Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/323830343a326565633a3a2f33322d3336203d3e20323634383631.roa
File:                     323830343a326565633a3a2f33322d3336203d3e20323634383631.roa (raw, json)
Hash identifier:          C1/8hQmWOm1dZQChUk/QyAXGcC63h0H56C8O8FHpqr0=
Subject key identifier:   FF:F4:1B:37:E0:D9:A8:EE:F4:2A:3C:D0:E6:8A:F5:14:BC:CF:1D:01
Certificate issuer:       /CN=BD697319E06F7C63EFC364697F28802013634F3F
Certificate serial:       0C468027CB7F6C100A326ABA2B86540861933EF3
Authority key identifier: BD:69:73:19:E0:6F:7C:63:EF:C3:64:69:7F:28:80:20:13:63:4F:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD697319E06F7C63EFC364697F28802013634F3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/323830343a326565633a3a2f33322d3336203d3e20323634383631.roa
Signing time:             Thu 04 Apr 2024 11:39:23 +0000
ROA not before:           Thu 04 Apr 2024 11:34:23 +0000
ROA not after:            Thu 03 Apr 2025 11:39:23 +0000
asID:                     264861
IP address blocks:        2804:2eec::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:46:80:27:cb:7f:6c:10:0a:32:6a:ba:2b:86:54:08:61:93:3e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD697319E06F7C63EFC364697F28802013634F3F
        Validity
            Not Before: Apr  4 11:34:23 2024 GMT
            Not After : Apr  3 11:39:23 2025 GMT
        Subject: CN=FFF41B37E0D9A8EEF42A3CD0E68AF514BCCF1D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:74:a8:eb:d4:f6:f6:22:25:ce:13:52:05:
                    d9:80:49:43:a1:66:d7:f7:55:d3:eb:c2:4b:94:c1:
                    2a:08:44:8d:70:cb:b1:b5:82:3f:26:3c:57:d6:56:
                    35:d6:90:5b:21:ae:35:6e:22:92:b1:cd:a3:d3:2d:
                    8d:1d:79:f7:31:b5:7d:2f:c8:0a:2d:45:e7:2f:c0:
                    df:ad:15:48:e7:5a:12:42:13:26:77:3e:5b:3a:49:
                    5d:e2:36:0c:14:34:f9:f6:94:67:d7:77:fc:76:60:
                    96:e0:a2:c4:53:4a:22:3b:19:17:68:ba:31:33:ab:
                    b7:ae:ae:27:24:b8:f3:5f:ab:96:93:20:48:96:b9:
                    1a:39:84:9a:57:35:d5:9d:94:f4:26:08:54:83:72:
                    f7:09:b9:7d:c5:83:e6:45:1b:46:27:7f:6f:18:37:
                    9a:dd:f6:b8:f2:e2:b2:b2:16:5d:2c:6c:0e:c6:01:
                    ad:72:20:b6:a5:63:3a:4c:7c:46:38:0f:a0:18:67:
                    50:df:bf:cf:74:7b:ef:1e:0f:68:db:c4:cc:13:fe:
                    41:82:8b:19:ca:53:5b:73:f0:fd:3b:b9:2e:50:e0:
                    71:7b:59:e0:0e:ba:7c:61:3f:a1:79:12:08:bd:0e:
                    7b:c0:11:08:55:f5:e7:d0:9b:3a:db:59:ab:38:0c:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F4:1B:37:E0:D9:A8:EE:F4:2A:3C:D0:E6:8A:F5:14:BC:CF:1D:01
            X509v3 Authority Key Identifier:
                keyid:BD:69:73:19:E0:6F:7C:63:EF:C3:64:69:7F:28:80:20:13:63:4F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/BD697319E06F7C63EFC364697F28802013634F3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD697319E06F7C63EFC364697F28802013634F3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BtoatP68EdJygtSXhmGJ5APHRts9X45DMGJJSYWd8SL/1/323830343a326565633a3a2f33322d3336203d3e20323634383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2eec::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:97:16:bb:f3:38:68:29:6e:88:6b:55:ee:81:d0:37:4a:
         0d:63:25:63:33:b8:07:15:20:6a:f0:0b:92:98:1b:57:b3:b7:
         29:3a:0d:b6:00:3c:47:b5:0b:2f:e3:c6:b3:08:47:54:a9:4c:
         a3:6b:8a:2b:08:5a:8f:73:27:56:e1:5b:dd:69:2d:41:90:46:
         e9:52:68:d7:2e:73:7a:67:6f:51:65:1c:3f:55:e0:5c:a2:10:
         7e:80:e2:e3:27:d8:a8:2a:b0:2c:28:b3:3c:f7:e9:b9:b2:05:
         f0:99:7e:c9:21:ca:86:62:08:33:58:7e:0b:20:55:e0:ea:3d:
         32:23:7d:c7:3e:29:10:06:24:fd:b5:9d:3c:09:05:d6:f7:be:
         7b:3c:54:98:57:0b:12:24:7d:00:49:d4:10:22:4e:77:e6:68:
         6d:28:2d:2d:ec:a5:1e:94:19:bb:13:f7:36:c8:7b:cf:a5:45:
         c2:d7:39:df:e6:33:42:71:5c:55:39:ba:70:a4:4a:28:69:6e:
         7b:fe:6b:b6:b5:07:0b:54:2c:ac:75:f4:64:8a:f6:e3:cb:f9:
         63:ad:eb:e2:b0:bc:e8:38:fe:9b:28:84:f7:44:55:12:e7:ac:
         40:a9:18:29:e6:76:12:95:f2:11:6f:3d:99:8f:7a:b1:61:57:
         8c:52:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org