Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343034303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343034303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          VOlRSU6C1Vi+JWhjXFNr3Z9O78d57CQzkKk6bz8lFs8=
Subject key identifier:   C9:96:3D:7E:69:82:DC:C2:B9:79:8F:F4:E9:D0:CE:D6:73:FE:19:1C
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       10722A33A6D63E36CC960A4B058F9A9896D17F60
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343034303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:43 +0000
ROA not before:           Sat 29 Jul 2023 16:21:43 +0000
ROA not after:            Sat 27 Jul 2024 16:26:43 +0000
asID:                     269194
IP address blocks:        2804:60d4:4040::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:72:2a:33:a6:d6:3e:36:cc:96:0a:4b:05:8f:9a:98:96:d1:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:43 2023 GMT
            Not After : Jul 27 16:26:43 2024 GMT
        Subject: CN=C9963D7E6982DCC2B9798FF4E9D0CED673FE191C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:c9:ef:64:7a:43:cb:9f:cb:64:89:c5:3c:
                    d9:1c:bf:5e:18:82:0c:35:7b:bb:ce:79:88:fc:ca:
                    eb:97:78:f2:cd:39:9e:d2:87:f0:0b:55:e6:81:83:
                    aa:5c:e8:ca:63:01:1a:6c:87:06:5a:0d:1e:7b:45:
                    08:20:83:17:a5:47:ab:ee:a2:6a:21:3f:02:39:d1:
                    bd:71:d8:4d:38:f7:e4:33:1e:3d:67:5f:28:1b:37:
                    e0:72:f2:e6:7b:c9:e1:47:76:42:1b:2a:3a:00:84:
                    6d:6f:91:ab:8e:11:61:dc:96:93:ff:35:19:34:d9:
                    3d:80:86:10:3c:b1:4b:3f:b2:f8:b9:95:a1:2d:49:
                    74:53:f1:42:03:6b:0d:df:a6:41:82:ab:46:3e:a9:
                    91:d9:c8:96:16:74:25:81:c9:48:4f:da:d7:54:c1:
                    ca:b3:94:4c:76:37:f9:4d:b6:ea:dc:29:06:ae:e3:
                    e2:bd:dc:46:b7:5b:7c:c4:ed:11:d9:66:74:95:e6:
                    2d:4f:b3:94:89:4c:28:ab:83:f6:2e:2f:19:fe:d8:
                    e0:8a:48:34:d3:bb:5b:09:d6:db:05:5e:90:f0:fb:
                    bc:13:ff:aa:c3:60:af:43:8b:41:39:e9:77:59:de:
                    03:b7:cc:e8:12:3c:3e:89:8b:1d:5e:59:35:9d:23:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:96:3D:7E:69:82:DC:C2:B9:79:8F:F4:E9:D0:CE:D6:73:FE:19:1C
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343034303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:4040::/43

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:ac:04:0f:07:76:c0:93:ea:e0:31:be:62:e8:98:bb:08:
         9c:82:43:40:5c:7f:97:39:12:94:fc:f9:8a:98:27:9c:6e:c5:
         ba:dc:db:47:a1:3e:b3:12:6f:8c:4d:ff:c3:3c:ff:44:13:59:
         69:2c:9c:9d:cf:5d:20:4f:94:9b:4d:1c:57:ba:c2:d2:e9:00:
         81:1e:95:6c:86:0a:53:bd:e0:b7:86:bc:2f:fb:a2:4a:82:24:
         37:e1:d3:4b:5e:1d:3e:cc:5c:fe:38:f7:ef:6f:47:90:82:2c:
         81:84:5c:3f:3b:de:f0:7b:1d:fa:b0:d0:a9:b1:58:5a:f2:84:
         c1:f5:b6:6a:5e:95:bc:ea:97:e2:00:5c:c4:c5:87:89:81:09:
         43:f2:43:c5:5e:54:02:63:52:b1:42:c5:58:74:a6:87:5a:b4:
         57:b1:f8:5c:53:e6:33:d0:40:46:96:d8:ed:04:0a:5a:1a:41:
         17:42:d5:e5:95:00:08:40:0d:08:74:46:93:3f:da:2a:60:02:
         a2:1c:bf:92:22:4f:ad:ca:20:41:89:48:5f:8e:a3:26:7b:0f:
         c7:36:8a:3f:17:d5:c3:6a:83:a1:55:82:66:8a:f2:ff:06:d9:
         ee:67:ba:0c:11:95:5b:83:53:77:f9:34:96:32:65:d5:a8:95:
         8d:d0:f0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org