Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
File:                     323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa (raw, json)
Hash identifier:          wizmmMEUOQeWqOHz2QMebdnFrQ2DzEgRDUcrv6TmWAE=
Subject key identifier:   F1:EF:4C:53:B2:DB:15:38:79:25:58:43:2C:87:07:EF:2F:F8:40:C9
Certificate issuer:       /CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
Certificate serial:       35C286091729D1588130706FC009993AA5E3AD52
Authority key identifier: 51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa
Signing time:             Sat 06 Jan 2024 00:00:00 +0000
ROA not before:           Fri 05 Jan 2024 23:55:00 +0000
ROA not after:            Sat 04 Jan 2025 00:00:00 +0000
asID:                     61888
IP address blocks:        2804:e60:face::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c2:86:09:17:29:d1:58:81:30:70:6f:c0:09:99:3a:a5:e3:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Validity
            Not Before: Jan  5 23:55:00 2024 GMT
            Not After : Jan  4 00:00:00 2025 GMT
        Subject: CN=F1EF4C53B2DB1538792558432C8707EF2FF840C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:4a:6c:c5:f9:4b:c5:00:9a:45:b5:96:af:
                    d4:7f:23:54:19:ea:73:48:fd:5f:f2:80:90:1d:31:
                    bd:8e:a8:13:aa:60:e3:65:8b:1d:b6:a8:92:63:2a:
                    b6:de:46:fd:67:50:e2:1b:ce:10:4d:e4:f1:92:aa:
                    94:0d:53:fd:ff:92:42:06:78:ac:a6:a7:49:c4:e0:
                    dc:80:7f:fe:fa:bc:1e:14:48:34:b2:48:e0:9a:75:
                    d7:da:11:93:dd:cd:a0:f4:ba:27:c3:e1:9f:02:fb:
                    44:dc:5e:d3:bd:e2:6b:dc:07:0f:e0:24:46:41:ab:
                    da:59:25:f3:4c:b2:a3:2f:5b:55:c8:b8:73:6c:55:
                    e9:92:73:a0:08:46:e5:35:16:79:64:76:01:10:70:
                    b9:51:99:dc:61:3d:6a:52:37:55:cf:db:79:2c:c4:
                    61:f4:d2:50:a5:78:7f:df:87:e2:41:0e:5e:66:7e:
                    59:3c:6e:9f:cf:78:f4:e9:a2:98:38:b3:a6:13:91:
                    56:1d:28:49:35:48:e9:56:ba:86:e1:47:83:0f:d1:
                    af:10:76:77:ca:1e:5f:60:1f:88:19:90:1f:44:fc:
                    1d:6e:d9:92:b0:80:0f:24:99:52:90:22:25:fe:de:
                    e4:50:0a:07:e6:5b:48:19:89:6a:77:68:16:fc:03:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EF:4C:53:B2:DB:15:38:79:25:58:43:2C:87:07:EF:2F:F8:40:C9
            X509v3 Authority Key Identifier:
                keyid:51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/323830343a6536303a666163653a3a2f34382d3438203d3e203631383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e60:face::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:3f:cf:6d:cc:3a:a6:74:dc:2a:8f:1d:7d:b7:ce:e7:62:0f:
         02:31:93:b1:55:48:a9:a2:2a:b4:8d:cd:fb:9a:99:7b:10:60:
         a8:fd:d1:f3:c3:49:b7:d0:28:db:a5:4f:f5:68:a1:f4:fb:b2:
         83:4b:21:eb:33:df:73:a2:21:cb:57:e1:cc:c4:8f:5e:dc:16:
         ab:1f:c7:27:74:62:84:04:78:28:e5:ae:45:ba:bc:b2:45:e9:
         f5:2a:6e:87:6a:bc:ff:00:8c:78:b2:b0:b7:54:5f:ae:a7:fa:
         3f:d8:7f:8f:24:e5:44:b5:aa:ce:19:9f:15:09:41:c4:c7:44:
         2c:a8:be:33:da:3e:3f:fe:a7:9e:c2:2a:8f:9e:90:1f:60:6d:
         8b:f6:b5:bb:cc:b9:7c:83:82:e1:ef:d8:38:14:85:02:5d:96:
         f2:00:e4:7c:49:e9:44:45:65:7d:91:0b:dd:a1:88:4a:32:92:
         f0:34:db:44:60:89:00:47:60:fb:38:78:ba:f7:d4:58:62:a5:
         68:39:04:29:20:5d:f5:dd:21:9a:ce:35:d5:d5:28:d6:c0:f1:
         60:18:7f:95:6d:72:2f:53:c8:af:7b:3d:21:cb:55:df:aa:78:
         81:26:77:f8:37:f2:d2:6e:5a:e5:f6:1e:e0:f3:6f:1d:b5:bd:
         53:03:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org