Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032653a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373032653a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          1vX1d94FnLvqfUNVuDhY7PtsQbERKW224T3yDNlUExw=
Subject key identifier:   65:39:71:B2:6B:52:80:AE:FC:CC:D1:AA:59:C5:8F:96:2E:F0:6D:8E
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       1B4E9FEDFE8C87DB07FC63B0B8D55620D4D33F0C
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032653a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:09 +0000
ROA not before:           Mon 19 Feb 2024 00:00:09 +0000
ROA not after:            Mon 17 Feb 2025 00:05:09 +0000
asID:                     269194
IP address blocks:        2804:60d4:702e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4e:9f:ed:fe:8c:87:db:07:fc:63:b0:b8:d5:56:20:d4:d3:3f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:09 2024 GMT
            Not After : Feb 17 00:05:09 2025 GMT
        Subject: CN=653971B26B5280AEFCCCD1AA59C58F962EF06D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:42:a0:48:02:88:d0:df:ef:22:ef:41:b4:
                    f1:8a:cb:41:68:6a:18:1e:8f:f8:47:ea:14:4d:35:
                    23:e0:74:88:35:ac:30:d5:3a:e1:80:ff:65:fd:4d:
                    a2:32:84:45:b5:54:eb:72:0f:cb:31:3d:67:08:7c:
                    52:76:0a:3a:9e:4a:e8:cf:e3:9e:6c:44:21:05:53:
                    45:22:a0:a8:40:fb:50:72:1f:50:63:56:70:e8:fd:
                    bc:97:fb:61:56:2e:69:c7:be:8b:b2:25:bf:fa:84:
                    7b:db:f7:c8:31:5a:30:f7:45:a5:73:3d:d3:4d:d2:
                    19:d8:29:bc:cd:91:a7:50:02:a6:58:f3:2e:1d:e7:
                    66:ca:1c:18:3c:43:f4:43:5a:3e:bc:27:62:9c:58:
                    b4:c2:2f:f2:79:c1:85:71:a6:43:01:d1:13:9a:3e:
                    91:b0:64:2b:65:b4:58:73:93:78:fb:87:25:49:88:
                    13:fc:95:13:b8:ee:99:6a:c7:81:16:97:ff:97:f2:
                    9f:ab:64:88:a6:7f:ac:06:fc:d4:cc:d1:6b:7f:39:
                    e7:b2:e6:67:d9:cc:0f:4c:69:81:e8:36:7d:45:ac:
                    1b:a3:94:bb:23:66:db:f0:16:20:bd:c1:68:1e:e1:
                    4b:59:4f:b7:d7:fd:d6:8c:94:96:ca:8b:37:d9:f5:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:39:71:B2:6B:52:80:AE:FC:CC:D1:AA:59:C5:8F:96:2E:F0:6D:8E
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373032653a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:702e::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:aa:4e:cb:6d:47:8e:7d:85:a1:dd:73:69:19:99:31:8a:
         e3:3a:a0:8e:b1:67:ae:fa:a9:56:14:6a:f1:1e:1b:0f:90:73:
         7b:a6:a2:f9:f2:28:b3:5b:1a:4f:69:a4:72:ac:7a:c0:63:14:
         af:59:55:77:bd:f2:b7:b9:19:30:2b:69:bd:2f:1d:16:17:78:
         aa:f7:d0:c8:87:a5:1b:a3:cf:cd:1a:2e:99:16:c4:ad:ec:5d:
         2f:a3:fc:2a:44:4d:d1:d0:66:82:51:07:25:c6:da:ca:1e:30:
         70:3d:fc:2f:85:d6:7c:4f:09:7d:2f:e5:d1:09:cb:a7:d2:3a:
         c1:14:cc:18:c7:08:e8:03:57:08:5b:8d:c5:eb:68:9a:00:f8:
         53:7c:9b:74:de:a6:39:95:95:17:b2:a2:8b:6e:87:b0:7d:05:
         90:c9:f3:9e:1b:6d:b3:f9:ec:20:1f:f0:f8:07:1e:8b:8e:a4:
         b8:67:88:24:c0:44:69:07:ca:06:51:98:c6:12:97:04:4e:51:
         1a:37:5a:97:e5:f1:82:4d:9b:52:8e:03:64:27:4a:e3:f6:f4:
         e8:ae:73:aa:b6:2c:fd:13:2b:9f:5d:56:08:f5:81:73:1d:64:
         5f:f3:27:e7:8a:a7:2b:a5:2c:8c:ea:4f:c7:04:fe:e7:a9:85:
         e3:36:80:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org