Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          HItB6PtOzgbmMHUYMDiqlm32/KjUFVEHj88oKqeWNrM=
Subject key identifier:   DA:59:18:F1:A5:4F:B3:A4:51:39:DF:03:23:27:26:D2:80:6E:D0:9E
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       543DF98E2CE945522A7484173A325665BE71D3D0
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:08 +0000
ROA not before:           Mon 19 Feb 2024 00:00:08 +0000
ROA not after:            Mon 17 Feb 2025 00:05:08 +0000
asID:                     269194
IP address blocks:        2804:60d4:701f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3d:f9:8e:2c:e9:45:52:2a:74:84:17:3a:32:56:65:be:71:d3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:08 2024 GMT
            Not After : Feb 17 00:05:08 2025 GMT
        Subject: CN=DA5918F1A54FB3A45139DF03232726D2806ED09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:0c:78:3f:9e:ab:2f:93:f5:2e:93:5d:39:
                    55:a9:30:a3:74:d6:dc:4a:01:6d:d5:66:54:8f:96:
                    f9:68:13:60:e5:74:b5:cf:ae:c8:57:e4:c5:1e:7d:
                    27:78:56:4e:38:de:d8:87:3b:23:28:69:09:ba:9c:
                    b7:fe:5f:96:8c:4a:56:86:70:87:08:ef:e4:05:7e:
                    73:63:0b:21:b5:14:5c:c8:b0:45:4f:8a:be:83:76:
                    0e:91:22:88:5d:0b:9e:b5:cb:f3:08:16:a3:06:ad:
                    d3:8e:7d:ce:ac:90:df:6d:0d:90:7c:77:4b:57:94:
                    56:da:17:70:7e:7c:99:d9:55:97:4d:66:c0:13:6f:
                    fc:18:5d:0f:6b:5d:0c:5a:09:a7:f3:99:b4:df:00:
                    7b:27:6a:5f:6f:85:d5:38:d0:8b:15:ac:10:e8:c0:
                    0e:cf:9f:18:ee:c4:d7:f8:71:16:f3:aa:cc:07:52:
                    5c:67:40:67:4e:e3:08:6d:21:93:c2:7a:4c:6e:2a:
                    4b:4e:d0:8b:77:81:4e:cd:55:10:d7:fc:2e:4f:62:
                    f3:1f:45:16:45:e8:61:d6:5d:ef:f8:40:82:6f:a3:
                    1d:11:51:f8:db:c7:c8:6a:5f:97:23:59:ab:6a:46:
                    86:33:48:ca:e9:49:4b:f4:fc:ec:c8:f0:f4:7a:2d:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:59:18:F1:A5:4F:B3:A4:51:39:DF:03:23:27:26:D2:80:6E:D0:9E
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373031663a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:701f::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:8c:9a:78:fc:a0:73:73:b7:d7:20:d4:8c:99:e5:26:87:91:
         3d:8a:8a:58:b3:e4:b7:b0:68:9d:d9:92:46:4a:68:ae:70:4f:
         ff:04:74:a4:68:7e:0a:2a:27:e3:69:a4:02:85:be:4b:8c:42:
         be:e6:5b:db:a4:28:7f:7c:c2:d2:dc:a1:fa:03:68:89:9f:db:
         58:9a:50:ad:ef:cf:14:88:13:4a:8e:7c:fb:8a:ea:f0:fa:19:
         d3:43:4b:12:e3:ba:4b:46:e4:2f:8f:9f:42:32:2d:84:37:fa:
         ad:78:09:97:02:ad:5f:05:e3:47:bb:db:98:0b:c4:09:f4:5c:
         2f:b1:d0:82:3b:79:04:e1:b3:ba:2e:36:a8:71:18:b9:da:7d:
         50:e1:73:46:e7:23:1b:01:68:05:69:ef:89:89:e7:d4:96:fc:
         1f:53:7c:af:82:fc:13:24:fd:93:76:43:ee:93:7d:f2:26:9a:
         1b:80:17:d0:79:65:83:1e:ae:d3:40:0d:9e:dc:d8:5a:54:4f:
         fd:90:6a:af:97:eb:dd:ee:ea:09:bd:9d:56:e1:42:ac:05:dc:
         75:f9:0a:1c:48:9b:dd:98:54:df:7d:7d:77:e8:98:5a:8d:7f:
         8c:8d:8c:4c:af:ad:b8:67:ac:a0:9d:c9:3b:a7:84:92:7e:6c:
         0b:5f:49:f9
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUVD35jizpRVIqdIQXOjJWZb5x09AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yNDAyMTkwMDAwMDhaFw0yNTAyMTcwMDA1MDhaMDMxMTAvBgNV
BAMTKERBNTkxOEYxQTU0RkIzQTQ1MTM5REYwMzIzMjcyNkQyODA2RUQwOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Fgx4P56rL5P1LpNdOVWpMKN0
1txKAW3VZlSPlvloE2DldLXPrshX5MUefSd4Vk443tiHOyMoaQm6nLf+X5aMSlaG
cIcI7+QFfnNjCyG1FFzIsEVPir6Ddg6RIohdC561y/MIFqMGrdOOfc6skN9tDZB8
d0tXlFbaF3B+fJnZVZdNZsATb/wYXQ9rXQxaCafzmbTfAHsnal9vhdU40IsVrBDo
wA7PnxjuxNf4cRbzqswHUlxnQGdO4whtIZPCekxuKktO0It3gU7NVRDX/C5PYvMf
RRZF6GHWXe/4QIJvox0RUfjbx8hqX5cjWatqRoYzSMrpSUv0/OzI8PR6LZ6HAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU2lkY8aVPs6RROd8DIycm0oBu0J4wHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzNzMwMzE2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEYNRwHzANBgkqhkiG9w0BAQsF
AAOCAQEAJoyaePygc3O31yDUjJnlJoeRPYqKWLPkt7BondmSRkpornBP/wR0pGh+
Cion42mkAoW+S4xCvuZb26Qof3zC0tyh+gNoiZ/bWJpQre/PFIgTSo58+4rq8PoZ
00NLEuO6S0bkL4+fQjIthDf6rXgJlwKtXwXjR7vbmAvECfRcL7HQgjt5BOGzui42
qHEYudp9UOFzRucjGwFoBWnviYnn1Jb8H1N8r4L8EyT9k3ZD7pN98iaaG4AX0Hll
gx6u00ANntzYWlRP/ZBqr5fr3e7qCb2dVuFCrAXcdfkKHEib3ZhU3319d+iYWo1/
jI2MTK+tuGesoJ3JO6eEkn5sC19J+Q==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:36 2025 by rpki-client