Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032623a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032623a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          DgsY5a6jJKUz0G9twrSbxKumep+3NaygTfzgvGGRMRU=
Subject key identifier:   CF:58:A5:B4:53:1E:64:18:C8:74:2F:4F:1C:64:93:BB:4D:3A:CB:CD
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       3402CEEC05AD1E1FAF6F5C377D4A2E557482B874
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032623a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:11 +0000
ROA not before:           Mon 19 Feb 2024 00:00:11 +0000
ROA not after:            Mon 17 Feb 2025 00:05:11 +0000
asID:                     269194
IP address blocks:        2804:60d4:702b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:02:ce:ec:05:ad:1e:1f:af:6f:5c:37:7d:4a:2e:55:74:82:b8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:11 2024 GMT
            Not After : Feb 17 00:05:11 2025 GMT
        Subject: CN=CF58A5B4531E6418C8742F4F1C6493BB4D3ACBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:b5:38:6f:40:9c:8c:dc:95:60:35:b3:9e:
                    ca:a3:45:ec:a9:ea:b8:d3:78:d9:bc:4a:71:0f:73:
                    3d:c1:6e:11:b8:53:dc:de:e1:00:ae:51:56:89:06:
                    bf:ce:ee:11:97:4c:17:a6:04:8e:45:8f:dd:a0:33:
                    c8:2c:11:88:ff:fa:ac:15:fc:27:1d:16:d8:95:8f:
                    79:06:c9:07:e3:09:40:c9:90:fe:d6:82:ee:84:9a:
                    92:57:95:45:83:00:0c:ff:5d:3e:56:05:ed:b7:59:
                    35:de:90:74:06:62:cd:20:3a:f4:2e:e8:d4:7b:34:
                    e8:bf:48:7d:02:f4:9a:16:ed:f6:5b:85:24:b5:ba:
                    df:22:8f:ff:37:0f:17:83:fa:a5:6f:81:96:5c:c3:
                    f0:84:3d:7a:24:03:ba:5b:02:91:2f:63:79:86:1e:
                    66:12:8f:87:e9:03:2e:5d:45:c4:ad:e4:ea:da:9c:
                    d3:32:60:64:72:bf:b2:82:5b:49:1d:14:e2:a9:60:
                    f1:7c:53:c5:40:50:cb:71:1b:aa:a1:d4:1f:0a:a0:
                    8d:fc:1a:b0:96:32:fd:ac:2d:46:c5:bf:ae:88:b8:
                    31:b7:38:4b:ab:cf:18:86:d3:70:73:98:77:48:a7:
                    3b:a2:8d:d3:2e:45:d6:f3:83:5a:72:41:7a:af:a1:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:58:A5:B4:53:1E:64:18:C8:74:2F:4F:1C:64:93:BB:4D:3A:CB:CD
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032623a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:702b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:58:8c:e1:1c:27:a3:da:11:90:06:8e:3a:31:b3:4c:7e:b8:
         81:c0:9b:d2:2e:7d:3b:92:e0:3f:68:27:d2:55:18:c2:20:6b:
         45:e8:62:cf:c0:e9:4f:34:d6:1c:df:2e:4f:bb:27:af:0f:6f:
         40:dd:e8:8f:15:94:22:bf:fc:95:d2:ff:5d:fc:1e:32:4c:d0:
         54:e3:04:50:12:f0:b4:05:e7:56:95:86:02:d3:f6:f3:be:3d:
         66:08:be:d2:cb:aa:b4:80:bf:82:56:6f:c1:64:84:1b:a8:d4:
         49:5e:eb:70:9a:51:4f:f4:7f:c8:c8:e4:00:10:ef:f8:b9:9b:
         d8:19:30:d8:45:65:8d:c0:d7:42:6d:7d:41:b9:84:ea:26:0c:
         eb:35:60:f8:03:04:29:e0:e1:ee:46:e9:26:38:44:f5:6a:cf:
         ab:ec:9b:ac:e5:2f:bf:ae:59:c6:df:44:b3:3f:2c:c5:66:f1:
         96:6b:cb:8e:fe:e6:a7:87:77:fa:55:fd:0e:3d:26:a1:7b:10:
         c8:78:f0:73:e3:59:e7:35:7a:6c:e3:da:21:37:97:74:6d:ba:
         d9:24:66:c9:58:ce:3d:c4:33:fd:de:c6:f0:60:6d:57:59:1e:
         86:0f:66:5d:cd:b4:8d:4b:a4:ab:27:ce:7c:81:6d:d4:45:ab:
         89:50:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:02 2025 by rpki-client