Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030373a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030373a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          abwM/LM822XcJaFLIBld0NFPiR8eoVGNkjpMp5+Ms3c=
Subject key identifier:   DD:ED:3A:BB:9C:46:FF:7C:15:0F:39:15:2F:B7:84:CD:46:41:29:40
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       63CCF88BEF27BF6CB488128B8ABC3AE7D324811F
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030373a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:11 +0000
ROA not before:           Mon 19 Feb 2024 00:00:11 +0000
ROA not after:            Mon 17 Feb 2025 00:05:11 +0000
asID:                     269194
IP address blocks:        2804:60d4:7007::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cc:f8:8b:ef:27:bf:6c:b4:88:12:8b:8a:bc:3a:e7:d3:24:81:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:11 2024 GMT
            Not After : Feb 17 00:05:11 2025 GMT
        Subject: CN=DDED3ABB9C46FF7C150F39152FB784CD46412940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:7d:63:65:ef:8a:45:5e:d4:20:eb:55:c2:
                    9f:65:1e:0c:0c:07:d1:6c:06:f0:36:17:ba:2c:7d:
                    37:ad:cb:f2:86:64:e4:5b:46:6c:bf:30:17:01:96:
                    41:26:48:28:61:03:f9:c5:cf:2d:76:aa:bd:5b:5c:
                    1f:48:e0:33:10:3f:75:4f:e9:99:ce:61:75:6c:cd:
                    04:5b:9b:b4:05:1a:da:41:7e:03:4a:e8:06:4e:e5:
                    ab:a2:42:53:2b:85:39:ef:30:e7:c5:12:43:0b:68:
                    f5:4b:ef:85:e7:ab:da:eb:79:eb:87:e9:e9:5b:33:
                    1c:c4:e5:03:85:e1:a4:cf:70:e6:db:1b:a5:f2:da:
                    8d:f3:13:ec:25:2f:38:ad:8f:29:0c:81:69:a2:1f:
                    62:7f:70:42:98:a5:cb:d6:16:db:ac:df:c9:c1:4b:
                    c5:b4:03:4c:d1:ce:f1:cd:2f:24:79:a5:24:9c:e8:
                    d8:3c:0c:6c:73:9f:91:4e:76:3e:9d:8d:93:14:0a:
                    97:c0:a1:b5:da:5f:56:cf:28:50:65:86:b2:e4:5a:
                    95:9a:64:d0:56:de:0c:e8:c5:6a:db:5f:64:ab:05:
                    67:cc:cb:88:24:4f:36:ea:72:9b:31:9a:9c:dd:ea:
                    57:4b:72:9c:21:c4:fd:00:7b:d4:61:5a:bf:90:7a:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:3A:BB:9C:46:FF:7C:15:0F:39:15:2F:B7:84:CD:46:41:29:40
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030373a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7007::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:78:26:67:7d:32:f8:57:26:77:94:89:08:de:68:f0:40:d4:
         70:d0:bb:48:2c:0c:0b:19:40:fd:bf:d8:68:b8:e4:5a:0e:36:
         da:20:4a:37:5d:9e:41:9e:f0:3a:d5:17:6f:0a:b0:2f:25:5f:
         41:96:b6:c3:c0:4d:9e:93:c7:1f:63:34:15:3c:60:8b:98:30:
         9b:1d:29:7a:d3:50:7d:f3:a7:26:c7:b7:7f:6d:f3:ae:d3:7a:
         3b:5a:6c:d1:34:7b:4c:a2:b3:aa:25:06:8b:a2:b5:ed:61:ef:
         0b:d8:29:ea:f4:ef:bb:7e:82:42:f2:62:06:01:ec:3f:79:9b:
         62:af:7a:9d:1f:62:5d:94:63:ea:da:32:4a:9a:7d:a7:15:4c:
         57:b3:d6:cc:a5:3a:c8:8f:69:cf:7c:a1:b8:06:67:1f:9d:fb:
         55:45:37:db:23:b4:e2:f3:82:ca:f0:90:24:03:f7:8a:e2:e3:
         74:ce:2a:57:97:0d:f8:33:0a:8a:9c:bb:8c:a9:14:55:13:cf:
         5d:74:ba:5a:77:31:f9:2f:75:7f:c4:61:11:8e:8b:4b:7e:3e:
         82:3f:1a:95:26:c4:c1:ec:5d:ef:90:d8:a1:55:48:e8:38:8e:
         0d:a6:f0:b1:61:f6:dd:ca:c9:0d:bf:eb:c4:94:c0:e5:f5:57:
         d9:32:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:39:25 2025 by rpki-client