f:02:24:3c:4c:6e:
                    1e:c6:25:05:a1:ad:cf:ff:f6:cf:1a:b1:d5:51:ee:
                    a1:76:5f:b3:44:ff:9d:ba:da:df:d9:7f:57:69:c6:
                    b4:e5:00:70:ac:d2:3a:8c:fb:2f:1c:ef:cc:44:3c:
                    82:5b:29:b2:de:93:24:36:b8:00:74:13:3c:0b:00:
                    7c:36:6d:d0:6c:a3:35:84:4d:41:40:59:60:57:f5:
                    fe:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:76:E1:F0:DF:9F:92:F0:8D:DD:67:76:2C:42:E1:3D:05:0A:E9:57
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32322d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:07:b2:cd:a1:79:d3:85:5f:eb:62:16:87:dd:d1:7b:c0:9d:
         bc:e2:5c:0d:c6:4b:5f:f1:77:1c:53:01:fa:e4:cd:df:41:3f:
         25:d1:ce:40:84:0d:84:de:38:e1:fc:8c:5a:f9:59:79:71:32:
         01:70:d4:a4:a7:2a:e3:0d:60:0f:cb:95:65:dc:24:a7:96:d2:
         f3:62:8c:aa:e1:85:56:5b:93:53:e5:6e:bd:25:fa:d4:b7:68:
         9d:79:67:48:d7:c2:03:21:d8:97:b9:91:9a:b4:fb:2f:29:73:
         64:9e:c8:9e:78:ab:5e:dc:b3:a0:3d:9d:0d:e5:0a:e5:09:c0:
         6e:7d:7e:00:86:f8:ae:18:b0:41:7b:a9:5f:b8:98:f5:be:f0:
         13:10:90:cf:03:be:ee:7d:31:9f:bd:bd:d1:44:07:53:6c:c1:
         2d:04:ff:f0:c6:f3:4f:46:36:b5:d7:92:14:1d:aa:b8:ae:dc:
         a6:42:9a:12:74:66:47:05:e3:ad:71:3f:af:99:8d:f1:88:62:
         66:58:28:07:56:b0:67:c6:e6:d1:3a:49:0c:d4:9f:36:8b:c5:
         02:88:9d:7f:15:1e:b8:26:36:f7:33:cd:72:3d:22:66:37:75:
         e4:e0:23:57:d0:0b:d6:3b:5a:07:e7:5e:1d:8f:02:ea:0a:84:
         1d:96:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org