Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          tyTRDfPnE2e+LLGpz9xBgUsDTmy6IydezLNLI+XXEDo=
Subject key identifier:   FB:BF:C2:4E:EA:9D:35:14:19:7D:6D:5C:E0:A7:85:79:CB:79:05:59
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       0DE57BD149E6ED81123F4613BA6DF1EAD1F99435
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:11 +0000
ROA not before:           Mon 19 Feb 2024 00:00:11 +0000
ROA not after:            Mon 17 Feb 2025 00:05:11 +0000
asID:                     269194
IP address blocks:        2804:60d4:40a0::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e5:7b:d1:49:e6:ed:81:12:3f:46:13:ba:6d:f1:ea:d1:f9:94:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:11 2024 GMT
            Not After : Feb 17 00:05:11 2025 GMT
        Subject: CN=FBBFC24EEA9D3514197D6D5CE0A78579CB790559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:07:6b:73:ac:a0:9f:2d:4c:0c:b8:8f:e5:
                    3f:41:72:21:63:29:64:27:8b:e0:e4:cb:fa:ba:07:
                    9c:55:0c:4a:97:0e:ad:68:d4:b8:74:99:12:b7:95:
                    30:98:5e:73:7d:b0:fc:ce:c4:c7:7b:f3:bc:aa:da:
                    45:09:f8:7c:4e:14:2d:3d:15:92:b9:d8:d9:ae:58:
                    90:7e:11:8a:08:16:e5:df:0e:ba:6f:83:1e:45:94:
                    c2:da:6d:8e:5d:ef:e7:d8:78:70:9d:db:38:6c:6c:
                    95:59:65:e3:b1:da:eb:f1:a3:af:5e:1e:50:8b:23:
                    3b:99:1c:b6:2b:fd:0a:5f:35:53:d1:4e:f0:3c:89:
                    f9:88:6e:a3:1e:ce:14:62:1f:b9:45:98:84:0e:da:
                    da:b5:d6:90:f2:1b:d4:df:91:7e:7d:18:f5:34:4d:
                    17:a6:c6:e1:40:a6:c6:5d:da:56:fe:38:02:8e:30:
                    5e:50:ca:13:5b:49:4e:ed:4a:d9:6a:fb:1d:c9:c1:
                    bc:b8:26:1b:bf:4f:59:35:b2:ef:da:d7:28:50:03:
                    81:83:9c:a2:7c:37:c4:89:47:bd:36:c0:ec:c6:c5:
                    41:37:18:25:98:35:68:d5:d9:89:68:56:49:a9:df:
                    dd:ce:20:b9:00:a1:cd:db:29:76:5e:c9:62:a6:46:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BF:C2:4E:EA:9D:35:14:19:7D:6D:5C:E0:A7:85:79:CB:79:05:59
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343061303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:40a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         ab:a7:2c:3d:27:33:f5:80:ac:11:07:af:4c:89:23:d1:48:98:
         d2:26:50:ec:ae:ae:62:e6:37:77:f9:07:f1:26:91:23:f9:62:
         54:4b:ca:1f:cd:7e:75:14:1c:8f:a9:81:12:91:41:a3:66:69:
         7f:13:3e:7a:d7:d0:0f:7d:d6:50:78:2d:21:cc:c5:5a:b2:71:
         19:f7:3b:a7:c0:24:f9:00:47:d2:9b:ac:6a:a9:33:2f:82:19:
         db:73:7e:e2:41:cf:d1:25:08:54:26:44:66:3f:59:cd:72:73:
         2c:57:b6:a7:d1:12:b0:dd:ff:ff:5e:d8:00:9b:b5:56:d7:09:
         90:df:11:21:39:e0:d3:50:f7:2d:74:fc:7d:a5:31:a9:d4:8b:
         db:de:75:5d:27:d2:61:55:87:e6:21:e9:31:92:a8:32:5f:c2:
         87:10:cc:64:6f:33:14:7c:59:c0:8b:d1:94:86:5d:30:8a:f2:
         11:85:ed:4a:3d:20:bd:6d:e0:24:a4:d1:33:06:4a:ba:78:c9:
         c9:c8:17:5c:9a:70:f2:db:02:38:78:d3:54:b9:e4:78:dc:50:
         66:98:f5:e7:38:0a:25:16:ce:54:53:51:3e:04:06:c7:74:d1:
         73:98:e6:9b:33:bf:d5:75:a7:20:4f:05:7c:68:d2:26:f2:27:
         06:17:ed:d2
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUDeV70Unm7YESP0YTum3x6tH5lDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yNDAyMTkwMDAwMTFaFw0yNTAyMTcwMDA1MTFaMDMxMTAvBgNV
BAMTKEZCQkZDMjRFRUE5RDM1MTQxOTdENkQ1Q0UwQTc4NTc5Q0I3OTA1NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zAdrc6ygny1MDLiP5T9BciFj
KWQni+Dky/q6B5xVDEqXDq1o1Lh0mRK3lTCYXnN9sPzOxMd787yq2kUJ+HxOFC09
FZK52NmuWJB+EYoIFuXfDrpvgx5FlMLabY5d7+fYeHCd2zhsbJVZZeOx2uvxo69e
HlCLIzuZHLYr/QpfNVPRTvA8ifmIbqMezhRiH7lFmIQO2tq11pDyG9TfkX59GPU0
TRemxuFApsZd2lb+OAKOMF5QyhNbSU7tStlq+x3Jwby4Jhu/T1k1su/a1yhQA4GD
nKJ8N8SJR702wOzGxUE3GCWYNWjV2YloVkmp393OILkAoc3bKXZeyWKmRt5vAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU+7/CTuqdNRQZfW1c4KeFect5BVkwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNDMwNjEzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEYNRAoDANBgkqhkiG9w0BAQsF
AAOCAQEAq6csPScz9YCsEQevTIkj0UiY0iZQ7K6uYuY3d/kH8SaRI/liVEvKH81+
dRQcj6mBEpFBo2ZpfxM+etfQD33WUHgtIczFWrJxGfc7p8Ak+QBH0pusaqkzL4IZ
23N+4kHP0SUIVCZEZj9ZzXJzLFe2p9ESsN3//17YAJu1VtcJkN8RITng01D3LXT8
faUxqdSL2951XSfSYVWH5iHpMZKoMl/ChxDMZG8zFHxZwIvRlIZdMIryEYXtSj0g
vW3gJKTRMwZKunjJycgXXJpw8tsCOHjTVLnkeNxQZpj15zgKJRbOVFNRPgQGx3TR
c5jmmzO/1XWnIE8FfGjSJvInBhft0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org