Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          R3z9Qz5sxyCKdmhnfHTlqsuoROH01Ief+iIQNtc4F/s=
Subject key identifier:   D7:76:F1:5A:4A:02:2E:7F:0A:63:FC:6F:0F:ED:1D:7A:0A:41:13:CB
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       0BAF48A671E1CB68F717EC8DACE85D6EB0D698DB
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa
Signing time:             Mon 15 Jan 2024 13:00:01 +0000
ROA not before:           Mon 15 Jan 2024 12:55:01 +0000
ROA not after:            Mon 13 Jan 2025 13:00:01 +0000
asID:                     61888
IP address blocks:        2804:e60:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:48:a6:71:e1:cb:68:f7:17:ec:8d:ac:e8:5d:6e:b0:d6:98:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan 15 12:55:01 2024 GMT
            Not After : Jan 13 13:00:01 2025 GMT
        Subject: CN=D776F15A4A022E7F0A63FC6F0FED1D7A0A4113CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:73:d5:45:11:6e:19:8f:cc:b3:68:5b:6b:
                    20:4b:97:d9:39:ed:f6:cd:2e:0f:90:85:e6:91:ca:
                    08:ed:50:2d:e7:06:25:8a:7e:c2:46:75:ef:7a:8f:
                    0d:7d:98:42:a8:f5:11:69:b7:f5:48:d9:0b:6c:da:
                    79:12:f6:41:fe:1b:3c:6e:f8:15:f3:ef:1f:d1:7d:
                    98:96:e6:1e:85:e7:58:b4:ce:55:15:17:68:0c:4e:
                    f8:67:ee:fb:5c:14:da:04:34:44:50:72:56:fd:3d:
                    ad:94:fd:42:c3:96:33:f3:f4:d7:1f:ed:31:d4:2e:
                    28:83:85:02:36:b1:91:b9:c5:2e:e2:4a:d5:75:9d:
                    65:02:3e:30:f9:95:cd:3b:03:74:41:fc:26:1e:b0:
                    31:7d:8f:20:41:11:30:23:03:4b:f4:c1:44:c7:25:
                    6e:ed:ed:61:c3:26:e5:45:b7:b2:fb:18:f3:56:e9:
                    4f:e2:1e:a8:e2:b1:42:21:d8:b4:42:c1:1c:13:79:
                    be:c9:7e:67:59:4f:8f:3c:c3:a5:c8:5f:c5:22:e3:
                    6f:3c:34:d1:eb:6e:ca:f9:d7:05:ae:ec:89:0b:d5:
                    d4:3f:b1:f4:46:0f:91:21:92:d0:79:a8:26:0c:97:
                    e3:b6:d3:11:09:c8:68:00:0b:bd:47:43:b9:43:4e:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:76:F1:5A:4A:02:2E:7F:0A:63:FC:6F:0F:ED:1D:7A:0A:41:13:CB
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31303a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:36:d7:9e:9f:2d:1d:03:f3:ae:e7:6c:13:48:57:62:f9:bc:
         4a:55:f5:99:80:29:f8:42:50:ff:cf:3f:5d:59:8d:d9:29:29:
         80:68:2b:c4:83:c2:80:2b:10:d7:33:21:4a:56:a6:9e:bf:4d:
         be:49:5d:ab:dc:80:80:9f:aa:10:26:d8:69:e9:38:30:4f:39:
         93:2d:56:d6:f7:a5:bb:25:84:93:07:dc:2a:11:73:26:38:2f:
         16:54:1e:df:f6:44:54:58:8b:d8:6f:80:2a:57:33:e5:ca:2f:
         26:1d:61:55:ea:97:5e:d0:d0:51:29:b2:1e:67:18:cf:6c:14:
         e0:94:3b:2e:dc:e8:73:34:3d:8f:ee:dc:07:da:3d:54:1f:6e:
         92:64:d2:ae:74:f1:65:bf:be:b1:53:de:d1:12:49:fd:06:ba:
         40:ec:e1:29:c1:63:e0:c0:f5:73:0d:ee:eb:2f:90:d6:46:85:
         59:40:d4:20:44:d1:9e:ca:9c:db:7f:b2:a8:ca:1a:fc:f4:5c:
         e9:f8:82:1b:9c:98:77:d7:a2:47:51:fe:3c:68:b8:37:90:19:
         d0:c9:39:3e:17:56:db:f2:29:00:0c:a5:b7:21:aa:2b:13:e7:
         d5:1e:4b:4a:27:dd:63:45:00:25:dc:e7:df:ff:18:88:5c:ae:
         f7:7e:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org