Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031303a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031303a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          Ubisrc8ToBoRFbmhCzdP3bl/Dyha2k3gzdPe1b4Qz70=
Subject key identifier:   E9:5F:96:EE:A3:E2:14:9E:5F:A2:F2:8F:97:2F:16:D8:D6:25:FB:3A
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       389B610C6729AECBB80C4DF9188607028ECC34E0
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031303a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:09 +0000
ROA not before:           Mon 19 Feb 2024 00:00:09 +0000
ROA not after:            Mon 17 Feb 2025 00:05:09 +0000
asID:                     269194
IP address blocks:        2804:60d4:7010::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9b:61:0c:67:29:ae:cb:b8:0c:4d:f9:18:86:07:02:8e:cc:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:09 2024 GMT
            Not After : Feb 17 00:05:09 2025 GMT
        Subject: CN=E95F96EEA3E2149E5FA2F28F972F16D8D625FB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:d0:22:09:ae:b4:41:1e:50:7e:f4:80:ad:
                    a0:45:c8:dc:07:7f:47:8d:a4:2b:7d:f5:e4:90:c7:
                    73:b4:cf:b7:e0:8f:ef:4e:89:2a:47:d2:9b:1d:3a:
                    a1:48:d4:46:e6:61:0a:03:69:90:a9:04:f7:f1:f5:
                    0f:73:28:cb:5f:3e:df:de:92:3a:e9:e8:98:81:00:
                    00:c6:59:0f:a5:a7:88:33:36:11:b1:27:c7:f2:5f:
                    6e:4f:2f:28:22:8b:f7:e1:6c:35:43:6c:b5:c3:56:
                    b4:b2:0f:e0:53:70:b5:96:ec:dd:6a:e9:a9:75:7b:
                    b4:43:0d:e3:a0:ae:57:d8:94:ec:f7:41:59:d2:2e:
                    46:05:5f:ed:20:79:9e:07:4e:d3:69:13:68:37:48:
                    68:33:8e:4d:15:25:b3:7d:89:f3:20:42:68:81:0c:
                    a7:11:b7:40:f7:ac:01:28:c7:4a:45:b9:6b:60:45:
                    ed:1e:61:3d:55:af:54:1a:cd:23:cd:72:32:8e:f9:
                    f3:da:64:63:48:2f:a4:27:e7:30:bc:a8:c7:96:87:
                    93:68:6c:22:e2:7d:7e:d1:af:2d:9d:5b:d0:14:6f:
                    c1:f4:a2:99:04:fd:13:be:2a:ef:b8:96:90:01:fd:
                    d3:3b:9b:3e:fa:f0:76:f5:86:7b:aa:33:6f:f9:4d:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5F:96:EE:A3:E2:14:9E:5F:A2:F2:8F:97:2F:16:D8:D6:25:FB:3A
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031303a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7010::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:d6:52:36:6f:ec:cd:b3:fe:e8:21:cf:0f:4a:51:70:72:e2:
         06:86:ec:68:93:58:4b:52:49:fb:43:f2:4a:fb:94:b9:92:a6:
         ed:cf:d3:93:ab:5e:ec:ce:af:94:63:e6:32:f0:76:6f:2d:83:
         44:84:1e:6b:5f:de:df:b1:b4:2a:e8:13:47:b2:e5:1b:fa:47:
         cf:d6:d5:cd:92:05:f6:39:57:dd:7b:ea:d0:2e:52:c9:86:44:
         77:42:45:cf:c9:5e:45:61:99:3e:95:d5:58:15:19:52:66:17:
         73:a7:31:ec:bc:62:c5:89:ff:cf:70:54:58:63:33:ba:18:0c:
         c9:60:7e:c8:d7:8d:a7:3f:20:38:6c:d5:2f:7a:e9:04:0a:c3:
         52:07:e6:99:4d:46:f5:a3:3b:fc:ed:fe:7d:97:3c:48:8f:bb:
         02:8e:48:3d:1a:94:31:f2:5e:47:75:b1:8a:2e:bf:9b:b3:e1:
         86:f0:54:3c:60:94:a6:52:96:61:6b:f3:89:7c:e8:cb:27:24:
         f3:b3:be:8f:ed:9a:90:e9:b2:2d:40:9b:ff:d1:20:b2:03:89:
         2c:77:9c:fe:1d:7a:a2:63:c1:99:3d:4e:3f:1d:02:29:c5:f5:
         29:96:6c:f9:44:4c:a8:94:fb:a1:e1:8b:8d:38:7e:7b:37:28:
         5c:ba:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org