Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          OJHdvz+37VsIL97QxcG8LiyqV7aklGZlxnqyK8dK+Jw=
Subject key identifier:   99:0B:CB:F5:8A:92:A7:B3:8F:32:38:28:2B:1A:A4:45:1F:6E:48:82
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       765B428E44B238CE493A106578984ACD814EFAB4
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:12 +0000
ROA not before:           Mon 19 Feb 2024 00:00:12 +0000
ROA not after:            Mon 17 Feb 2025 00:05:12 +0000
asID:                     269194
IP address blocks:        2804:60d4:7022::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5b:42:8e:44:b2:38:ce:49:3a:10:65:78:98:4a:cd:81:4e:fa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:12 2024 GMT
            Not After : Feb 17 00:05:12 2025 GMT
        Subject: CN=990BCBF58A92A7B38F3238282B1AA4451F6E4882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:f1:a6:7b:5c:4d:17:a5:31:76:6e:42:72:
                    01:32:df:9e:7e:43:84:84:db:e6:09:95:2d:e0:2e:
                    30:f6:6a:4e:f8:fa:e6:ad:ab:77:97:40:f2:24:76:
                    a5:ee:b4:a3:1d:82:f9:51:16:f1:41:fd:33:03:49:
                    27:72:72:af:db:f6:bd:5c:9b:c9:7a:5b:72:dc:6d:
                    5b:78:c6:78:44:82:f3:22:d7:b0:01:48:74:cd:2b:
                    60:da:37:9d:6a:42:8d:32:00:55:62:52:94:1d:19:
                    6a:2e:1f:00:e7:66:57:36:0b:10:05:ac:31:89:0c:
                    ce:a6:36:53:b3:ce:e7:9e:4e:7f:c8:cd:11:6c:4e:
                    02:b9:30:8b:d5:e3:7b:73:9b:aa:cf:c6:17:da:d8:
                    d3:aa:ae:0f:2d:ce:80:45:d6:e3:1b:9d:14:8f:9e:
                    67:a5:4d:01:aa:3f:2b:2d:1d:d2:e1:78:1a:98:c2:
                    f2:b2:d3:f1:ef:13:d1:77:be:e0:e8:d3:91:4b:9f:
                    51:3d:9a:da:08:98:16:2b:55:9b:ff:72:34:50:46:
                    9d:42:1c:dd:7c:af:d7:3f:cd:8b:ed:35:1f:0c:56:
                    0d:21:ad:9d:e8:b4:3a:9c:a7:31:d4:11:bf:93:f5:
                    59:2f:35:e2:36:77:4e:18:69:f0:41:af:f2:5e:16:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:CB:F5:8A:92:A7:B3:8F:32:38:28:2B:1A:A4:45:1F:6E:48:82
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032323a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7022::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:17:7c:2a:b4:ef:2c:33:df:5e:a5:ef:44:25:39:3b:80:
         0a:9f:4c:7d:25:31:97:e2:3d:ec:99:94:6c:f0:d9:2e:23:32:
         c0:7b:76:ac:70:2c:a7:50:7f:24:62:d7:f0:59:c2:1c:57:87:
         bd:d3:ce:cb:7f:90:cb:4d:6c:4e:61:71:f7:2b:9a:21:9c:2b:
         3c:c0:93:64:cb:8c:49:a6:25:6e:9c:ad:7d:74:13:54:5a:fd:
         a9:de:b7:ce:6b:2c:48:b3:cc:09:64:d5:64:7a:4d:74:ea:84:
         35:b5:74:b4:92:7d:d2:38:91:0f:81:2d:c9:8e:26:98:ba:aa:
         61:fd:b1:03:6e:e0:c8:ee:59:19:5e:35:4e:7d:7d:e7:47:24:
         d3:36:19:83:d7:f9:2d:29:74:a1:ad:53:02:f2:55:35:18:0e:
         0e:78:63:c5:dc:fd:07:c8:ea:83:26:0a:ee:1a:b5:47:d3:72:
         5a:09:e0:16:1a:5c:26:6c:66:6c:5f:cf:6e:96:b6:11:c6:d2:
         1a:d3:2e:18:12:f7:b5:d8:2c:0a:32:d3:e6:2f:3b:68:8f:77:
         6b:02:4d:92:b6:c8:35:4d:df:95:08:af:a5:0e:aa:3c:12:78:
         c0:80:d2:60:b7:8d:46:0b:2d:c6:70:fa:78:2b:0a:d9:40:8b:
         cf:40:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org