Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
File:                     323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa (raw, json)
Hash identifier:          bW8m1AwEKd0YLZneoMcOk85VF++D0HI796dwHKLJ8DQ=
Subject key identifier:   F7:C4:D0:97:43:3A:70:AE:3B:DD:AA:7E:9D:28:66:11:53:DE:FA:44
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       1765BD7165568A69278F210A7AF98CD9131377CB
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa
Signing time:             Fri 01 Mar 2024 12:28:56 +0000
ROA not before:           Fri 01 Mar 2024 12:23:56 +0000
ROA not after:            Fri 28 Feb 2025 12:28:56 +0000
asID:                     61888
IP address blocks:        2804:e60:300::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:65:bd:71:65:56:8a:69:27:8f:21:0a:7a:f9:8c:d9:13:13:77:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Mar  1 12:23:56 2024 GMT
            Not After : Feb 28 12:28:56 2025 GMT
        Subject: CN=F7C4D097433A70AE3BDDAA7E9D28661153DEFA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:7d:a2:ee:99:f6:b9:0d:48:10:79:fe:ad:
                    08:f0:a6:d0:86:f7:f6:b0:85:c7:73:d3:41:fb:e8:
                    84:9f:c2:06:27:32:6b:7a:61:51:7e:01:88:dc:7c:
                    39:d7:c4:eb:c8:6c:06:a1:ba:15:ce:e2:d4:d7:5b:
                    d9:ef:23:27:5b:ee:4b:92:dd:5b:e4:12:ca:d2:7e:
                    1b:a4:9c:7c:46:9e:70:e3:d7:36:a7:26:28:66:05:
                    5d:40:f8:ab:db:47:8b:b5:2b:42:1b:2d:fd:90:d3:
                    65:ff:13:26:09:dc:8e:a9:6a:87:b2:ab:1d:ca:d2:
                    74:9c:da:e2:3a:46:9a:cf:1d:10:a0:13:20:4e:64:
                    5e:3a:eb:0a:ad:9e:9d:33:b0:d6:80:96:d9:52:70:
                    61:ce:e3:d0:b2:71:0b:d4:d8:ec:ed:79:35:0b:e6:
                    59:3d:b9:97:d9:6b:66:4b:ff:6d:83:14:27:6f:1c:
                    e5:3f:ce:10:77:da:36:30:c5:1a:98:aa:87:f1:4e:
                    7c:73:06:b1:84:7e:0d:bc:17:9e:92:8a:53:59:79:
                    2b:54:44:38:33:8b:ac:a9:db:8d:c4:38:1e:a8:b0:
                    e8:05:7c:5e:fa:20:4a:96:b5:07:42:15:ed:cc:46:
                    a3:04:59:5a:af:72:03:03:45:08:6b:6d:3f:34:c4:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C4:D0:97:43:3A:70:AE:3B:DD:AA:7E:9D:28:66:11:53:DE:FA:44
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3330303a3a2f34332d3433203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:300::/43

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:84:b6:87:e3:27:d4:75:06:3f:18:21:e8:24:b1:b4:23:
         05:25:c9:bf:12:25:fd:06:ef:65:fe:56:6e:26:86:11:9b:9c:
