Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343038303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343038303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          LOsK90b0glzj9l82rqj4vHNoIEMOI5kJzKenbHxshig=
Subject key identifier:   8C:D2:97:91:F2:0F:DF:8C:D7:1B:77:CE:0B:C1:29:C2:68:D9:3E:28
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2D8CB8AFD256F0DCC81B8A9317F7B391F2A802C5
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343038303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:11 +0000
ROA not before:           Mon 19 Feb 2024 00:00:11 +0000
ROA not after:            Mon 17 Feb 2025 00:05:11 +0000
asID:                     269194
IP address blocks:        2804:60d4:4080::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8c:b8:af:d2:56:f0:dc:c8:1b:8a:93:17:f7:b3:91:f2:a8:02:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:11 2024 GMT
            Not After : Feb 17 00:05:11 2025 GMT
        Subject: CN=8CD29791F20FDF8CD71B77CE0BC129C268D93E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:34:00:c9:69:fa:ce:d9:4c:b1:af:47:cf:5b:
                    50:f5:31:95:f7:db:99:a8:6c:a1:38:62:f6:de:91:
                    8d:7c:d8:16:8f:d6:de:d9:19:91:cb:fd:fc:dd:62:
                    d3:8e:25:5e:82:cf:3c:7e:21:41:18:37:14:7b:d6:
                    2c:e2:6e:c2:3f:2a:aa:bc:4b:1b:82:21:a0:e6:f6:
                    5b:c0:b2:d5:4c:6d:df:6d:77:e0:53:4c:6e:2b:f9:
                    9e:12:a1:2c:fb:a1:42:26:5a:39:67:4d:eb:73:22:
                    0c:22:cd:c2:c3:94:74:37:12:fd:84:ea:37:db:b6:
                    5f:69:e2:1d:52:24:91:f9:54:9c:fe:40:7b:8d:e8:
                    f8:07:fa:82:08:24:6b:05:c8:91:28:fa:78:b2:bc:
                    2f:2e:69:fc:4e:78:34:cc:69:92:b8:ac:da:7c:51:
                    f2:79:2b:8f:d0:10:38:19:fa:70:eb:7c:ca:48:8f:
                    ea:13:a3:cb:83:6e:00:e8:34:e8:86:97:9e:0b:bc:
                    39:a4:0c:ad:f8:87:dc:52:b3:8d:3f:4d:ee:d7:37:
                    a3:e0:75:8c:56:66:37:5a:99:02:9a:c2:7f:7c:ad:
                    5b:57:6f:46:9f:9e:6c:bb:90:a4:8b:75:a2:5b:60:
                    cb:04:fe:fa:bd:08:96:5f:50:46:10:0f:14:01:29:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D2:97:91:F2:0F:DF:8C:D7:1B:77:CE:0B:C1:29:C2:68:D9:3E:28
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343038303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:4080::/43

    Signature Algorithm: sha256WithRSAEncryption
         46:2d:07:f2:84:c7:7b:53:4a:e6:18:17:55:c6:77:35:61:0a:
         f8:e2:25:ad:19:16:e8:75:d8:61:61:41:86:db:cd:64:a5:0c:
         df:f2:7f:bf:33:5e:d1:4c:ee:2c:f8:cb:3c:96:b5:c6:0f:d3:
         d3:0e:04:89:8d:48:7d:1d:6f:99:9e:56:2b:20:08:99:1b:da:
         6b:55:96:14:8b:f1:7f:8d:b3:a2:df:38:17:fd:7c:55:bb:27:
         46:b3:3f:87:55:99:7a:00:63:1a:86:d9:9c:1d:ea:4f:47:1b:
         7d:cb:9b:ab:29:53:bc:2f:63:85:ba:7b:60:e7:9f:69:2d:3a:
         5b:58:d2:4b:58:14:86:31:2f:85:15:43:c7:a5:c2:32:12:66:
         58:65:e9:20:e5:bc:0a:22:46:ac:4f:bf:44:3d:84:83:6d:3f:
         a9:3e:55:dc:30:ae:9c:8f:bc:91:92:51:af:ba:7f:7e:93:e2:
         84:e2:17:e0:25:31:34:b6:89:6a:3f:ab:9b:58:65:72:88:6e:
         75:80:36:c7:f4:66:f1:0f:81:a9:42:58:80:54:d2:43:8b:f6:
         11:59:04:1f:2b:1d:bc:7d:a7:e7:33:a3:7c:c1:19:d1:4a:f1:
         7d:2a:6b:c7:09:cb:ca:81:37:60:50:1c:b0:93:33:d9:e4:9c:
         8d:13:fb:2d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIULYy4r9JW8NzIG4qTF/ezkfKoAsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yNDAyMTkwMDAwMTFaFw0yNTAyMTcwMDA1MTFaMDMxMTAvBgNV
BAMTKDhDRDI5NzkxRjIwRkRGOENENzFCNzdDRTBCQzEyOUMyNjhEOTNFMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5NADJafrO2Uyxr0fPW1D1MZX3
25mobKE4YvbekY182BaP1t7ZGZHL/fzdYtOOJV6Czzx+IUEYNxR71izibsI/Kqq8
SxuCIaDm9lvAstVMbd9td+BTTG4r+Z4SoSz7oUImWjlnTetzIgwizcLDlHQ3Ev2E
6jfbtl9p4h1SJJH5VJz+QHuN6PgH+oIIJGsFyJEo+niyvC8uafxOeDTMaZK4rNp8
UfJ5K4/QEDgZ+nDrfMpIj+oTo8uDbgDoNOiGl54LvDmkDK34h9xSs40/Te7XN6Pg
dYxWZjdamQKawn98rVtXb0afnmy7kKSLdaJbYMsE/vq9CJZfUEYQDxQBKQF7AgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUjNKXkfIP34zXG3fOC8EpwmjZPigwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNDMwMzgzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEYNRAgDANBgkqhkiG9w0BAQsF
AAOCAQEARi0H8oTHe1NK5hgXVcZ3NWEK+OIlrRkW6HXYYWFBhtvNZKUM3/J/vzNe
0UzuLPjLPJa1xg/T0w4EiY1IfR1vmZ5WKyAImRvaa1WWFIvxf42zot84F/18Vbsn
RrM/h1WZegBjGobZnB3qT0cbfcubqylTvC9jhbp7YOefaS06W1jSS1gUhjEvhRVD
x6XCMhJmWGXpIOW8CiJGrE+/RD2Eg20/qT5V3DCunI+8kZJRr7p/fpPihOIX4CUx
NLaJaj+rm1hlcohudYA2x/Rm8Q+BqUJYgFTSQ4v2EVkEHysdvH2n5zOjfMEZ0Urx
fSprxwnLyoE3YFAcsJMz2eScjRP7LQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:07 2025 by rpki-client