Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030383a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030383a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          b16FaY5NLHKowjo1T67FGaGIOgPF3YWfFEXesam7JUE=
Subject key identifier:   06:16:DB:DE:86:E6:CA:48:48:83:47:9F:0C:0B:69:60:C4:8D:FE:05
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       4344A9C15C2C9FD303998D17E7DB32BF2683E297
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030383a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:40 +0000
ROA not before:           Sat 29 Jul 2023 16:21:40 +0000
ROA not after:            Sat 27 Jul 2024 16:26:40 +0000
asID:                     269194
IP address blocks:        2804:60d4:7008::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:44:a9:c1:5c:2c:9f:d3:03:99:8d:17:e7:db:32:bf:26:83:e2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:40 2023 GMT
            Not After : Jul 27 16:26:40 2024 GMT
        Subject: CN=0616DBDE86E6CA484883479F0C0B6960C48DFE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:26:3a:35:fb:74:c9:25:6d:c6:ee:e2:f6:
                    cd:dc:69:1e:dc:9f:93:07:a5:7f:d2:89:cf:f7:c6:
                    03:8e:09:47:de:c7:b0:02:f4:10:72:b9:be:d1:59:
                    5d:dc:03:fa:f0:f6:94:36:da:13:ba:50:82:3a:95:
                    28:9a:c9:75:96:01:98:ce:5d:e2:67:fe:41:f3:9c:
                    26:ba:22:0b:85:c0:86:71:6f:80:89:da:84:1a:cb:
                    1d:6d:89:6c:1a:20:e0:bc:6f:3c:78:73:09:65:c9:
                    79:b6:3c:e3:68:0a:5c:42:2a:b2:db:e4:d9:47:97:
                    cc:83:cb:c6:8b:3c:e5:0b:32:2d:9d:6b:ed:20:d1:
                    af:92:e4:ab:99:e9:8d:2a:ab:cb:3e:15:33:6a:f9:
                    37:3e:10:6a:56:09:d7:c9:f1:5e:40:ef:e5:b2:01:
                    b1:25:ce:1f:0e:6f:20:20:d0:78:53:1b:3f:46:7b:
                    7d:ba:10:e8:92:da:e4:d4:8e:a5:20:53:b3:fb:ea:
                    35:7c:30:df:71:ea:8b:26:8d:f0:8f:15:77:79:c7:
                    10:e4:2e:ff:f7:b8:27:60:f1:4a:ab:cf:5f:0e:0b:
                    02:0c:82:fa:d5:77:23:13:24:3f:b7:0a:0b:da:f3:
                    76:a0:cd:25:c0:d1:0e:c1:6f:f7:99:44:6f:47:d3:
                    62:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:DB:DE:86:E6:CA:48:48:83:47:9F:0C:0B:69:60:C4:8D:FE:05
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030383a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7008::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:0d:d2:db:6f:cc:a8:45:8d:13:d8:5a:b4:9a:58:af:78:
         7c:93:52:48:63:09:b1:55:29:3d:c6:90:05:f5:29:64:23:a5:
         ed:2c:2c:2c:29:22:0f:dd:fe:e8:4d:28:9e:84:09:5e:ed:31:
         d2:59:bd:16:e0:2f:bd:02:db:3a:34:b5:04:e5:01:de:8f:1d:
         b1:a1:21:4b:35:ea:01:79:cf:cd:54:cf:b8:34:4c:53:fd:0c:
         0c:14:a8:2f:78:41:52:a6:c6:ef:1e:ae:44:d5:98:44:14:37:
         77:4b:9b:6b:fa:fd:54:9b:8b:da:6a:1c:81:25:98:f2:23:18:
         7f:5f:ef:fc:a9:b0:f0:e2:d8:36:7e:99:ab:fd:f5:a2:8b:6b:
         6b:d9:9b:c3:9f:bb:17:fc:ad:84:85:af:6b:e2:ca:10:82:4e:
         76:53:20:ad:b0:18:83:7e:e1:85:54:2b:18:7d:e8:b5:44:75:
         80:15:05:8d:6b:a7:7e:45:c6:65:7d:52:21:60:e6:73:b2:aa:
         cf:d8:56:f5:0d:ad:7b:d0:cd:e8:b3:95:ec:ff:8a:4a:70:09:
         92:95:9b:48:18:f2:5e:07:29:69:50:8b:90:0b:32:2d:26:f0:
         d3:d4:88:36:6e:5e:82:3b:d3:2f:8d:65:02:a2:a2:47:da:f3:
         4f:30:d2:32
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUQ0SpwVwsn9MDmY0X59syvyaD4pcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yMzA3MjkxNjIxNDBaFw0yNDA3MjcxNjI2NDBaMDMxMTAvBgNV
BAMTKDA2MTZEQkRFODZFNkNBNDg0ODgzNDc5RjBDMEI2OTYwQzQ4REZFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UiY6Nft0ySVtxu7i9s3caR7c
n5MHpX/Sic/3xgOOCUfex7AC9BByub7RWV3cA/rw9pQ22hO6UII6lSiayXWWAZjO
XeJn/kHznCa6IguFwIZxb4CJ2oQayx1tiWwaIOC8bzx4cwllyXm2PONoClxCKrLb
5NlHl8yDy8aLPOULMi2da+0g0a+S5KuZ6Y0qq8s+FTNq+Tc+EGpWCdfJ8V5A7+Wy
AbElzh8ObyAg0HhTGz9Ge326EOiS2uTUjqUgU7P76jV8MN9x6osmjfCPFXd5xxDk
Lv/3uCdg8Uqrz18OCwIMgvrVdyMTJD+3Cgva83agzSXA0Q7Bb/eZRG9H02IvAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUBhbb3obmykhIg0efDAtpYMSN/gUwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNzMwMzAzODNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYNRwCDANBgkqhkiG9w0BAQsF
AAOCAQEAAeAN0ttvzKhFjRPYWrSaWK94fJNSSGMJsVUpPcaQBfUpZCOl7SwsLCki
D93+6E0onoQJXu0x0lm9FuAvvQLbOjS1BOUB3o8dsaEhSzXqAXnPzVTPuDRMU/0M
DBSoL3hBUqbG7x6uRNWYRBQ3d0uba/r9VJuL2mocgSWY8iMYf1/v/Kmw8OLYNn6Z
q/31ootra9mbw5+7F/ythIWva+LKEIJOdlMgrbAYg37hhVQrGH3otUR1gBUFjWun
fkXGZX1SIWDmc7Kqz9hW9Q2te9DN6LOV7P+KSnAJkpWbSBjyXgcpaVCLkAsyLSbw
09SINm5egjvTL41lAqKiR9rzTzDSMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org