         30:60:74:e7:19:2a:23:71:7a:fa:45:7a:cf:cb:69:fa:1d:13:
         cb:cf:f4:ab:cd:a1:5c:35:3c:72:b9:cc:c6:e1:12:ab:d9:ec:
         6f:c9:45:22:b0:70:c5:1f:26:85:e4:5a:5b:5d:90:6b:72:a4:
         9f:25:d1:74:23:d3:74:7a:0f:ca:2d:4f:eb:67:19:69:0a:63:
         08:f5:ff:e1:58:c3:61:78:24:d2:ed:1b:d0:0e:aa:ba:c4:9a:
         1c:ff:4d:09:2f:11:c4:3e:fd:95:bd:13:09:1a:94:6e:a6:63:
         25:dc:e2:59:ad:47:a3:9c:f1:76:a4:92:13:df:23:b9:83:30:
         d6:53:f7:fd:29:50:3b:50:9f:21:b0:0a:c2:61:d5:a2:0c:bf:
         c2:49:95:98:8a:8d:ad:cf:bd:5e:23:93:36:48:eb:26:dd:4d:
         6d:cf:02:10:bc:c8:3a:5f:26:87:7b:dd:50:bc:2f:b5:99:27:
         e0:fd:a7:b3:fd:41:6f:8b:6a:7d:c1:d2:ea:d9:28:7e:b4:78:
         bf:44:51:66:87:08:80:18:7f:82:ff:b8:ed:86:cf:a1:db:27:
         5a:28:ba:a8
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUF2W9cWVWimknjyEKevmM2RMTd8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE0QThEREY4NUUyNkQ0NUE1MzBDOTJGMTgzOTY3RjhF
QTFGNTZBOTAeFw0yNDAzMDExMjIzNTZaFw0yNTAyMjgxMjI4NTZaMDMxMTAvBgNV
BAMTKEY3QzREMDk3NDMzQTcwQUUzQkREQUE3RTlEMjg2NjExNTNERUZBNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmX2i7pn2uQ1IEHn+rQjwptCG
9/awhcdz00H76ISfwgYnMmt6YVF+AYjcfDnXxOvIbAahuhXO4tTXW9nvIydb7kuS
3VvkEsrSfhuknHxGnnDj1zanJihmBV1A+KvbR4u1K0IbLf2Q02X/EyYJ3I6paoey
qx3K0nSc2uI6RprPHRCgEyBOZF466wqtnp0zsNaAltlScGHO49CycQvU2OzteTUL
5lk9uZfZa2ZL/22DFCdvHOU/zhB32jYwxRqYqofxTnxzBrGEfg28F56SilNZeStU
RDgzi6yp243EOB6osOgFfF76IEqWtQdCFe3MRqMEWVqvcgMDRQhrbT80xD1FAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQU98TQl0M6cK473ap+nShmEVPe+kQwHwYDVR0j
BBgwFoAUUUqN34XibUWlMMkvGDln+OofVqkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzRoUzdCOHVHWXNEVk42eVVvVDVMckVpNWVFaTFuVFh6SDNLNW1RS1JC
QmUvMC81MTRBOERERjg1RTI2RDQ1QTUzMEM5MkYxODM5NjdGOEVBMUY1NkE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUxNEE4RERGODVFMjZENDVB
NTMwQzkyRjE4Mzk2N0Y4RUExRjU2QTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM0aFM3Qjh1R1lzRFZONnlVb1Q1THJFaTVlRWkxblRYekgzSzVtUUtSQkJlLzAv
MzIzODMwMzQzYTY1MzYzMDNhMzMzMDMwM2EzYTJmMzQzMzJkMzQzMzIwM2QzZTIw
MzYzMTM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEDmADADANBgkqhkiG9w0BAQsFAAOCAQEA
IemEtofjJ9R1Bj8YIegksbQjBSXJvxIl/QbvZf5WbiaGEZucMGB05xkqI3F6+kV6
z8tp+h0Ty8/0q82hXDU8crnMxuESq9nsb8lFIrBwxR8mheRaW12Qa3KknyXRdCPT
dHoPyi1P62cZaQpjCPX/4VjDYXgk0u0b0A6qusSaHP9NCS8RxD79lb0TCRqUbqZj
JdziWa1Ho5zxdqSSE98juYMw1lP3/SlQO1CfIbAKwmHVogy/wkmVmIqNrc+9XiOT
NkjrJt1Nbc8CELzIOl8mh3vdULwvtZkn4P2ns/1Bb4tqfcHS6tkofrR4v0RRZocI
gBh/gv+47YbPodsnWii6qA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org