Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa
File:                     323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa (raw, json)
Hash identifier:          ss38c4y/kNYigkLpRw9D0btJqBYnY/TmbJDJE1AUVy8=
Subject key identifier:   4D:B3:E4:34:9E:D0:BA:B6:06:71:C1:FA:77:F0:3B:25:64:BA:50:3C
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       23FE23627ED40A70BDC9D098521844CAF8E72414
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa
Signing time:             Fri 01 Mar 2024 12:29:08 +0000
ROA not before:           Fri 01 Mar 2024 12:24:08 +0000
ROA not after:            Fri 28 Feb 2025 12:29:08 +0000
asID:                     61888
IP address blocks:        2804:e60:320::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fe:23:62:7e:d4:0a:70:bd:c9:d0:98:52:18:44:ca:f8:e7:24:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Mar  1 12:24:08 2024 GMT
            Not After : Feb 28 12:29:08 2025 GMT
        Subject: CN=4DB3E4349ED0BAB60671C1FA77F03B2564BA503C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2f:31:fd:3d:c3:03:27:6b:f7:59:02:dc:7e:
                    7b:aa:6d:11:b8:16:da:75:6c:97:05:1f:bd:9c:8f:
                    b6:1c:90:a8:52:99:a4:63:a7:df:9b:ac:f4:84:b4:
                    90:fb:49:0a:3d:39:b7:22:05:ad:55:31:1e:20:aa:
                    1b:24:eb:06:3b:1b:9f:b1:57:f0:0a:a1:4f:6a:49:
                    fb:cc:10:7d:02:e7:f7:4d:81:d4:0b:9c:46:32:95:
                    86:50:6c:b9:e1:c6:39:48:6a:83:0b:27:95:43:7f:
                    87:76:94:fb:61:b2:5b:de:e1:ae:02:b4:26:42:51:
                    98:45:5b:e6:0f:e3:34:50:ed:9f:19:d6:27:67:57:
                    13:fa:a8:33:22:ef:f3:a1:af:47:ce:09:07:22:a9:
                    a7:79:9d:70:76:11:26:eb:1e:ec:00:36:a3:53:8d:
                    d3:ea:de:b7:46:8d:f3:aa:8d:f9:30:f0:ec:e8:b8:
                    a9:f1:1e:56:03:b6:75:98:aa:2d:35:13:01:d1:62:
                    d1:f8:a2:b6:49:8b:0f:09:3b:5a:f8:62:b3:6b:f0:
                    9b:5a:5f:92:ef:f6:6c:ed:11:e5:2b:55:d3:64:61:
                    dc:f9:ac:f4:11:09:ad:c9:f6:6a:f0:86:05:0a:7d:
                    b4:8d:75:33:47:7e:21:cd:73:ab:af:2f:aa:28:7e:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B3:E4:34:9E:D0:BA:B6:06:71:C1:FA:77:F0:3B:25:64:BA:50:3C
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3332303a3a2f34342d3434203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:320::/44

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:ed:bb:f9:ad:5c:9f:15:1c:f2:3c:18:35:0e:80:38:c6:
         32:44:fa:4e:14:bb:c2:a4:0c:a9:73:b5:1c:5c:a8:3c:9f:05:
         41:fa:23:cd:a3:d6:61:e5:8e:36:93:39:0b:95:88:5d:03:64:
         45:6b:17:8c:3f:71:a4:dd:ae:56:13:ef:28:72:e0:98:f0:2a:
         78:6d:b2:16:69:53:2b:9c:af:f8:69:51:31:79:56:84:35:3d:
         a1:e9:eb:e0:46:dc:6a:37:ad:56:29:3a:77:2f:65:70:b4:ee:
         5a:3b:7f:32:62:0e:1d:43:80:69:8a:4b:fd:d0:89:b2:e2:39:
         f6:1f:f8:44:43:b2:4c:31:8f:1a:13:e4:87:50:28:88:31:08:
         46:06:98:92:c3:a4:45:c8:56:2d:cc:60:17:3f:70:f1:c2:71:
         58:d6:c6:12:72:b5:44:b5:71:f0:ed:24:07:51:18:77:44:c0:
         99:1a:b0:1c:3b:95:74:4c:96:a1:cc:6d:b3:0f:ef:4f:a0:92:
         fc:41:49:4b:93:9f:97:76:af:ba:45:73:eb:c5:98:9b:61:a9:
         dc:b9:cc:d4:b6:c9:12:a0:94:47:ba:b6:a1:f1:23:b0:12:29:
         3f:69:96:ce:0f:b9:79:1f:2f:23:36:bc:ae:8e:1d:90:74:36:
         48:19:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org