Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          naJ/mcCHCidOzZiTmwII91/6G7WrG+djk1r11woYMXI=
Subject key identifier:   6E:C2:1A:8C:B6:A4:72:FD:D5:43:50:9A:D8:39:5C:0C:9E:DE:AD:F7
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       5D6D5C70B48F09B4D815D4DB6B5D4F11913201D4
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa
Signing time:             Mon 15 Jan 2024 13:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:55:00 +0000
ROA not after:            Mon 13 Jan 2025 13:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6d:5c:70:b4:8f:09:b4:d8:15:d4:db:6b:5d:4f:11:91:32:01:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan 15 12:55:00 2024 GMT
            Not After : Jan 13 13:00:00 2025 GMT
        Subject: CN=6EC21A8CB6A472FDD543509AD8395C0C9EDEADF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:63:98:ad:6b:82:56:43:fb:cd:c8:f1:83:c8:
                    8b:a8:d1:ca:08:0f:1f:69:04:a1:8f:42:67:67:b9:
                    c8:d0:77:62:79:fc:76:67:f8:2b:d9:69:67:e9:b3:
                    a2:91:79:17:de:15:49:af:96:4e:9f:f9:39:e4:8d:
                    eb:41:3b:f5:40:e5:6f:80:fe:34:fe:a7:71:f3:d3:
                    37:c3:9c:45:8f:c9:21:eb:2c:59:8c:b1:74:9a:80:
                    6f:a1:26:d9:92:18:49:33:4f:d9:f5:ac:bb:bd:5a:
                    ac:8a:85:8c:e7:5a:f0:3e:d0:3f:24:61:df:b1:cd:
                    50:50:eb:3f:1f:07:44:b1:8a:ca:98:8e:0d:df:06:
                    7e:1c:82:98:4d:30:dc:31:6c:06:bb:b6:7f:d9:a3:
                    0b:35:37:73:50:42:a6:04:ea:e0:53:b4:55:41:95:
                    12:d7:62:ff:18:8d:ec:d2:a9:b4:2f:67:f9:66:82:
                    30:ac:5c:ac:df:43:27:7b:dc:7c:fa:20:69:bd:22:
                    30:f3:91:13:42:35:d9:89:ea:26:2d:3e:3f:7d:12:
                    17:10:4d:83:98:a0:de:3f:45:83:5a:76:3a:d1:c3:
                    6e:44:5d:dc:87:2f:0b:7a:ae:f8:f2:d5:09:58:c6:
                    1f:9e:08:cd:87:dd:50:41:9a:86:ee:c5:a3:2e:fc:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C2:1A:8C:B6:A4:72:FD:D5:43:50:9A:D8:39:5C:0C:9E:DE:AD:F7
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a31323a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:17:e5:d0:82:f2:6b:2c:23:f7:d5:cc:83:cf:80:80:a3:
         31:ce:d8:00:89:60:90:0f:d7:dd:64:76:03:91:ef:4f:6a:0e:
         98:0b:1e:bc:80:63:79:4b:5b:ef:73:30:31:2b:45:ff:95:8f:
         98:18:44:6f:02:01:e0:c3:76:8f:ee:f7:24:78:cb:e4:48:e7:
         33:77:7f:55:8c:03:3c:ba:e6:42:7f:f8:da:9f:74:35:a2:aa:
         2c:a0:7d:2c:b7:3f:4f:29:b2:e0:09:5d:4f:a5:b2:4b:70:04:
         ca:46:e0:9e:38:c3:36:e9:7f:57:37:f9:d7:92:37:c0:75:25:
         d2:6e:40:a1:fe:3e:0a:71:b6:8b:f2:e0:b1:72:0f:92:d8:e3:
         28:a2:d7:c4:44:1e:af:24:fc:e7:11:b0:15:9d:a4:77:36:41:
         00:4b:cc:e2:28:f4:bf:a0:14:4e:c5:31:2d:8a:ff:87:26:67:
         4a:0c:60:c5:a6:13:64:a5:6c:22:46:71:49:c2:a4:ff:c8:fe:
         51:0f:e6:cb:1b:ef:bd:3c:7a:4f:f2:ca:07:cd:23:c9:77:2c:
         f1:11:c4:30:78:5d:0c:9c:29:3d:4e:e3:b3:b4:42:e9:79:40:
         1b:5f:3e:a5:9d:9f:f2:79:6a:16:ba:04:d5:0a:e2:8e:03:be:
         f4:5b:2b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org