Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa
File:                     323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa (raw, json)
Hash identifier:          M7K28OTd8b2TV6MrhxUwDNkdOmezYbhRPd9gtKX5dh4=
Subject key identifier:   46:F8:66:A6:4D:A6:EF:7C:4E:96:B9:96:02:25:C3:84:11:5B:FE:3A
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       5828F73E2C008FBC178DAF0DB81A11F2685E234F
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa
Signing time:             Mon 19 Feb 2024 00:05:08 +0000
ROA not before:           Mon 19 Feb 2024 00:00:08 +0000
ROA not after:            Mon 17 Feb 2025 00:05:08 +0000
asID:                     269194
IP address blocks:        2804:60d4:8080::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:28:f7:3e:2c:00:8f:bc:17:8d:af:0d:b8:1a:11:f2:68:5e:23:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 19 00:00:08 2024 GMT
            Not After : Feb 17 00:05:08 2025 GMT
        Subject: CN=46F866A64DA6EF7C4E96B9960225C384115BFE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:bd:b3:55:00:9a:7d:00:20:99:b8:36:8f:
                    06:a7:55:27:82:42:10:5a:52:49:54:0a:af:3b:cc:
                    2b:50:b0:95:05:b2:e2:92:bb:34:fa:47:36:c1:54:
                    1e:b9:98:2e:11:c5:8c:c1:60:2f:df:d0:42:22:11:
                    47:f0:b0:e0:c0:3c:7e:8f:55:10:2d:a5:36:5d:b1:
                    76:ba:f8:dc:91:d8:0b:d5:aa:ff:7b:2a:0e:49:87:
                    7b:01:8e:92:45:69:f2:2b:f2:ee:29:05:67:7b:d9:
                    2b:49:62:70:aa:dd:6a:ce:cb:61:79:42:2a:5c:00:
                    a1:25:1f:67:af:7f:ef:89:3f:0d:c3:ea:e3:ee:e2:
                    28:b4:1a:38:c8:81:71:8b:8a:29:19:b7:ea:d2:90:
                    57:c9:d6:63:fc:92:d1:0e:7e:46:dc:fc:6f:70:f2:
                    ee:34:60:e1:da:f6:3a:9f:2c:14:ec:ea:e8:8e:cd:
                    7f:70:9d:be:06:22:b1:c9:5b:56:e7:91:99:62:4e:
                    6e:89:2d:b0:af:49:cc:81:c8:9c:4e:cc:54:c9:b9:
                    23:43:1d:89:9c:f3:c2:e2:10:5c:e5:a1:bb:42:18:
                    ca:8d:85:82:d6:b4:f3:6b:ea:05:f6:ab:d1:95:fa:
                    30:c6:7d:54:37:f0:7f:63:57:96:ed:5f:de:ea:d5:
                    42:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:66:A6:4D:A6:EF:7C:4E:96:B9:96:02:25:C3:84:11:5B:FE:3A
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a383038303a3a2f34332d3433203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4:8080::/43

    Signature Algorithm: sha256WithRSAEncryption
         62:57:96:5c:ea:01:03:6b:f9:b1:24:1e:95:83:e2:4b:f7:25:
         dd:b4:b8:06:a3:88:12:81:e5:26:c5:a1:53:fc:3d:df:cb:a4:
         e4:df:9a:e5:ab:7d:63:71:ba:a8:2e:fd:32:83:1c:3f:1d:6a:
         1f:b9:7e:d8:46:31:4f:91:eb:77:eb:a6:fd:54:75:72:fb:0e:
         38:44:aa:f1:b7:eb:8c:e8:c1:74:18:34:36:37:b2:a5:45:69:
         ad:4b:9e:42:bd:54:bc:a4:82:a5:6e:94:c6:07:24:10:90:06:
         23:71:a6:b3:c7:e1:e5:18:07:eb:cc:b8:f8:74:50:ba:c3:63:
         e6:23:79:be:45:3a:b5:71:9f:50:2a:7f:39:47:95:56:48:4c:
         c0:b6:2f:50:eb:48:6d:62:ec:f0:ed:d2:c4:35:23:df:21:c2:
         53:53:5e:1a:3e:20:1a:de:2c:20:53:a0:c4:02:05:64:90:83:
         6a:c2:e0:bc:ab:82:d0:e7:13:95:cf:35:12:85:7d:94:5d:bd:
         5f:cb:d7:4f:5f:67:1f:7b:c9:4d:5b:72:ed:fd:d1:12:45:a0:
         50:ab:dc:72:aa:b8:f2:97:3c:64:5b:24:03:e4:a5:9d:47:ce:
         a5:95:b5:3f:a7:39:39:90:51:ac:7b:12:95:90:ff:6e:88:cb:
         4f:b1:9a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org