Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          QelVK70Ab2/t8pt0KUCWWyx+vCHs6o/h1wwHhja96hk=
Subject key identifier:   FD:53:54:92:73:C3:A7:D2:21:05:ED:92:E7:8F:5C:1C:0D:F5:92:90
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       78A1FF9D467902DC3214C9D62B2B5628AF5C0D3F
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa
Signing time:             Mon 15 Jan 2024 13:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:55:00 +0000
ROA not after:            Mon 13 Jan 2025 13:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a1:ff:9d:46:79:02:dc:32:14:c9:d6:2b:2b:56:28:af:5c:0d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan 15 12:55:00 2024 GMT
            Not After : Jan 13 13:00:00 2025 GMT
        Subject: CN=FD53549273C3A7D22105ED92E78F5C1C0DF59290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:78:e5:db:b2:2c:49:63:e6:5e:2b:2f:5f:
                    0b:5c:6c:8f:f6:31:0a:c1:29:c7:fd:40:a8:db:9b:
                    41:83:0a:99:e2:11:43:0c:2c:7c:cf:d3:ef:64:13:
                    ca:3d:5b:02:66:8a:1b:a2:2e:29:61:1c:c3:52:1b:
                    57:88:c7:92:10:df:05:eb:06:f8:ff:3b:32:9e:2e:
                    7f:54:4f:17:e2:9f:fd:3c:a9:6e:a4:0b:37:0f:dd:
                    aa:09:9e:70:83:15:a5:f5:64:e4:46:29:8b:6b:ed:
                    4a:05:34:09:e3:c5:be:2a:24:4d:9e:76:e0:d4:c3:
                    dd:d5:cc:40:c7:5f:08:43:69:16:97:a1:5a:c7:7d:
                    60:7e:6f:11:2c:3f:f2:0a:13:a4:f5:03:38:f7:91:
                    5a:b1:4e:a5:89:bd:e0:7f:4d:74:3c:34:7c:b5:4f:
                    4c:bc:d4:11:b0:29:64:d2:b4:51:55:9b:8c:48:e7:
                    7b:69:94:c6:ee:bb:08:7a:75:ed:da:66:a9:17:2a:
                    61:95:6f:bc:51:7b:73:06:19:54:58:ec:c3:17:0c:
                    4c:46:75:45:cb:97:a0:c2:53:d2:2d:44:79:d2:54:
                    58:86:93:75:76:7a:4e:60:4c:ac:bd:93:72:4d:af:
                    d5:66:3f:47:fd:25:8c:0d:5d:23:b5:a9:bf:e6:e5:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:53:54:92:73:C3:A7:D2:21:05:ED:92:E7:8F:5C:1C:0D:F5:92:90
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31313a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:89:ae:49:3e:79:8a:d2:7f:c0:46:18:4d:d4:b9:e8:69:51:
         df:e7:6d:3a:10:94:8a:b3:eb:be:17:5a:ab:8c:c6:8a:e1:0c:
         f8:85:78:56:42:93:99:06:96:86:7e:5f:40:13:63:83:c5:8d:
         10:78:8c:49:3f:b3:53:15:16:2d:4e:57:85:a1:63:5d:e1:35:
         81:64:d4:7d:fe:b9:26:91:bd:aa:90:78:4a:78:ab:0e:a9:a5:
         fe:d8:fa:22:f1:c0:8f:99:82:1d:af:a8:d8:2a:0f:2f:15:fd:
         ba:19:fb:cf:d9:0f:ca:35:a4:bd:c8:9c:4b:5c:7f:d2:81:c8:
         5a:81:fa:71:c0:7a:7a:b7:2b:c6:af:ca:36:a8:ae:d5:ab:c8:
         a6:ee:65:ca:a4:b1:71:b1:b9:ca:02:27:b8:51:26:0d:e7:54:
         da:0a:50:31:6c:6b:fd:59:ad:f9:a5:77:a3:a6:38:0a:41:e2:
         8d:d0:f3:95:ef:e6:75:33:fb:9c:8d:88:e1:29:ca:b8:53:76:
         c4:fa:c6:68:70:7e:15:8c:a3:8b:66:69:f2:ec:da:e4:b8:93:
         1c:58:d7:83:89:c4:58:87:1d:a5:07:76:b4:cf:73:71:55:3d:
         af:d4:b7:a4:96:bb:c9:34:70:05:c9:7c:1b:76:00:8c:f6:1c:
         94:58:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org