Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031383a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031383a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          Y258MZE5dFh++OrwvEUdaPkKjhqfaYNJ0T/N9PCD4Ss=
Subject key identifier:   B1:39:99:78:B6:1B:3D:27:A8:22:16:9E:95:EB:52:CC:AC:53:A1:E6
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       1886052735491303CEE13D6F24E5287A61A47813
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031383a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:12 +0000
ROA not before:           Mon 19 Feb 2024 00:00:12 +0000
ROA not after:            Mon 17 Feb 2025 00:05:12 +0000
asID:                     269194
IP address blocks:        2804:60d4:7018::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:86:05:27:35:49:13:03:ce:e1:3d:6f:24:e5:28:7a:61:a4:78:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:12 2024 GMT
            Not After : Feb 17 00:05:12 2025 GMT
        Subject: CN=B1399978B61B3D27A822169E95EB52CCAC53A1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:d9:33:e7:76:f7:f9:38:b1:45:b1:1f:99:
                    8d:31:a4:1e:67:62:2a:a7:15:5e:e7:80:62:6c:55:
                    b5:de:71:0a:29:aa:68:15:65:22:ab:5a:aa:1f:eb:
                    74:b9:03:db:1c:a3:71:b0:a0:7c:1f:c2:a2:c7:2b:
                    1c:c8:3d:02:ed:24:e4:15:f9:c9:f2:53:b2:a7:8a:
                    c9:96:e1:53:ee:08:e0:c7:65:16:0e:47:98:f1:57:
                    7a:b3:51:54:77:26:dd:2f:44:e4:53:a7:fe:9b:5d:
                    d9:ba:f8:7e:91:11:4c:bd:5b:77:2a:6f:4e:23:c5:
                    4c:56:84:76:ba:07:5b:5a:c5:e1:ef:bc:1f:ca:0c:
                    32:03:47:77:29:04:06:11:1a:7a:df:7f:42:d8:30:
                    84:3d:a9:46:b5:21:71:ff:36:c0:c2:aa:90:60:43:
                    3c:07:9b:7e:4b:e1:19:e8:1d:00:56:47:f2:bd:b5:
                    fe:de:6b:7a:4c:30:69:3d:8f:53:7d:86:45:af:1a:
                    39:9c:73:29:ad:91:64:b4:a5:b7:f6:a5:7b:30:d5:
                    61:2b:59:f8:f7:1f:fc:33:00:dc:55:55:b3:25:3b:
                    df:b5:a7:b1:11:12:e1:f3:1e:8a:90:d1:cb:2e:71:
                    05:01:f9:a7:71:1d:38:09:79:48:62:a8:2f:3d:35:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:39:99:78:B6:1B:3D:27:A8:22:16:9E:95:EB:52:CC:AC:53:A1:E6
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031383a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7018::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:1d:42:9c:5e:1c:df:27:b0:61:80:f7:bb:75:fb:f1:c7:66:
         0d:04:8d:c3:08:45:f6:3e:20:73:c7:9f:d7:43:7b:d4:71:8a:
         f4:d9:27:47:e9:f3:79:69:3d:b9:4a:91:ce:ca:c9:ce:ea:f6:
         cb:6b:4e:88:f8:4d:31:1b:df:8c:60:d2:63:68:65:69:f9:85:
         22:08:e9:52:16:e6:f1:5e:fc:1b:9d:36:03:a8:a8:a9:e7:98:
         55:b4:48:32:9f:7d:bb:e1:4d:de:1e:57:3b:f1:31:0e:f4:8f:
         90:db:c9:f8:db:9e:f8:be:25:84:6d:91:5d:97:74:70:84:4c:
         ae:71:75:97:92:1f:2c:ba:aa:f3:7f:3f:e9:f6:19:ea:5b:96:
         a4:08:c3:18:6d:a8:fb:b4:77:7c:05:d4:69:4b:b9:ad:68:84:
         da:13:9d:cb:8b:9f:cd:3b:94:65:01:e7:df:3e:38:3a:29:b4:
         90:da:3f:df:95:cc:d0:2d:88:b2:49:3c:66:21:c8:bc:1b:29:
         ac:5b:29:27:ca:73:78:f9:87:65:40:b2:ed:f9:3a:1a:fe:8c:
         90:6f:bf:0d:f2:83:7b:91:c4:6e:c7:d9:8a:ae:5f:d9:29:4c:
         ce:47:31:d3:f7:d0:50:36:ac:a9:0e:08:af:5d:64:2a:f8:ed:
         ea:37:7f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org