Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031653a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031653a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          NowMRrBfLmFavczhPxY+SbtYdcUz0c2X89HSEdoo9ZU=
Subject key identifier:   C8:2B:E5:56:4A:80:71:4F:4F:49:FF:A0:6C:D5:21:9F:7D:D1:6F:75
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       42968A81807C63A72EE45243336BA5E519D52D5C
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031653a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Sat 29 Jul 2023 16:26:41 +0000
ROA not before:           Sat 29 Jul 2023 16:21:41 +0000
ROA not after:            Sat 27 Jul 2024 16:26:41 +0000
asID:                     269194
IP address blocks:        2804:60d4:701e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:96:8a:81:80:7c:63:a7:2e:e4:52:43:33:6b:a5:e5:19:d5:2d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Jul 29 16:21:41 2023 GMT
            Not After : Jul 27 16:26:41 2024 GMT
        Subject: CN=C82BE5564A80714F4F49FFA06CD5219F7DD16F75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:91:e0:b5:f9:58:05:1a:88:af:67:43:f1:
                    cd:1e:03:05:ae:57:ce:57:15:3a:09:40:6e:cf:bc:
                    16:82:30:c8:cf:03:a4:ee:07:83:63:00:70:27:f9:
                    c4:1a:18:f8:ad:58:00:4d:f9:85:b8:91:a0:66:dc:
                    50:11:a2:2a:d8:25:51:36:24:dd:49:5e:f7:97:a7:
                    80:ea:af:39:00:65:b0:72:1d:4f:1a:62:d1:ae:69:
                    a9:27:73:99:51:ee:75:9e:d7:97:93:18:3c:2a:a5:
                    59:f5:23:19:db:05:73:da:8d:2f:b8:9f:2b:a5:71:
                    98:f6:0c:82:32:ce:61:4e:0a:79:89:25:c8:11:ee:
                    0f:5c:88:08:a9:26:a9:1f:eb:01:08:af:1a:1c:56:
                    d1:86:d0:07:20:99:ea:1e:76:96:91:2c:6f:ac:c5:
                    0e:be:e6:7c:44:b2:41:22:99:c5:ac:76:5d:3c:be:
                    0d:b2:8d:da:f4:c4:bc:c8:44:c4:95:ce:13:79:6c:
                    55:93:42:05:d6:1c:74:59:f4:3b:44:e9:33:cf:b3:
                    8c:cb:05:d7:3a:05:a5:15:51:e6:e6:fe:f7:e8:b0:
                    5a:8f:27:47:3f:88:fd:5e:49:9a:59:03:5c:3d:9a:
                    ed:db:d0:cd:fe:6c:6d:f5:72:4c:ba:5b:1a:38:93:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2B:E5:56:4A:80:71:4F:4F:49:FF:A0:6C:D5:21:9F:7D:D1:6F:75
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031653a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:701e::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:b2:b9:ba:ca:7c:89:e6:fe:65:b0:c8:91:bd:ee:0d:67:
         ac:5c:9c:3a:f6:39:c0:8c:2f:94:48:19:b0:38:7d:ef:39:66:
         bc:2a:ee:bf:33:d6:6f:4e:c2:76:40:23:8b:e4:2e:df:43:29:
         89:54:fe:37:ee:e0:1c:8a:4c:12:e9:aa:ba:04:28:02:81:a2:
         c1:8a:c8:91:be:90:c9:9f:3e:02:eb:52:76:24:a4:27:94:95:
         13:9b:0f:17:01:bd:6b:5e:f8:38:f0:19:0d:f2:88:be:65:19:
         6f:86:21:d7:69:4d:73:7e:0b:f7:e2:fb:f6:0b:24:ae:9d:00:
         51:8d:b2:3c:ed:a3:ca:40:b0:73:ef:e7:fc:67:a7:fc:4f:f9:
         f1:ca:96:95:12:64:6b:8c:2a:3f:fa:aa:90:b2:3d:5c:43:cb:
         e5:d3:bb:eb:72:ce:3b:b1:12:52:06:ae:bb:a2:e0:d0:f9:ad:
         fc:de:fe:31:b0:d3:9a:56:87:90:ae:8d:05:69:df:d1:c3:7e:
         98:a9:b7:6a:6b:0b:2d:a2:e6:34:c1:3f:3d:d5:83:ee:5c:93:
         d1:80:51:8b:cb:68:39:99:d0:e6:fd:8b:c4:21:0c:c4:9d:fb:
         91:4f:4e:de:f0:91:64:96:75:6f:49:c2:7b:cb:dd:a3:b2:7f:
         c8:e7:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:33 2025 by rpki-client