Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031343a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031343a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          9reHoCvQHtK23GyozSnpIE8ynn1MXzvtudPUPtFDwTE=
Subject key identifier:   5B:37:6B:38:BB:5B:FF:05:42:52:D2:75:45:7B:48:6C:EB:98:D4:55
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       36658B3E5965E01219FE85EA701D0DD8C153B218
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031343a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:09 +0000
ROA not before:           Mon 19 Feb 2024 00:00:09 +0000
ROA not after:            Mon 17 Feb 2025 00:05:09 +0000
asID:                     269194
IP address blocks:        2804:60d4:7014::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:65:8b:3e:59:65:e0:12:19:fe:85:ea:70:1d:0d:d8:c1:53:b2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:09 2024 GMT
            Not After : Feb 17 00:05:09 2025 GMT
        Subject: CN=5B376B38BB5BFF054252D275457B486CEB98D455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:be:1c:28:0b:ff:c7:0c:ba:95:60:72:77:
                    c7:de:ea:bc:fe:41:0c:af:04:f6:ba:e6:fe:5c:6e:
                    2b:b8:d5:e8:d6:1c:41:09:cf:29:4f:75:f5:2e:74:
                    27:39:4f:c8:da:3c:32:44:c8:25:9b:0f:9d:bc:76:
                    41:aa:e0:a9:01:e9:fd:04:01:76:df:50:38:5b:e1:
                    64:58:a6:83:9d:5d:d1:ca:12:6b:26:81:76:36:3a:
                    7d:33:d3:fd:e1:7e:5f:65:80:75:11:a6:16:10:5e:
                    ee:f0:41:e1:11:82:32:32:be:2d:21:7c:b4:e2:05:
                    04:9d:9f:d8:65:6b:e6:a8:55:a5:92:ad:c5:a8:9e:
                    29:17:98:45:b8:f4:2f:24:80:51:f3:e7:4d:d8:60:
                    1a:9c:1b:8a:44:eb:88:48:4f:9e:b7:cf:23:9b:9e:
                    7d:0e:3f:11:42:c4:30:b1:e6:9e:d0:af:e0:15:50:
                    64:93:6f:58:24:fb:88:eb:c0:40:42:e3:25:f0:72:
                    98:38:89:34:fb:21:41:ec:c7:d4:26:38:d4:97:27:
                    8a:4e:08:0a:0b:0c:ce:1a:e0:31:d3:fb:dc:54:0e:
                    43:2f:96:1c:d0:14:2a:5e:4c:9e:33:63:67:c9:dd:
                    aa:84:71:03:13:b4:a3:8a:86:fa:20:f9:d7:b3:4b:
                    c2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:37:6B:38:BB:5B:FF:05:42:52:D2:75:45:7B:48:6C:EB:98:D4:55
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031343a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7014::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:f7:ca:64:42:ef:1c:98:3f:f2:77:77:86:01:6c:51:5d:96:
         63:c0:9e:a0:3f:4e:fa:4c:1b:05:ba:f2:67:3b:4a:ee:aa:72:
         98:49:7d:29:28:d1:04:38:a3:98:da:6c:50:ec:e1:9f:46:18:
         ca:34:b4:08:52:e5:94:f2:76:2a:be:9d:7f:c9:be:2d:6c:7e:
         d0:9b:d3:56:94:c9:ac:b0:1e:cd:3d:6a:c9:46:ca:35:c2:15:
         b0:5d:94:c0:ee:6d:59:db:f1:7c:5e:03:d2:f2:a3:94:44:24:
         70:51:39:67:9d:06:be:67:0f:7e:94:68:35:e5:40:2b:75:6c:
         ef:e9:40:32:1f:1c:49:f6:83:39:47:7d:cf:bd:e9:6f:55:16:
         27:3a:6d:b1:82:56:d5:91:7d:f6:42:d5:b3:c8:8e:96:a5:af:
         98:d3:c5:f4:fe:11:14:71:d2:08:6a:c4:71:e2:1a:16:85:ea:
         62:b8:ca:b8:2a:a5:20:2b:62:ba:28:c7:fe:2b:57:e9:0f:0c:
         ad:18:54:90:ff:f5:4c:f2:9d:ce:f9:cd:88:f3:a3:30:cc:d3:
         6e:0b:58:f7:99:05:a4:46:02:71:cb:88:7e:b2:dc:98:9a:c8:
         07:f6:e0:6c:f2:a5:7b:6e:cf:c5:81:fb:be:62:5d:1e:d2:74:
         6f:11:23:bb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUNmWLPlll4BIZ/oXqcB0N2MFTshgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yNDAyMTkwMDAwMDlaFw0yNTAyMTcwMDA1MDlaMDMxMTAvBgNV
BAMTKDVCMzc2QjM4QkI1QkZGMDU0MjUyRDI3NTQ1N0I0ODZDRUI5OEQ0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAb4cKAv/xwy6lWByd8fe6rz+
QQyvBPa65v5cbiu41ejWHEEJzylPdfUudCc5T8jaPDJEyCWbD528dkGq4KkB6f0E
AXbfUDhb4WRYpoOdXdHKEmsmgXY2On0z0/3hfl9lgHURphYQXu7wQeERgjIyvi0h
fLTiBQSdn9hla+aoVaWSrcWonikXmEW49C8kgFHz503YYBqcG4pE64hIT563zyOb
nn0OPxFCxDCx5p7Qr+AVUGSTb1gk+4jrwEBC4yXwcpg4iTT7IUHsx9QmONSXJ4pO
CAoLDM4a4DHT+9xUDkMvlhzQFCpeTJ4zY2fJ3aqEcQMTtKOKhvog+dezS8IxAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUWzdrOLtb/wVCUtJ1RXtIbOuY1FUwHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNzMwMzEzNDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYNRwFDANBgkqhkiG9w0BAQsF
AAOCAQEAxPfKZELvHJg/8nd3hgFsUV2WY8CeoD9O+kwbBbryZztK7qpymEl9KSjR
BDijmNpsUOzhn0YYyjS0CFLllPJ2Kr6df8m+LWx+0JvTVpTJrLAezT1qyUbKNcIV
sF2UwO5tWdvxfF4D0vKjlEQkcFE5Z50GvmcPfpRoNeVAK3Vs7+lAMh8cSfaDOUd9
z73pb1UWJzptsYJW1ZF99kLVs8iOlqWvmNPF9P4RFHHSCGrEceIaFoXqYrjKuCql
ICtiuijH/itX6Q8MrRhUkP/1TPKdzvnNiPOjMMzTbgtY95kFpEYCccuIfrLcmJrI
B/bgbPKle27PxYH7vmJdHtJ0bxEjuw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:26 2025 by rpki-client