Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030343a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030343a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          5dI+8ABhRztQ17/k9rnoTrtNxJsZItQ3CssWCt8QZm8=
Subject key identifier:   5D:96:00:FD:1D:EF:F0:3B:AE:C1:97:86:C6:19:81:5A:58:F5:1D:B9
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       16D86ADE34C6F267CC45C2E983AD00C3908E7410
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030343a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:08 +0000
ROA not before:           Mon 19 Feb 2024 00:00:08 +0000
ROA not after:            Mon 17 Feb 2025 00:05:08 +0000
asID:                     269194
IP address blocks:        2804:60d4:7004::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d8:6a:de:34:c6:f2:67:cc:45:c2:e9:83:ad:00:c3:90:8e:74:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:08 2024 GMT
            Not After : Feb 17 00:05:08 2025 GMT
        Subject: CN=5D9600FD1DEFF03BAEC19786C619815A58F51DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:f9:c6:62:6d:f3:a8:8d:f4:ca:ce:15:e8:
                    b9:15:b9:3b:26:a4:43:f0:72:19:24:8b:52:bf:c6:
                    32:76:5d:3e:47:12:c1:2a:99:50:d6:25:26:5b:95:
                    b9:4e:55:19:41:ce:24:c9:56:7a:8a:3d:96:00:35:
                    54:47:89:d7:a9:13:ec:c0:15:69:89:b4:b7:93:af:
                    c8:d6:2e:a6:42:d6:f7:a0:de:4d:66:99:2c:2f:c4:
                    5c:a3:9a:f9:9f:f1:4b:fc:9e:3d:93:6c:4d:ed:8e:
                    a4:76:56:ec:72:ef:c8:ab:25:b5:aa:ac:da:7b:34:
                    b1:22:06:65:85:29:9a:0d:5d:b9:dc:65:23:5b:3f:
                    ec:8c:a1:a4:4a:18:8d:8a:2a:98:be:c0:ba:c1:0d:
                    03:63:3b:19:4e:f8:4f:6b:a5:78:6f:a2:d4:4d:ca:
                    ec:17:15:02:c9:15:c2:0f:a7:a2:17:05:e9:09:bb:
                    ca:7d:57:c1:7e:28:27:dd:de:07:84:68:ca:f7:b2:
                    b4:2e:0b:83:ce:dc:1b:a0:49:17:a6:77:a8:65:d2:
                    fd:e4:0f:92:9a:a6:99:8b:93:fa:bb:4e:db:f3:47:
                    ba:ad:89:e3:0b:78:5e:b0:97:9b:8a:12:72:41:31:
                    86:18:3b:08:bb:d9:db:62:99:a0:93:93:d7:d5:e0:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:96:00:FD:1D:EF:F0:3B:AE:C1:97:86:C6:19:81:5A:58:F5:1D:B9
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030343a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7004::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:26:57:4c:c8:2b:e7:2c:ca:86:57:82:15:32:49:0c:d7:14:
         3a:b5:8f:90:7d:23:d8:db:93:15:1f:d1:b6:bb:05:98:fa:ee:
         f0:76:b5:81:36:e3:78:fc:1d:40:de:2f:ee:5d:8c:cd:07:a8:
         db:94:78:cd:97:58:05:fe:f3:8d:1e:c5:46:f6:9c:ec:43:73:
         45:55:da:e7:ef:83:6d:79:aa:1c:39:e8:54:30:2c:ad:6d:5a:
         d9:04:e3:df:ac:d4:14:12:58:6f:06:60:70:ce:ce:14:2d:74:
         ea:c4:4b:ac:2a:3b:7c:43:61:77:04:f5:ed:fd:27:96:21:43:
         95:76:16:a1:79:b1:e6:b0:c4:07:51:83:ef:0e:ca:3a:84:9d:
         b3:20:76:f4:4c:cd:bd:c7:25:72:8a:ed:06:f0:0c:a3:9c:eb:
         2a:49:87:24:02:45:e6:a1:93:85:39:05:69:14:bf:e7:04:2a:
         fe:ac:f6:57:55:7c:57:04:6a:4c:c5:11:81:ec:7e:a5:00:79:
         75:98:70:fa:05:2f:0e:5b:ca:1d:a0:a2:c9:49:41:46:c6:0a:
         6f:c7:07:c3:80:f8:3d:40:9c:2f:a8:a4:92:cf:07:73:71:33:
         2e:3a:bd:bd:d6:83:fc:14:6a:91:a1:eb:fa:73:83:cd:9c:6b:
         0d:22:45:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:39 2025 by rpki-client