Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa
File:                     323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier:          opDDgfKiRqg5pWpXZdBK1WOcOjULZqXjdui6fzvfdAU=
Subject key identifier:   2F:C4:91:F8:9F:F6:54:63:67:C1:35:4A:59:C0:A4:C1:F4:CD:27:28
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       3A05D24F2134EB6F769FBB5160D98968386B230D
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa
Signing time:             Mon 15 Jan 2024 13:00:01 +0000
ROA not before:           Mon 15 Jan 2024 12:55:01 +0000
ROA not after:            Mon 13 Jan 2025 13:00:01 +0000
asID:                     61888
IP address blocks:        2804:e60:fa00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:05:d2:4f:21:34:eb:6f:76:9f:bb:51:60:d9:89:68:38:6b:23:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan 15 12:55:01 2024 GMT
            Not After : Jan 13 13:00:01 2025 GMT
        Subject: CN=2FC491F89FF6546367C1354A59C0A4C1F4CD2728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:96:d1:3c:83:89:04:92:97:9f:b5:a4:99:
                    97:81:f4:fe:ca:d7:00:b6:57:b3:9c:65:38:de:b3:
                    85:ce:a8:53:fc:78:d2:c2:77:5c:e4:57:5f:c0:56:
                    5b:8d:6c:1a:84:83:f8:2c:2a:b5:08:eb:f5:88:de:
                    ca:cc:24:53:26:f9:64:1e:45:c4:00:7e:8f:38:1f:
                    4c:bc:fa:49:2b:bd:a3:7b:77:87:5f:db:49:ba:6b:
                    13:9f:5c:8d:bc:c4:5d:5c:6b:63:ca:ea:4f:7b:d9:
                    01:10:e2:49:22:08:c0:e0:f2:3c:fa:63:e7:f2:57:
                    9f:05:6d:da:ff:4e:e0:f5:21:ef:a2:26:1f:cc:5a:
                    66:78:29:5a:ac:76:75:a8:f1:00:e1:05:fd:eb:63:
                    8b:26:16:72:22:47:65:b9:6b:c7:6f:40:7f:b5:80:
                    a3:39:d5:fa:fb:1f:fc:8d:d9:a2:cb:ec:d2:85:a2:
                    81:2f:47:45:9f:b6:18:4a:1a:fa:6a:63:07:2b:2b:
                    1a:e0:4b:13:cc:37:ec:bc:aa:2b:4f:10:42:37:fb:
                    f5:ce:ea:c8:c4:b3:c6:f2:6d:e5:71:01:3e:7d:60:
                    be:66:a1:67:75:be:7c:cb:26:6d:ca:b6:77:89:9d:
                    40:40:99:a0:56:8e:95:38:80:b8:e6:83:e1:ef:7c:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:91:F8:9F:F6:54:63:67:C1:35:4A:59:C0:A4:C1:F4:CD:27:28
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a666130303a3a2f34302d3430203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:c1:4f:4a:64:f3:68:35:b2:b9:8e:b8:01:8b:2d:31:ed:c6:
         a2:9c:33:d0:10:cf:19:ea:cd:c0:a9:ba:ff:58:50:55:3e:38:
         07:96:c5:b5:29:30:d4:15:3d:bf:98:91:6e:2d:9e:9d:42:28:
         54:fc:67:e1:7b:5a:1b:b4:e1:d5:3e:63:81:23:3e:06:c1:58:
         0b:4b:6e:b8:71:a2:53:2b:f6:74:3b:ac:6d:98:9c:eb:fd:89:
         a0:66:12:e1:2e:69:52:91:14:67:e4:3d:57:b3:ea:51:a1:e9:
         d9:aa:0e:e4:1f:b3:a0:7f:14:d9:b9:50:e3:be:d2:6c:2d:20:
         e0:94:12:a0:f1:49:73:2b:e7:b3:4c:26:f6:ca:d7:3f:52:cf:
         13:0a:61:28:f2:06:0c:ae:8e:31:1f:60:ae:13:00:2d:01:47:
         78:b6:27:31:08:55:65:d2:ef:71:fa:46:14:8b:17:e1:ff:b2:
         b4:c7:e9:0d:3d:17:59:fc:7b:32:63:18:29:a0:04:bd:5e:3c:
         ad:ca:9a:05:d8:47:7b:6b:df:7b:47:f6:5a:57:63:16:42:c3:
         a5:de:20:6b:fe:61:f5:65:cd:61:7f:a1:a1:bd:89:25:45:2d:
         1c:4b:bd:63:97:aa:0e:40:95:14:5a:ad:03:58:46:32:b9:88:
         f2:c8:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org