Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          nE0FGbwN6kdN7reO98dyoor33h8+G8aje2xkKIrfFVw=
Subject key identifier:   0D:F6:7F:AB:76:16:41:B2:3E:FA:89:21:94:BD:9A:EC:72:CC:57:5D
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       7BA3B6A1E29016B098E8AD655C5865230B5F3585
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:10 +0000
ROA not before:           Mon 19 Feb 2024 00:00:10 +0000
ROA not after:            Mon 17 Feb 2025 00:05:10 +0000
asID:                     269194
IP address blocks:        2804:60d4:700b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a3:b6:a1:e2:90:16:b0:98:e8:ad:65:5c:58:65:23:0b:5f:35:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:10 2024 GMT
            Not After : Feb 17 00:05:10 2025 GMT
        Subject: CN=0DF67FAB761641B23EFA892194BD9AEC72CC575D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:14:8e:ee:fa:91:0e:e0:46:aa:5c:45:2d:
                    a9:21:26:cc:ca:92:a9:dd:ac:f7:de:36:ff:11:05:
                    2a:ce:08:61:b4:20:50:64:1f:94:5d:bd:7a:5f:ac:
                    9b:c3:d6:4d:9e:da:af:b4:87:a9:1d:fa:5a:3b:02:
                    2e:75:8d:ba:f3:56:02:43:db:9e:74:bb:2a:04:48:
                    56:c5:c8:e3:8a:dc:aa:9d:cb:39:96:e2:5d:99:97:
                    4f:17:a6:63:90:09:fe:f7:3f:43:27:d0:52:d7:92:
                    fd:54:bf:f6:24:f1:3b:22:18:ff:21:4a:60:75:61:
                    02:e0:84:bf:8d:52:ab:d0:6e:aa:28:e2:e9:53:ab:
                    f3:39:7a:f6:80:41:3f:8d:45:7e:48:cd:ba:06:1c:
                    ba:7a:dc:ed:a9:2e:36:65:ed:f2:f8:e3:a7:27:19:
                    dd:4e:e9:86:c3:4a:0a:3c:ff:72:e4:28:ed:d0:b8:
                    3a:8f:f3:f1:6a:86:22:3f:c0:59:26:9f:25:6a:80:
                    52:dc:c3:f5:80:c8:c2:73:15:63:22:98:f7:32:65:
                    c7:09:71:ff:38:f0:a2:32:59:58:31:77:3c:00:31:
                    f4:5d:5c:af:84:02:70:83:e3:70:3e:08:e1:52:d2:
                    01:aa:00:de:82:0d:08:ae:09:0b:24:2f:ff:92:3c:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:7F:AB:76:16:41:B2:3E:FA:89:21:94:BD:9A:EC:72:CC:57:5D
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373030623a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:700b::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:7c:8e:dd:21:00:e3:8a:5e:16:e1:f9:c8:e4:8a:53:d2:13:
         db:f1:60:e9:e2:ac:49:97:d8:fd:24:44:45:99:fe:9b:bf:34:
         9a:8a:b7:dc:79:9f:6f:11:22:a0:e2:ff:43:92:5f:f1:e8:dc:
         c9:0a:97:0a:e1:69:46:48:33:ec:aa:17:6d:22:a4:98:ae:bb:
         23:16:d7:0a:7f:7f:74:b8:70:07:08:01:db:d4:93:d0:a5:73:
         78:b2:a2:ab:38:e8:a6:4c:f2:75:9c:c4:b4:6c:b2:04:09:04:
         1f:f1:0a:8f:a6:91:65:6b:95:8f:b9:49:66:11:eb:44:f3:0d:
         2c:b3:1b:10:f2:e7:7b:cf:1d:b1:6b:1b:a7:87:d9:d1:8d:96:
         52:9b:d9:09:30:1f:9d:16:a8:2f:02:85:9b:93:b0:d9:ff:fa:
         16:13:b7:47:20:72:31:68:b3:c5:c0:06:ae:91:e0:2f:f6:b8:
         b3:02:a1:bf:f5:01:cd:27:68:8f:01:d5:37:1f:6a:15:d9:78:
         42:8e:29:5b:a6:98:b0:87:94:59:1e:51:bc:90:e4:0b:58:93:
         4c:27:4d:72:d5:0d:78:af:b3:f8:5e:c2:1c:d4:2e:63:f9:4b:
         46:15:bc:1e:16:34:cf:98:b6:81:5f:33:9d:fc:3a:46:33:ea:
         c1:91:3f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org