Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          l4mHsDUnAA1bAB9/qjfDmAS7Xom0/HQdYzLHCGXbKXQ=
Subject key identifier:   D5:5B:B4:44:00:D3:0B:2C:AA:A2:21:0E:65:34:FA:01:B1:DA:86:CF
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       566B52A1552AC8C563D4454D006FA2A0AFA6EA1D
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:10 +0000
ROA not before:           Mon 19 Feb 2024 00:00:10 +0000
ROA not after:            Mon 17 Feb 2025 00:05:10 +0000
asID:                     269194
IP address blocks:        2804:60d4:8020::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6b:52:a1:55:2a:c8:c5:63:d4:45:4d:00:6f:a2:a0:af:a6:ea:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:10 2024 GMT
            Not After : Feb 17 00:05:10 2025 GMT
        Subject: CN=D55BB44400D30B2CAAA2210E6534FA01B1DA86CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:ae:6d:61:4a:f5:cc:94:f8:8c:96:e4:63:
                    50:22:1a:54:65:79:6a:af:bb:27:23:e8:b0:36:d2:
                    84:66:bb:e4:94:f2:68:46:c9:77:7d:f1:a3:d4:e1:
                    03:d6:3f:f7:2b:c3:e6:36:af:10:28:e0:62:99:f4:
                    98:61:93:c3:2f:14:80:64:4b:1e:14:fb:ca:23:9d:
                    92:42:65:41:80:91:c5:2b:a5:93:5a:d5:e8:1c:15:
                    71:66:83:54:eb:76:01:59:d5:2a:3b:e3:0d:a1:8e:
                    1e:3f:bf:ab:a6:4c:a5:35:99:9a:d2:ff:17:66:42:
                    e9:3d:7e:0d:ae:a9:b3:d8:a7:06:c5:08:0f:87:31:
                    f6:21:0f:1b:a0:62:aa:f2:bd:99:22:bc:14:8a:f6:
                    e5:69:b4:3c:0f:b7:90:23:b1:a0:e8:38:97:a4:8e:
                    0b:16:2e:c8:c7:b1:b4:e1:f9:c6:a0:37:92:fb:48:
                    85:58:a1:b5:73:ec:f2:4b:26:1e:98:6b:e6:6c:1b:
                    5c:48:1d:ec:28:88:cf:da:17:50:d9:41:9e:86:09:
                    aa:01:b9:4b:43:59:04:76:03:3e:88:b6:7f:c0:28:
                    de:f3:57:db:97:e7:82:f0:2f:21:f2:f5:e1:94:6c:
                    94:e2:9d:90:48:b2:f7:a9:57:04:d6:81:31:f5:b0:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5B:B4:44:00:D3:0B:2C:AA:A2:21:0E:65:34:FA:01:B1:DA:86:CF
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383032303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:8020::/43

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:6f:36:be:cc:26:05:11:22:b1:46:a1:29:e2:05:9e:08:
         21:63:d8:ac:9d:31:9a:1b:c3:26:0a:d6:81:0f:ad:12:10:d9:
         e2:ed:5d:f3:92:be:f6:ca:e0:3d:ab:89:f0:00:8e:b1:34:b1:
         7d:dd:2e:8a:d5:c4:f5:7b:54:03:fc:fd:8b:0f:36:57:61:12:
