Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa
File:                     3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa (raw, json)
Hash identifier:          pG8N6hRS4re8+eUnt25rZ7Wp2ur8Xd0cneZwuxRRjY0=
Subject key identifier:   CB:72:FD:23:ED:A5:DD:2B:D1:51:26:C5:DA:A1:F2:1E:6C:F4:B4:00
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       6908F149C9EB91B511FFDB83FAADA6B841B81C64
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa
Signing time:             Fri 15 Mar 2024 12:19:31 +0000
ROA not before:           Fri 15 Mar 2024 12:14:31 +0000
ROA not after:            Fri 14 Mar 2025 12:19:31 +0000
asID:                     61888
IP address blocks:        186.235.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:08:f1:49:c9:eb:91:b5:11:ff:db:83:fa:ad:a6:b8:41:b8:1c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Mar 15 12:14:31 2024 GMT
            Not After : Mar 14 12:19:31 2025 GMT
        Subject: CN=CB72FD23EDA5DD2BD15126C5DAA1F21E6CF4B400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:31:73:e9:ce:76:07:0a:db:94:67:b1:6b:
                    fc:1a:38:fc:f3:af:89:95:fe:05:58:05:57:e2:1a:
                    53:65:24:29:b1:e1:c5:0b:a8:53:1c:a1:d3:b9:b0:
                    96:e4:49:80:b2:1f:14:a9:7c:18:55:7c:d4:27:45:
                    f1:da:97:50:39:ca:3e:54:ac:af:96:09:14:b4:90:
                    ef:f6:26:2d:f2:91:81:26:80:49:47:35:9c:d8:b6:
                    1c:6a:47:6c:b8:df:a5:23:8b:09:65:43:ad:a8:45:
                    b3:ee:ac:ee:2f:b1:a7:f2:7d:09:4f:ec:72:08:53:
                    f8:9d:39:9a:1e:49:10:a1:69:0b:80:07:51:64:b7:
                    c7:18:ff:1c:14:82:e0:d1:23:4a:ed:7f:a4:0b:8e:
                    38:a9:89:97:46:d5:3b:19:9c:fc:52:f8:55:54:95:
                    ff:3e:f5:7d:66:ff:1c:a6:ba:5d:91:93:6b:18:f1:
                    5a:bb:5e:2e:36:94:88:ab:45:57:55:9d:d7:90:d6:
                    80:cd:bf:79:5a:a3:f5:8b:fc:06:bf:25:f1:fc:f5:
                    47:a3:a8:c6:4a:86:dc:44:35:50:28:04:30:0c:d4:
                    89:ec:40:78:2b:d6:26:24:e6:3c:0d:00:91:09:0e:
                    96:41:78:23:14:01:2c:0c:64:b7:13:5b:f2:a0:ce:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:FD:23:ED:A5:DD:2B:D1:51:26:C5:DA:A1:F2:1E:6C:F4:B4:00
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/3138362e3233352e3138382e302f32342d3234203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ea:8d:9e:40:8a:46:cf:c4:55:b7:f1:4f:e6:f6:78:17:e7:
         6c:06:7e:3a:f2:82:b5:dc:92:91:ee:51:3f:d9:ca:53:46:50:
         fc:4a:e5:4b:ca:3e:29:3a:a1:5e:38:9c:c9:ee:85:8d:ae:24:
         0b:31:9c:24:c1:f3:37:e3:1b:81:13:b4:83:c4:4a:5d:1f:75:
         45:e0:4b:a2:dc:95:4b:d0:71:58:ac:fc:dc:a8:eb:30:20:c5:
         fb:2b:b5:6c:5c:df:9a:7d:90:1e:07:c2:99:3b:fe:8a:a9:a3:
         d8:f0:a7:ee:86:c8:e5:6b:85:15:c1:9a:65:0a:da:7f:14:64:
         14:76:20:30:02:58:02:1d:b3:98:ad:90:57:f6:af:9d:3a:4f:
         7a:89:f8:35:11:b8:c7:be:2e:a8:f5:16:77:fd:34:b4:59:fd:
         36:49:40:3e:44:00:79:b4:9e:ee:06:40:19:5e:08:f8:d4:01:
         d5:18:1f:54:57:14:01:44:a3:fd:fb:5c:be:1d:75:fc:73:25:
         2a:e1:d8:1d:af:54:3d:16:93:09:0c:48:54:88:9c:ec:77:4f:
         7d:31:6c:f8:f6:b6:0e:74:48:e5:18:a8:d0:ea:86:5b:6f:21:
         0b:d3:e2:49:56:46:a7:7c:c1:96:41:31:8b:52:88:a2:94:1d:
         51:46:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org