Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032393a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032393a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          psn5DtCEHTv5b8p+wjK+etJmQLQZ2KfTJoT8WDbUDUk=
Subject key identifier:   80:E9:E0:3F:A3:A9:E5:02:CD:4B:F3:D4:7B:3D:92:65:C6:E6:74:7C
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       2C2884280EBF948B07A88306DD46108B885BEDDC
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032393a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:10 +0000
ROA not before:           Mon 19 Feb 2024 00:00:10 +0000
ROA not after:            Mon 17 Feb 2025 00:05:10 +0000
asID:                     269194
IP address blocks:        2804:60d4:7029::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:28:84:28:0e:bf:94:8b:07:a8:83:06:dd:46:10:8b:88:5b:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:10 2024 GMT
            Not After : Feb 17 00:05:10 2025 GMT
        Subject: CN=80E9E03FA3A9E502CD4BF3D47B3D9265C6E6747C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:66:6a:ae:c3:47:4a:dd:d0:48:7d:81:d3:
                    65:26:67:4a:6a:d1:72:d1:69:da:2f:79:4d:4b:6a:
                    92:b6:ac:7d:4a:b4:56:0c:31:f4:48:ed:a1:9d:fb:
                    42:60:c6:66:c0:88:e8:24:d2:35:4f:3b:10:1b:07:
                    b9:4f:4d:68:65:b9:a4:ae:b5:0e:19:aa:03:86:ff:
                    db:7e:76:62:1c:d0:70:c5:11:6c:f8:29:25:65:fb:
                    d4:43:c5:36:17:02:df:74:ff:48:71:9d:b4:92:c1:
                    17:9e:01:0f:4f:c8:d1:ff:01:b9:6d:1e:d7:a7:38:
                    31:c6:6a:0a:1a:06:fe:3c:1f:ee:72:a4:41:81:cb:
                    94:3a:05:54:3f:b7:0a:57:9d:91:81:16:ab:bc:7a:
                    d5:ed:b2:2f:46:94:65:bd:6d:3d:2d:83:cf:32:54:
                    2a:75:fe:9f:13:9e:68:92:da:b4:f4:ed:35:34:9f:
                    ec:b0:33:fc:3e:e5:87:9d:52:ed:87:80:ff:40:9d:
                    63:4b:8c:84:00:f6:a2:24:35:31:75:9c:72:c2:7e:
                    db:48:6d:88:1e:7e:97:64:4c:f8:e2:6c:af:63:93:
                    8a:d4:c0:35:41:2a:70:39:08:a4:c1:9b:75:74:88:
                    6f:4b:3e:aa:95:18:42:8d:db:37:99:52:61:a2:66:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:E0:3F:A3:A9:E5:02:CD:4B:F3:D4:7B:3D:92:65:C6:E6:74:7C
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032393a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7029::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:b3:7f:99:86:30:76:05:3c:48:eb:46:9c:cd:7b:35:ce:
         8e:bf:ba:26:f8:1d:cf:dd:e2:5b:05:42:20:e4:8d:0f:86:17:
         1f:04:79:5e:3b:3a:e2:9e:45:bd:fa:9a:55:54:27:80:79:e8:
         33:99:b1:52:8f:d1:e0:e2:56:3a:62:3e:e8:4d:95:6e:d0:45:
         9f:88:b4:cd:07:1b:a3:59:73:0a:22:ab:5d:67:34:6e:b8:da:
         62:70:0d:dc:4f:59:45:d4:24:b4:c8:88:b4:82:03:49:cf:77:
         33:2f:4e:7f:c9:00:68:f3:5c:4d:ac:e5:83:c7:00:d0:a0:06:
         5b:b1:1f:ee:7d:e5:cb:02:83:8b:85:ae:86:52:e8:7b:b4:f1:
         c1:32:e8:5d:5a:6b:22:3f:05:8e:88:0a:7d:21:62:4f:5f:63:
         d8:2d:62:57:4d:01:f7:11:a4:5f:4b:40:2f:8a:49:97:d1:a6:
         7a:d1:67:c3:b8:21:ca:6b:8e:b5:b8:87:7f:ec:97:af:0c:71:
         52:92:4d:de:8a:db:69:ab:ff:25:79:a5:ac:8e:11:8d:3a:4e:
         cf:33:43:a7:8a:53:7d:39:61:c4:2d:8d:ec:63:60:f8:1f:60:
         ba:42:48:f7:e1:a4:6f:c0:6e:ca:05:bf:5d:6f:95:08:53:23:
         d3:1c:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org