Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032313a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032313a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          hZPPvX9ZD1K5x+nPBB+b1C25JAwKCBbCpq+vXUARe9M=
Subject key identifier:   CA:EB:CD:7B:93:D2:54:F4:18:FB:47:88:79:16:49:42:4B:32:F1:7A
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2F7D8F426D24474EE8881FFF1D4C9EEBFDFD1061
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032313a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:09 +0000
ROA not before:           Mon 19 Feb 2024 00:00:09 +0000
ROA not after:            Mon 17 Feb 2025 00:05:09 +0000
asID:                     269194
IP address blocks:        2804:60d4:7021::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:7d:8f:42:6d:24:47:4e:e8:88:1f:ff:1d:4c:9e:eb:fd:fd:10:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:09 2024 GMT
            Not After : Feb 17 00:05:09 2025 GMT
        Subject: CN=CAEBCD7B93D254F418FB4788791649424B32F17A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:0b:cd:14:51:f3:f8:5a:20:eb:40:04:b4:
                    b6:75:f8:d3:33:91:37:ac:a5:6b:7a:49:26:ec:b1:
                    cb:0f:de:1f:cb:14:6b:33:ed:b4:be:da:80:54:d0:
                    42:14:52:05:07:55:3a:8a:04:cf:b5:bd:a3:9f:b0:
                    a2:28:6e:3c:14:18:a6:89:9e:06:bb:f5:da:2d:76:
                    d8:1e:da:71:1f:55:08:ae:d7:1e:18:9c:35:10:50:
                    04:2e:74:16:3a:68:b6:16:98:f2:45:0f:f2:42:42:
                    d0:dd:4c:1f:d1:dd:51:44:2a:89:ac:d2:e5:f4:78:
                    01:80:de:b8:9e:ee:c3:bd:52:cb:e8:15:a2:ef:94:
                    6c:dc:bc:f5:23:c4:ea:86:f4:99:ee:c6:10:b1:4b:
                    e8:7c:c6:10:96:8e:96:29:95:13:a6:f9:2e:4d:d5:
                    b5:a4:2c:f0:57:60:1b:a9:ba:1e:e5:f2:5a:29:ed:
                    a6:b9:2b:40:a9:f4:ec:0f:82:71:fa:4f:9d:e0:80:
                    7a:74:31:51:45:d3:46:0d:92:03:64:38:8d:11:37:
                    bb:20:8a:ab:18:23:5b:04:f4:b4:79:42:39:2c:6a:
                    a5:4c:d1:82:0c:40:80:09:3c:7f:86:e8:cb:e8:84:
                    51:fc:d4:08:c7:fd:a6:b2:16:55:47:ca:88:d3:01:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:CD:7B:93:D2:54:F4:18:FB:47:88:79:16:49:42:4B:32:F1:7A
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032313a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7021::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:c2:f4:8f:53:fb:fa:b9:e9:f9:e0:db:0e:df:d9:ea:15:d4:
         3c:b7:35:c6:7f:92:12:67:67:e8:f0:aa:7b:82:e4:a9:dc:63:
         12:07:f0:70:1c:75:d3:9b:c5:43:26:7c:f1:1d:e6:b9:af:a5:
         e7:15:f0:36:2c:ae:4c:9a:42:f0:a4:54:f3:2f:06:5d:fb:45:
         88:55:03:e6:d7:e4:e7:54:9e:45:d2:51:91:a5:a0:f1:52:0a:
         55:bc:68:8a:c5:d3:9a:78:38:fd:29:4d:12:7d:0a:0c:69:bf:
         02:71:bb:82:58:47:92:e8:25:81:8b:97:72:13:77:00:ac:4e:
         be:96:9b:fb:4d:6e:50:f3:d2:9a:aa:48:d7:12:94:fd:c6:9b:
         10:9d:4d:77:3c:64:a4:81:b2:15:c6:20:17:c8:39:65:e8:1b:
         57:f2:4f:da:d7:ac:4f:b6:b9:fb:9e:f3:a2:3f:09:47:8d:0f:
         26:b9:1e:51:3c:e8:0c:ae:77:0d:5c:74:f7:7b:77:32:81:31:
         e7:7c:60:7b:f5:15:26:7b:6c:58:53:87:f5:b8:45:58:ec:0a:
         cb:64:08:d9:3f:55:48:2f:71:c2:19:2b:0a:d8:31:0d:42:42:
         ff:35:9d:64:36:38:52:c6:e3:00:4e:36:7b:7e:f6:14:40:c0:
         03:5a:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org