Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032343a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032343a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          RD4I8D8tPieZvHsq0mlUZnMfAXR0yvboVKH8eomRxmo=
Subject key identifier:   DA:8C:23:C6:55:8A:F4:36:20:39:05:47:B2:12:79:58:24:17:88:67
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2D1FAB9A9B4A0A3E627A50952D99C41BDC4AD557
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032343a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:12 +0000
ROA not before:           Mon 19 Feb 2024 00:00:12 +0000
ROA not after:            Mon 17 Feb 2025 00:05:12 +0000
asID:                     269194
IP address blocks:        2804:60d4:7024::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1f:ab:9a:9b:4a:0a:3e:62:7a:50:95:2d:99:c4:1b:dc:4a:d5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:12 2024 GMT
            Not After : Feb 17 00:05:12 2025 GMT
        Subject: CN=DA8C23C6558AF43620390547B212795824178867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:06:40:5c:70:37:01:53:40:f8:37:84:a0:
                    33:54:cc:3c:f7:9b:f8:52:aa:37:37:d2:af:d5:27:
                    ba:37:51:46:4c:d7:78:18:b3:7a:3e:8d:7d:90:4d:
                    2f:ed:33:a7:e0:6c:00:5b:37:ac:96:c1:8a:04:ca:
                    5d:2b:5f:17:75:72:c8:95:db:eb:ec:c2:82:c6:b7:
                    20:f3:84:42:7d:e1:f6:31:26:6d:23:19:ad:07:90:
                    6e:9b:d5:02:db:91:bb:12:f5:74:3b:1a:7f:03:a5:
                    29:06:b5:45:f8:3c:c4:d0:41:ed:3a:e3:b1:ee:ec:
                    5d:eb:9f:27:59:1e:aa:d6:6a:46:63:54:4c:7e:81:
                    e4:56:8d:4b:ae:4e:a7:2e:dc:19:5e:94:6f:91:33:
                    9c:50:24:7d:93:d0:3f:ad:15:20:30:d7:f3:35:40:
                    12:3e:72:7b:0a:d8:7b:20:1f:b7:a5:70:26:ea:72:
                    00:47:26:75:b2:31:9f:e5:b0:44:ac:bf:c9:e2:de:
                    e7:c5:2f:22:dd:a8:c3:c7:b3:b3:49:27:d7:47:a0:
                    8e:bf:40:5d:da:5b:bf:0d:2a:b0:5c:15:4a:11:1f:
                    65:35:f9:44:73:f7:28:68:20:6a:22:b7:af:fe:01:
                    25:f2:ea:1b:d8:9b:bd:7d:c6:de:b1:db:06:69:f5:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:23:C6:55:8A:F4:36:20:39:05:47:B2:12:79:58:24:17:88:67
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032343a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7024::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:32:19:c3:bb:f2:fd:9a:11:51:a2:a5:8b:0b:2b:6d:ae:87:
         2a:62:c8:59:ed:bf:cb:ad:cc:b9:cb:bb:9b:fe:af:e1:a0:92:
         ee:09:b2:ac:3e:98:05:91:27:c4:b4:b9:26:70:d3:3b:75:e3:
         d6:fe:45:b8:96:62:17:3b:4f:51:b4:d9:ee:a0:c5:c8:0d:1f:
         fa:5d:3e:4d:dd:93:62:5e:84:0c:7b:96:3d:81:42:4b:4c:58:
         af:0f:f6:7b:3d:db:1f:9e:a2:51:c0:3b:20:96:0b:a3:2d:f6:
         d8:73:8e:2e:84:63:e7:22:01:19:d3:25:d2:ea:1b:11:34:1b:
         36:01:d4:7e:7a:cd:1d:85:6f:91:15:37:2c:28:4d:cb:4a:67:
         76:88:fa:84:14:cf:e5:91:22:5b:7c:16:ff:86:ca:1e:52:25:
         7a:11:92:09:88:cd:d4:7a:62:ec:a8:1b:df:ed:4e:6d:26:c6:
         80:b9:e1:01:d3:d9:4d:8e:df:16:fb:cb:86:9c:2c:67:3e:fc:
         eb:70:3f:6a:2e:d4:1a:6e:b0:03:37:67:78:43:2b:48:60:3a:
         4c:4a:67:ac:67:84:10:f0:1f:71:02:41:22:2e:0b:7d:ec:27:
         32:2c:31:3a:a7:b2:f6:11:29:27:af:f9:76:15:b7:f2:18:b9:
         08:2c:74:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:20 2025 by rpki-client