Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          zCf6v5ScRmrHi522Vk2gSgS0300rWgfuJRUcb41vRSY=
Subject key identifier:   D9:02:F8:FE:FE:56:09:A3:FA:F0:7D:D2:AE:2F:87:CF:E1:D9:97:37
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2A10BF7039B2E29D8A86A1063C0856F26E746BAF
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:07 +0000
ROA not before:           Mon 19 Feb 2024 00:00:07 +0000
ROA not after:            Mon 17 Feb 2025 00:05:07 +0000
asID:                     269194
IP address blocks:        2804:60d4:4100::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:10:bf:70:39:b2:e2:9d:8a:86:a1:06:3c:08:56:f2:6e:74:6b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:07 2024 GMT
            Not After : Feb 17 00:05:07 2025 GMT
        Subject: CN=D902F8FEFE5609A3FAF07DD2AE2F87CFE1D99737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:13:24:fc:32:27:a2:51:33:00:69:bc:47:
                    b9:d2:53:1e:47:3b:95:85:72:4c:48:0b:35:ad:d9:
                    da:49:a6:91:83:10:92:06:2d:28:ef:64:bb:49:5e:
                    f4:29:3c:6f:00:78:71:fe:3c:54:5d:99:52:1e:45:
                    87:5c:a3:1a:7b:d4:67:bd:2b:57:cd:3d:0c:4b:47:
                    ce:fe:9c:fb:9b:1e:be:4f:cf:4b:2d:48:51:e4:24:
                    6d:fb:cc:23:03:10:87:c5:4b:47:f8:49:84:38:6a:
                    2c:2c:f3:6f:5b:46:7e:04:a3:55:eb:7f:2c:f4:b3:
                    cd:a0:b9:a9:19:86:a0:49:df:84:f5:04:23:6e:dc:
                    e6:c4:ba:ba:b7:e4:2d:b9:e7:25:86:42:2b:11:77:
                    fe:ab:6c:e3:cb:2a:61:14:0b:2f:07:ec:8c:21:05:
                    76:7b:fb:82:5d:2d:cb:c8:91:d7:ac:88:10:21:18:
                    e4:b3:27:9c:49:b2:eb:85:78:e3:c1:6c:f7:97:1d:
                    97:2d:57:0f:4e:ff:dd:d2:b4:26:bb:ab:fc:1d:26:
                    e8:7c:a2:d3:2b:2b:49:c3:37:95:6c:80:37:8b:11:
                    77:9c:61:9a:65:f9:ce:8a:a3:4f:4d:b3:d8:ad:93:
                    95:b1:0b:d5:44:43:a9:d3:e0:04:af:bb:ed:f3:d0:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:02:F8:FE:FE:56:09:A3:FA:F0:7D:D2:AE:2F:87:CF:E1:D9:97:37
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a343130303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:4100::/43

    Signature Algorithm: sha256WithRSAEncryption
         48:ee:a7:0d:2d:2a:ef:ed:1b:b2:61:e3:54:78:c1:3d:13:b5:
         c0:ff:d7:22:a3:b8:bb:3d:d6:4d:d9:06:12:1b:2f:64:59:5a:
         64:3f:05:af:41:2e:d1:54:21:13:f1:d3:bd:c0:16:18:b7:cc:
         42:2a:c8:00:57:69:e6:5a:2b:5c:f0:68:0c:7d:18:aa:2a:a1:
         6d:52:2c:64:0e:2a:1f:68:90:08:2b:58:2a:e9:a4:47:3a:60:
         cb:a0:32:7c:96:7e:b2:31:f9:75:4c:fe:46:b6:08:af:6c:9f:
         fa:6c:be:4a:f2:86:cc:1e:e4:bd:45:46:ac:87:95:63:16:b9:
         f8:e4:71:98:88:87:4b:32:95:c4:69:3f:48:c1:93:9e:0c:8e:
         6b:b9:ab:48:7d:55:69:19:f9:e6:6c:2b:4a:b1:73:bb:5d:4a:
         93:22:25:3e:2a:73:2d:2d:e7:49:54:87:79:c8:b1:6c:3d:e6:
         e3:3d:a3:e6:ea:a7:4a:e5:7c:8c:5e:de:a2:7e:e9:6e:a8:96:
         05:e2:1a:27:02:1c:0b:ab:6c:b5:a4:cf:68:22:3b:18:da:d1:
         ec:2d:88:c5:e7:ac:49:e7:75:34:b8:3d:87:30:59:98:2d:b5:
         7e:df:75:ae:5d:44:8c:c2:78:6c:96:b3:7e:75:2a:ba:64:96:
         0c:70:78:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org