         49:28:7b:57:bd:f4:78:7d:d5:72:ae:e5:b3:1d:bf:e3:34:b0:
         a0:da:60:68:7e:78:2f:f8:1c:ae:6e:1a:75:b0:1c:8b:fb:f0:
         ba:92:d0:af:fd:24:69:90:41:19:60:09:8e:b1:e2:58:f8:f3:
         dd:a6:c5:2b:3f:f8:72:81:08:e9:c4:77:78:5d:d4:9a:8e:7e:
         2d:b4:a3:81:3f:e3:d6:03:b2:0e:7b:43:a0:c6:1c:b8:8a:72:
         11:0d:12:31:23:44:4d:d9:4d:1f:c7:e6:f9:87:4a:79:a5:03:
         2f:99:e7:42:67:48:b4:e7:e4:22:10:6f:6e:64:d3:bc:ca:f6:
         31:a0:48:1d:0e:fa:9e:f4:c7:16:a9:84:86:0f:77:2e:fd:3d:
         93:bf:92:42:e6:e9:45:79:f3:2b:fb:b9:a9:45:68:a0:42:19:
         65:64:19:aa:68:c3:a3:5e:9f:9b:a3:b0:49:1c:bf:a3:d9:04:
         9c:32:f9:92
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUVmtSoVUqyMVj1EVNAG+ioK+m6h0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhGOTlGMkNCQUI4QkUyRUY0OEQ1ODY1NjAwNzIwMjA3
NjRDMTFGMzAeFw0yNDAyMTkwMDAwMTBaFw0yNTAyMTcwMDA1MTBaMDMxMTAvBgNV
BAMTKEQ1NUJCNDQ0MDBEMzBCMkNBQUEyMjEwRTY1MzRGQTAxQjFEQTg2Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPq5tYUr1zJT4jJbkY1AiGlRl
eWqvuycj6LA20oRmu+SU8mhGyXd98aPU4QPWP/crw+Y2rxAo4GKZ9Jhhk8MvFIBk
Sx4U+8ojnZJCZUGAkcUrpZNa1egcFXFmg1TrdgFZ1So74w2hjh4/v6umTKU1mZrS
/xdmQuk9fg2uqbPYpwbFCA+HMfYhDxugYqryvZkivBSK9uVptDwPt5AjsaDoOJek
jgsWLsjHsbTh+cagN5L7SIVYobVz7PJLJh6Ya+ZsG1xIHewoiM/aF1DZQZ6GCaoB
uUtDWQR2Az6Itn/AKN7zV9uX54LwLyHy9eGUbJTinZBIsvepVwTWgTH1sK7rAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQU1Vu0RADTCyyqoiEOZTT6AbHahs8wHwYDVR0j
BBgwFoAUuPmfLLq4vi70jVhlYAcgIHZMEfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDVyeFZlREFCcHo3eG5YaFJjb1pibTNTR1Y1QzFwSjJodFp5dDZBU1Zl
TDQvMC9COEY5OUYyQ0JBQjhCRTJFRjQ4RDU4NjU2MDA3MjAyMDc2NEMxMUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4Rjk5RjJDQkFCOEJFMkVG
NDhENTg2NTYwMDcyMDIwNzY0QzExRjMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g1cnhWZURBQnB6N3huWGhSY29aYm0zU0dWNUMxcEoyaHRaeXQ2QVNWZUw0LzAv
MzIzODMwMzQzYTM2MzA2NDM0M2EzODMwMzIzMDNhM2EyZjM0MzMyZDM0MzMyMDNk
M2UyMDMyMzYzOTMxMzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBSgEYNSAIDANBgkqhkiG9w0BAQsF
AAOCAQEALwNvNr7MJgURIrFGoSniBZ4IIWPYrJ0xmhvDJgrWgQ+tEhDZ4u1d85K+
9srgPauJ8ACOsTSxfd0uitXE9XtUA/z9iw82V2ESSSh7V730eH3Vcq7lsx2/4zSw
oNpgaH54L/gcrm4adbAci/vwupLQr/0kaZBBGWAJjrHiWPjz3abFKz/4coEI6cR3
eF3Umo5+LbSjgT/j1gOyDntDoMYcuIpyEQ0SMSNETdlNH8fm+YdKeaUDL5nnQmdI
tOfkIhBvbmTTvMr2MaBIHQ76nvTHFqmEhg93Lv09k7+SQubpRXnzK/u5qUVooEIZ
ZWQZqmjDo16fm6OwSRy/o9kEnDL5kg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org