Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030363a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030363a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          UiRtrExMdUXvGHtz9hs2vqHOjHQhOLT9A2h32QaQSvE=
Subject key identifier:   8E:F1:DD:33:15:AC:94:37:8B:6B:9B:22:63:11:B3:10:E6:19:DF:F4
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       1D566582E43AE59B6329377DBF9E8F8FDA96150A
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030363a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:09 +0000
ROA not before:           Mon 19 Feb 2024 00:00:09 +0000
ROA not after:            Mon 17 Feb 2025 00:05:09 +0000
asID:                     269194
IP address blocks:        2804:60d4:7006::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:56:65:82:e4:3a:e5:9b:63:29:37:7d:bf:9e:8f:8f:da:96:15:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:09 2024 GMT
            Not After : Feb 17 00:05:09 2025 GMT
        Subject: CN=8EF1DD3315AC94378B6B9B226311B310E619DFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:6c:b2:08:c1:4c:40:16:f6:fa:f5:25:c1:
                    a4:11:0a:be:01:51:94:04:69:03:48:d5:f8:3f:80:
                    f6:e7:23:49:df:05:2a:f3:d5:db:cd:4a:70:95:75:
                    02:a6:2b:0f:b8:ee:fa:07:1a:7a:bf:0a:23:d4:ab:
                    b0:d6:a1:9f:e4:0c:9a:87:f5:2d:d3:30:32:44:21:
                    6a:10:62:91:3f:2b:2f:09:94:f6:e9:63:7a:f8:59:
                    83:5e:e2:5a:20:f1:95:d0:93:18:9d:a0:d8:dd:cf:
                    34:b6:bc:ce:b3:bd:02:b4:08:d8:03:b2:1c:04:e4:
                    36:c8:a8:b5:74:09:eb:51:61:eb:38:77:ba:57:0e:
                    10:38:24:78:af:ad:6d:a1:50:34:79:bb:de:23:28:
                    a9:f1:80:b8:7d:30:51:7d:40:72:67:68:bb:63:61:
                    00:08:aa:fa:30:4f:0b:c8:5b:17:60:c4:e5:11:00:
                    c9:4c:c6:d3:1c:0f:44:f6:d3:c3:87:55:36:b9:37:
                    1d:d3:40:0a:51:fd:2f:ac:f5:1d:b4:f6:6c:9d:4a:
                    0e:b4:e8:61:1e:ed:54:84:74:f6:53:63:e1:76:31:
                    60:43:42:9d:f4:d9:49:29:8a:0d:fc:96:08:8f:80:
                    45:82:85:dd:bf:e8:d7:dd:9e:e1:fd:1f:bf:29:b1:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F1:DD:33:15:AC:94:37:8B:6B:9B:22:63:11:B3:10:E6:19:DF:F4
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030363a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7006::/48

    Signature Algorithm: sha256WithRSAEncryption
         d1:52:72:9b:8e:c7:47:6a:49:b8:a5:8b:73:43:25:b1:40:12:
         b6:b5:b6:c1:cd:3d:f4:0b:d9:87:fc:44:ae:ec:16:e2:f3:c5:
         5b:31:9e:66:b1:3c:16:7f:ff:5d:8d:e5:66:e9:f5:dd:b7:e2:
         43:dc:d2:16:3d:b1:78:34:f8:e2:82:7f:77:f2:67:cf:5c:b4:
         6f:b9:09:0a:5e:8e:42:ea:68:56:4d:d0:07:ac:94:7f:ff:18:
         f2:fb:9f:5b:29:e8:c6:0f:1c:23:ac:29:cc:2d:ac:26:c8:5a:
         3f:8e:a9:bd:ce:30:60:44:73:bc:86:57:b6:1c:d4:2b:35:c0:
         53:5a:ac:c0:39:ca:7e:9b:04:69:56:41:0e:d3:7e:b7:ed:0b:
         56:c6:e7:a3:87:0d:59:c7:b3:51:66:a0:1c:0e:61:fc:d3:78:
         0e:af:c8:42:d4:ad:30:30:2d:2b:4d:c2:c7:da:99:e6:d2:0c:
         f6:f2:57:64:a6:9c:8a:12:04:e5:ba:e4:c0:ec:84:29:86:e7:
         45:c9:6e:74:2e:29:e3:f1:08:2c:1c:79:9a:63:59:aa:ff:dd:
         26:b3:41:3d:f4:5f:78:85:69:de:94:0b:27:d3:e1:3f:18:7a:
         a4:e2:eb:f5:32:65:0b:e7:18:1c:27:52:df:09:da:d4:8a:23:
         39:95:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:26 2025 by rpki-client