Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
File:                     323830343a6536303a3a2f33322d3333203d3e203631383838.roa (raw, json)
Hash identifier:          ggG0TsiDBfTuKG8XK9TlFnBZ42c6xmvc62oVSo33Hd8=
Subject key identifier:   CB:BB:A3:94:CC:FB:D1:86:ED:C6:F0:94:99:E4:12:2A:1A:D6:D5:75
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       6338BBD11D192438F57B08FE9BE4EF9EFB81819F
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3a2f33322d3333203d3e203631383838.roa
Signing time:             Sat 06 Jan 2024 00:00:00 +0000
ROA not before:           Fri 05 Jan 2024 23:55:00 +0000
ROA not after:            Sat 04 Jan 2025 00:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:38:bb:d1:1d:19:24:38:f5:7b:08:fe:9b:e4:ef:9e:fb:81:81:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan  5 23:55:00 2024 GMT
            Not After : Jan  4 00:00:00 2025 GMT
        Subject: CN=CBBBA394CCFBD186EDC6F09499E4122A1AD6D575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:04:a3:62:55:9f:b7:31:23:40:1f:f6:5e:
                    bb:36:87:7e:16:fe:c4:00:2c:86:75:e0:af:38:7a:
                    d5:07:4e:20:d5:8d:f4:22:50:89:e4:c6:d1:4b:e9:
                    d3:2f:9f:6c:e2:a0:e3:8d:54:c7:99:37:4e:50:26:
                    5c:9f:d3:d3:70:14:bc:b9:dc:98:8c:35:ab:b1:77:
                    c4:15:f1:84:42:93:e7:d7:1c:34:04:46:d8:91:15:
                    10:cb:b3:87:7f:8f:82:4f:ba:1c:59:95:77:b2:05:
                    1d:ee:f3:21:09:c0:6a:f7:c8:5b:61:59:e2:bd:ca:
                    41:be:f5:88:b8:a2:88:11:7e:8d:67:13:c9:bd:ec:
                    50:0b:08:ae:c1:05:1e:4b:41:6c:74:95:aa:8c:30:
                    dd:7f:4f:6c:0f:9c:37:7a:df:d8:17:46:26:cd:fe:
                    37:10:be:d7:d8:2a:9b:f6:d4:60:38:7c:31:bb:b0:
                    38:c4:d4:2f:db:d5:55:1e:a8:de:b7:26:4f:f8:68:
                    c4:50:e9:77:9d:67:df:49:58:fb:da:f6:7f:5a:3f:
                    95:9f:f7:dc:d0:9c:da:8c:c2:b1:ec:e2:ea:2f:08:
                    b0:79:fa:6d:7f:b7:88:64:1e:9d:1b:98:ec:2f:56:
                    08:6f:25:45:b4:8e:1e:5e:53:d4:bc:db:17:3e:8e:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BB:A3:94:CC:FB:D1:86:ED:C6:F0:94:99:E4:12:2A:1A:D6:D5:75
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a3a2f33322d3333203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:78:ed:42:68:27:25:0c:01:64:86:d5:99:ca:61:6e:af:6d:
         94:ea:2f:83:62:e4:ce:19:26:e8:b8:05:2c:22:09:a4:03:67:
         62:36:40:16:c7:da:30:c6:79:49:8d:2b:16:c0:43:19:a5:64:
         1a:5a:63:f6:76:94:47:d5:ba:ad:98:b2:e3:0b:d7:d5:5e:43:
         ce:73:9f:28:e4:78:1f:14:d4:53:6a:ea:14:ad:c9:2b:90:66:
         89:de:93:e4:8b:47:82:89:8f:ad:42:e8:21:34:92:cf:75:4c:
         a0:03:d5:62:63:25:be:e6:a8:5d:9f:4d:d1:be:6a:68:7c:1e:
         f9:49:2e:f4:de:f3:9c:86:47:9b:53:35:24:21:22:75:a9:dc:
         6a:73:6a:11:7c:7d:3a:f3:46:ea:88:3e:81:ec:b0:0b:e9:3c:
         0a:60:3d:bb:26:ce:b2:ac:54:12:88:4f:df:89:24:24:6e:7c:
         90:b3:cc:52:7b:28:82:99:1d:bf:88:09:3e:f1:4b:cb:31:83:
         60:b4:3f:41:fe:2f:5c:74:76:d4:16:b4:cd:eb:5c:aa:dd:79:
         29:b4:81:41:2b:04:86:fa:fe:72:77:03:bd:a5:a1:a7:d4:bc:
         f3:db:67:e8:33:69:a7:59:38:5d:a6:91:68:87:6d:73:8e:3c:
         cf:11:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org