Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          /SrMBhS3SQC7uXLVHOyQFwTgpKbG9DdGvBSJ19Jshv0=
Subject key identifier:   2F:E0:B5:1F:FE:E7:FB:43:82:2C:85:C6:6E:CA:19:75:2D:C3:07:5A
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       4EBFE08759D6361FB44273BFC1657520498CA347
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:11 +0000
ROA not before:           Mon 19 Feb 2024 00:00:11 +0000
ROA not after:            Mon 17 Feb 2025 00:05:11 +0000
asID:                     269194
IP address blocks:        2804:60d4:7023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bf:e0:87:59:d6:36:1f:b4:42:73:bf:c1:65:75:20:49:8c:a3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:11 2024 GMT
            Not After : Feb 17 00:05:11 2025 GMT
        Subject: CN=2FE0B51FFEE7FB43822C85C66ECA19752DC3075A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:07:76:57:99:53:9f:65:06:b5:ec:69:30:d2:
                    b4:a9:29:85:56:d0:96:05:39:de:c0:99:9a:b0:4f:
                    ab:d9:b9:db:b9:4e:5e:91:54:25:e5:7a:0e:84:92:
                    01:62:3c:1e:0c:2a:76:67:af:8c:f4:97:ea:d0:12:
                    5e:5e:93:68:06:c3:ff:74:94:31:af:cd:0d:ac:0e:
                    11:22:b5:82:d8:ce:0b:dc:53:43:5f:12:78:e4:c0:
                    12:12:36:8e:9a:a3:6e:8e:50:1b:ca:b4:51:d5:9b:
                    9e:b9:5e:bb:f6:be:1a:c8:f2:9d:d6:b0:97:8e:bb:
                    ab:32:39:ef:0f:01:2f:66:b6:58:c4:ea:64:e1:f7:
                    38:8b:4e:7b:b5:08:c5:ac:cc:e2:c0:cb:46:26:fd:
                    81:a5:7a:e5:87:01:94:e0:f9:f0:51:8c:11:68:09:
                    b5:d8:62:1c:9f:47:40:c1:00:6b:41:ad:b7:2b:6c:
                    64:e3:c6:fc:47:b6:96:63:dc:f5:15:69:0f:5a:35:
                    d3:b7:46:7f:b5:b7:72:3a:52:24:a0:c7:0c:84:05:
                    ad:93:f3:d3:1e:bb:4e:a4:3c:56:73:a0:fa:5c:be:
                    91:0b:fd:6d:a0:e3:89:03:b1:bd:5c:a5:7f:1b:e3:
                    83:0a:7e:a0:65:86:0e:ac:df:a2:05:5a:a1:f1:e3:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E0:B5:1F:FE:E7:FB:43:82:2C:85:C6:6E:CA:19:75:2D:C3:07:5A
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032333a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7023::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:7e:25:38:f5:0e:f6:a9:8d:61:76:2e:59:08:3b:b7:17:
         67:6d:6f:3c:8d:bd:19:0f:16:4f:08:12:b1:14:a5:64:3a:9d:
         e2:ce:5a:5d:91:04:21:8b:52:86:61:36:02:e3:00:cf:55:89:
         65:1b:97:20:0f:f4:21:91:d3:af:e7:ca:63:5e:eb:8a:2b:76:
         0b:18:ca:e9:b1:09:35:ce:bc:fa:e4:99:76:6f:e4:26:21:f3:
         db:72:b7:bd:13:99:f6:cd:4f:ea:d4:f5:2f:8a:35:ec:3e:2b:
         c1:47:5e:f1:ae:9f:23:60:12:ad:ad:91:7a:6e:3e:80:21:bf:
         7a:6a:84:e0:18:bf:20:c4:89:62:5f:29:2c:8c:93:06:a5:34:
         a9:0b:77:6e:f8:04:7a:26:9c:88:45:a9:3a:5e:c3:78:1a:8c:
         a8:a0:14:94:d7:01:6f:07:20:56:8f:be:e8:42:c0:99:fe:1b:
         83:fa:e0:91:fa:6e:97:dd:f4:fd:31:2d:61:4f:c0:e7:fb:86:
         f6:e4:c9:95:89:17:fd:2f:b8:f1:9a:9a:65:5d:70:5d:75:cb:
         bf:05:6d:0a:4d:79:62:01:3e:07:9c:c6:53:5d:d5:58:42:0d:
         41:d2:a0:e1:60:89:c9:88:bf:6d:61:d6:ef:74:cb:96:ce:7a:
         0b:52:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org