Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373033313a3a2f34382d3438203d3e20323639313934.roa
File:                     323830343a363064343a373033313a3a2f34382d3438203d3e20323639313934.roa (raw, json)
Hash identifier:          lpdmDQJdtqvYOfw2bkWLw0IofTW9LICKqvrsOPHe0JU=
Subject key identifier:   66:8E:D2:DE:7A:8A:63:B0:EA:8C:68:2C:C2:7C:DF:F2:B2:59:71:1D
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       46A3AF4FC47005D9BA4B0B55F040586D3270BB20
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373033313a3a2f34382d3438203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:10 +0000
ROA not before:           Mon 19 Feb 2024 00:00:10 +0000
ROA not after:            Mon 17 Feb 2025 00:05:10 +0000
asID:                     269194
IP address blocks:        2804:60d4:7031::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a3:af:4f:c4:70:05:d9:ba:4b:0b:55:f0:40:58:6d:32:70:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:10 2024 GMT
            Not After : Feb 17 00:05:10 2025 GMT
        Subject: CN=668ED2DE7A8A63B0EA8C682CC27CDFF2B259711D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:bd:02:54:0a:38:9f:a5:7b:6f:73:2f:0e:
                    3a:93:5b:cd:a9:17:82:63:96:e9:df:41:ea:b2:78:
                    c3:71:b3:fa:55:ec:13:40:1e:60:f1:6f:93:a7:12:
                    94:2b:d5:e4:3d:4d:6d:32:3f:ee:3f:8e:41:b6:6a:
                    62:85:16:b3:73:b3:36:c8:6b:4f:68:f5:4e:34:43:
                    c6:19:95:6a:0b:2e:37:0a:ed:84:a8:e1:c2:5c:f9:
                    23:5e:6c:e2:86:f0:69:61:13:eb:7b:60:ba:b1:94:
                    84:dd:93:19:e6:95:b7:b8:de:03:3a:61:5d:49:04:
                    28:1a:17:b7:7e:43:44:13:5b:e0:98:fb:d7:7f:62:
                    54:19:6e:b7:55:56:47:35:cf:b5:68:80:c2:b3:a1:
                    11:74:f7:e9:f7:2b:32:b0:02:9f:9c:b7:ed:e4:42:
                    88:c9:91:e9:1c:15:44:93:9e:cf:50:94:af:55:6c:
                    9b:22:6d:17:a6:5b:3f:9d:64:43:c3:7c:6a:af:32:
                    e7:c0:bc:2a:ad:65:2f:bf:b2:03:29:f1:c5:f7:11:
                    2b:e5:92:4c:50:f7:9a:41:1f:9d:e8:cc:ed:df:a1:
                    e5:32:2f:9d:ed:35:c4:10:57:ee:bd:18:eb:2f:c1:
                    d2:cd:c4:c6:e5:1d:88:06:1c:00:43:db:74:51:fd:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8E:D2:DE:7A:8A:63:B0:EA:8C:68:2C:C2:7C:DF:F2:B2:59:71:1D
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a373033313a3a2f34382d3438203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:7031::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:b2:13:b8:0d:ef:69:1d:6e:2f:a1:49:b8:e8:e1:68:3b:a5:
         eb:45:03:11:7b:23:32:bc:75:5f:66:88:50:ca:61:60:57:31:
         f5:d1:59:e9:ea:b1:e1:fe:c6:b8:95:80:5e:90:5b:74:31:ac:
         16:70:26:6d:2f:63:7c:ac:df:eb:f2:88:0e:c8:f4:05:56:60:
         11:ce:83:ee:2d:48:75:c1:2a:0d:f9:84:b5:1c:5d:08:51:d6:
         c8:9c:e6:c8:b2:9e:d5:b9:10:20:38:f6:29:a2:ca:90:6f:ec:
         19:62:bb:2d:6e:46:aa:7c:c4:4e:50:af:f4:ca:08:5c:8b:6d:
         1e:0f:0c:d9:76:49:e6:d0:84:3b:55:51:cc:bc:cf:66:a9:cd:
         49:cb:aa:97:1d:d6:87:db:d0:2e:37:5e:76:d5:be:45:10:3f:
         64:92:91:7d:7a:fa:e6:8a:5f:5f:79:39:e7:3f:83:44:28:c4:
         b1:ca:b6:0b:01:bd:71:53:60:8e:c8:55:c6:b8:d3:90:29:1b:
         fd:06:a5:e9:23:ac:37:73:8c:58:a1:a0:9d:c3:cf:9f:87:09:
         22:b4:82:09:22:a1:b9:84:a9:17:22:a8:c2:f8:2f:ee:31:6f:
         86:62:f1:ad:58:8a:e4:dd:b0:b8:3b:30:e9:79:90:66:9d:0b:
         62:dc:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org