Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383034303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a383034303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          dQyFm4T7fq+ovbk/2Q7TyPVWKn9QuSuFNA5AVgdbvIw=
Subject key identifier:   EA:1B:06:2A:F1:50:25:4D:BC:DC:12:5A:9A:4A:42:DF:B1:48:94:0D
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       45702182095AF7E99B098128352A42A8AA8799F9
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383034303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:08 +0000
ROA not before:           Mon 19 Feb 2024 00:00:08 +0000
ROA not after:            Mon 17 Feb 2025 00:05:08 +0000
asID:                     269194
IP address blocks:        2804:60d4:8040::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:70:21:82:09:5a:f7:e9:9b:09:81:28:35:2a:42:a8:aa:87:99:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:08 2024 GMT
            Not After : Feb 17 00:05:08 2025 GMT
        Subject: CN=EA1B062AF150254DBCDC125A9A4A42DFB148940D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:47:66:20:8a:b2:11:2a:22:bd:42:62:25:
                    59:15:4f:79:41:54:e1:8c:7f:c7:91:a3:ec:10:b2:
                    00:7c:93:3c:bc:82:33:c0:38:ad:4e:59:e6:1f:30:
                    32:e1:3c:a6:4d:00:0d:eb:ad:f6:9e:cf:dd:9f:99:
                    46:43:83:31:17:b5:ee:a9:e4:5b:fa:e5:a4:b8:68:
                    af:38:53:32:39:20:b5:a2:42:e5:25:6b:75:7f:17:
                    af:34:af:03:c4:0e:22:af:f4:9f:4f:d4:30:4d:e7:
                    f8:3d:e8:13:f8:7e:95:e2:ff:a9:43:80:91:0a:e8:
                    8e:d1:a6:22:a7:5a:1e:d7:51:b4:51:96:0c:21:17:
                    0c:af:79:c2:40:83:e8:f3:3a:28:cf:c4:78:10:67:
                    36:38:40:af:ac:8e:02:f1:0c:1a:f8:f8:64:2b:39:
                    ae:8d:3b:e3:51:ae:a3:f5:bb:94:72:42:c6:ae:5d:
                    2c:51:74:6e:17:94:73:95:8c:01:43:9c:f4:9c:e8:
                    b8:58:be:ec:f8:9c:91:57:0e:a4:af:2d:5e:0f:5f:
                    b2:7a:5a:70:71:d7:72:b5:86:fd:4f:56:73:e6:c0:
                    6e:f9:a9:a9:e8:16:83:5c:57:15:cc:8c:1a:2a:dd:
                    4a:27:ee:e5:b1:0a:89:43:70:e5:2e:aa:08:46:a4:
                    e1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:06:2A:F1:50:25:4D:BC:DC:12:5A:9A:4A:42:DF:B1:48:94:0D
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383034303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:8040::/43

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:b5:ee:8b:23:35:3e:da:cd:9c:59:d1:84:36:5d:f4:57:
         22:ae:60:6d:d8:38:9c:64:ac:9d:17:1d:a8:48:60:14:99:1b:
         62:a3:65:55:8e:cc:bb:7a:40:4e:99:7a:cb:95:df:71:7e:83:
         02:84:5c:f3:f9:5e:53:d0:26:f6:f7:fd:f1:1a:9d:ed:74:db:
         29:1f:3c:09:72:b3:c0:68:39:f6:39:1c:d8:94:0e:4a:38:3c:
         da:03:ef:5d:9a:8b:53:66:75:6d:8e:14:f5:71:63:bd:d4:3d:
         cd:1d:fd:50:dd:b3:e6:3b:a0:b0:7e:fb:fc:30:e2:9a:cb:c7:
         88:86:3f:df:0c:c4:06:d2:57:46:25:6f:be:4e:3d:d1:93:a2:
         8c:4c:35:63:e6:20:f6:2c:e3:74:97:b0:c5:87:9c:37:64:2f:
         1e:46:47:e2:27:9d:5c:cd:5f:17:e3:41:6a:0f:c5:6e:11:03:
         c7:61:65:a7:9d:86:a0:0d:1c:e0:6c:1f:96:01:68:d2:8c:63:
         2c:0b:e7:7d:65:eb:2f:f6:3e:71:35:8d:3f:f8:3b:bf:10:d9:
         b3:ed:3d:88:8e:d4:e5:56:0b:31:12:0a:35:06:91:ff:df:b6:
         15:43:40:27:32:3c:ed:8c:d3:20:9c:37:81:24:cc:d6:1e:ae:
         7c:5f:bd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org