Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a3a2f33322d3332203d3e20323639313934.roa
File:                     323830343a363064343a3a2f33322d3332203d3e20323639313934.roa (raw, json)
Hash identifier:          g7U1apMQ9XN41glF3iNDQFatxxgIjV8gy8mPwvId9zc=
Subject key identifier:   23:25:FC:DF:37:48:65:B9:C4:AB:02:F5:D3:B4:61:35:F7:93:14:B6
Certificate issuer:       /CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
Certificate serial:       0DA657905A6D9B1F1E7076DB7199D891AB66629C
Authority key identifier: B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a3a2f33322d3332203d3e20323639313934.roa
Signing time:             Fri 23 Feb 2024 16:17:49 +0000
ROA not before:           Fri 23 Feb 2024 16:12:49 +0000
ROA not after:            Fri 21 Feb 2025 16:17:49 +0000
asID:                     269194
IP address blocks:        2804:60d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a6:57:90:5a:6d:9b:1f:1e:70:76:db:71:99:d8:91:ab:66:62:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8F99F2CBAB8BE2EF48D586560072020764C11F3
        Validity
            Not Before: Feb 23 16:12:49 2024 GMT
            Not After : Feb 21 16:17:49 2025 GMT
        Subject: CN=2325FCDF374865B9C4AB02F5D3B46135F79314B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:4b:bd:db:29:3b:fa:33:a8:12:fa:75:69:
                    53:8e:56:43:bb:b1:a1:07:7f:ab:b1:e5:5a:48:b4:
                    27:3f:e3:e4:fe:43:cc:9f:0f:01:38:e8:c0:d7:e0:
                    52:ba:83:5f:3b:54:0f:97:2a:be:71:26:c3:a7:22:
                    82:8c:7c:18:b3:7b:4f:05:b7:cd:f7:29:84:05:a4:
                    a2:e4:d4:b0:83:72:90:77:53:26:f3:ca:a5:4b:69:
                    6e:a5:c4:55:81:ef:4e:08:6d:48:9f:f4:77:fb:8a:
                    47:6f:7e:8a:9d:b5:33:58:b5:a7:ae:4d:27:e8:38:
                    18:e7:85:b6:8f:bc:71:4a:e3:9d:38:ac:7e:ac:be:
                    1d:1a:a0:fd:73:ea:48:58:05:93:9b:31:72:56:6a:
                    12:e7:9e:47:eb:17:31:06:b9:3d:72:1f:4d:b3:52:
                    38:d7:4b:97:a6:06:6c:a2:20:57:05:14:e7:6a:57:
                    3f:fc:db:e5:b2:20:95:d2:3a:4d:e6:35:00:34:c9:
                    1a:c1:f0:19:c6:cf:9c:75:36:2b:31:3f:f2:d8:ca:
                    8e:3f:b3:bd:06:82:e7:2c:8c:f9:8d:3e:74:c8:94:
                    e0:08:19:56:23:8e:0e:39:8a:df:15:48:2a:7a:c4:
                    40:41:b3:ae:cd:38:7f:97:89:61:8b:11:d5:97:08:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:25:FC:DF:37:48:65:B9:C4:AB:02:F5:D3:B4:61:35:F7:93:14:B6
            X509v3 Authority Key Identifier:
                keyid:B8:F9:9F:2C:BA:B8:BE:2E:F4:8D:58:65:60:07:20:20:76:4C:11:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8F99F2CBAB8BE2EF48D586560072020764C11F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/323830343a363064343a3a2f33322d3332203d3e20323639313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:e5:0e:fc:34:7b:72:dc:65:34:cd:4a:fe:a6:0c:98:c1:
         3e:22:bf:73:bd:8f:13:b5:fe:80:05:4b:51:4f:82:33:60:94:
         2c:aa:bb:af:14:df:cf:12:a4:aa:6a:9e:87:2e:de:f1:b4:d9:
         68:84:32:c8:99:7f:b1:b9:41:34:61:f6:0c:dc:17:52:45:10:
         23:ad:84:6d:fa:d0:e8:55:92:fe:a0:d6:55:35:53:21:17:5b:
         7a:8c:6a:d0:1c:5a:4e:4b:62:db:e1:27:71:29:03:3c:dd:31:
         67:77:7a:05:bd:c5:3e:71:45:20:23:87:bf:2c:b2:58:11:1c:
         0d:cf:0f:87:97:44:75:66:23:d2:25:21:ea:96:16:86:a2:89:
         47:06:c9:b9:c2:0c:da:32:d3:20:94:52:21:9e:33:cb:eb:5a:
         73:cc:87:b2:94:58:4c:76:c9:d5:02:83:23:ce:77:ae:24:61:
         ef:7c:09:28:5f:b9:b8:cc:de:77:12:24:f0:b6:c2:f8:59:f2:
         25:ae:dc:65:ab:06:82:f3:90:9f:3b:31:48:4e:fe:16:87:da:
         ac:36:8f:5f:ef:39:21:14:39:ce:82:88:30:2a:ce:32:00:e3:
         4a:ea:78:44:c0:5c:18:23:29:63:67:7b:e7:67:a9:93:a5:0e:
         31:ff:7a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org