Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          zVKhUR3hOUbiDM9die8dR0B4pUZhbkFJkpp9G/Fl2tM=
Subject key identifier:   AD:DA:9A:56:2E:06:55:BB:8C:BF:90:78:FD:DA:15:EB:9E:90:96:09
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       413419FC17679460558A1EEE48D7AC6F385D3079
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:10 +0000
ROA not before:           Mon 19 Feb 2024 00:00:10 +0000
ROA not after:            Mon 17 Feb 2025 00:05:10 +0000
asID:                     269194
IP address blocks:        2804:60d4:4020::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:34:19:fc:17:67:94:60:55:8a:1e:ee:48:d7:ac:6f:38:5d:30:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:10 2024 GMT
            Not After : Feb 17 00:05:10 2025 GMT
        Subject: CN=ADDA9A562E0655BB8CBF9078FDDA15EB9E909609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:d4:e8:a6:d0:6f:d1:12:4b:63:7e:84:39:
                    cb:15:72:6a:8c:dc:ac:d8:a6:8b:e2:9d:d1:88:c6:
                    23:ef:43:70:0e:78:80:1a:67:d7:41:46:26:69:ad:
                    a5:9c:fe:a8:e6:74:a9:0c:de:67:5c:1b:ff:e3:57:
                    85:34:09:4f:a0:c1:f0:be:fe:e9:f7:a5:59:2e:03:
                    dd:83:83:10:1f:a2:f7:97:7c:ea:8e:ec:ef:54:d0:
                    b9:53:1d:67:94:e8:94:e4:aa:3c:12:7f:b1:c7:5b:
                    40:a8:ce:d0:c5:0f:44:5f:ca:11:5b:43:e8:b6:24:
                    3d:05:8a:7b:40:f6:00:c6:52:cd:96:6f:99:8d:01:
                    06:91:1d:68:a8:9b:32:b7:d3:72:eb:d6:0c:70:fe:
                    20:57:87:37:85:1b:a4:e8:74:d0:2c:f9:17:46:b7:
                    f0:d4:96:f4:13:d4:b6:79:ae:dc:78:51:69:85:6e:
                    9f:9e:4a:4d:4a:31:80:d2:b3:5a:19:fb:d0:71:c6:
                    d5:92:fb:ab:02:34:01:80:0f:c4:c2:36:e5:c8:92:
                    cc:64:da:93:62:e8:df:bc:24:83:07:ef:a7:62:75:
                    78:fc:ea:95:48:2c:2d:ed:7f:46:c3:58:0e:4c:b7:
                    cd:0f:37:bd:92:a0:38:ba:56:41:7b:16:7b:77:44:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:9A:56:2E:06:55:BB:8C:BF:90:78:FD:DA:15:EB:9E:90:96:09
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343032303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:4020::/43

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:4b:19:37:63:bf:62:c1:0d:9b:ef:25:0c:ac:9a:f6:35:
         83:18:8c:5b:ec:97:8d:81:9e:34:6a:26:e1:a8:4b:a9:e0:d9:
         bf:9d:9e:55:c3:d0:7a:df:79:97:52:d8:86:de:b7:28:58:8a:
         ed:61:47:ad:8d:3a:02:a9:ca:74:e7:2b:4d:fe:41:0b:68:b0:
         95:66:21:fb:75:49:20:ef:0e:9e:1a:34:f6:ce:6b:58:ae:73:
         bd:95:ff:46:d1:2f:0c:56:1a:8f:66:1d:f4:51:6e:eb:42:a1:
         8b:5f:8d:10:64:23:6d:03:e8:b8:5d:84:b9:e2:f7:a9:b4:d3:
         82:3b:bc:f9:0e:b3:18:e7:90:ef:ce:f9:e1:b9:2f:0c:90:e8:
         36:20:fa:4b:20:7d:f6:50:86:0c:38:98:e7:95:67:19:1b:27:
         a2:bb:48:44:db:6b:86:6e:22:7e:d9:14:50:75:58:5f:95:30:
         35:b7:da:c8:1b:e2:a4:2f:f2:3d:83:d3:8b:e0:f8:db:a2:d1:
         db:c0:bd:a2:05:d9:b7:02:47:69:82:1d:14:68:c0:ac:c1:d0:
         d2:3a:5a:05:d9:3f:da:ce:d9:74:b5:52:dd:48:99:4a:c0:18:
         72:03:30:f3:b0:4d:8c:b4:b1:68:28:94:dd:82:4a:0d:2f:3c:
         2b:55:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org