Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          aKi930Nzty6w5DtGWgIy+z6XSBLQEUHFTUbjk2cDbhM=
Subject key identifier:   3D:15:01:CF:B9:8D:32:8F:5C:86:10:99:4A:21:07:C8:AC:BE:C3:22
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       6975D24CFA3291F8132D4F8A45DC0A2F10A38C16
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:41 +0000
ROA not before:           Thu 04 Apr 2024 20:18:41 +0000
ROA not after:            Thu 03 Apr 2025 20:23:41 +0000
asID:                     265919
IP address blocks:        2804:3fd8:185::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:75:d2:4c:fa:32:91:f8:13:2d:4f:8a:45:dc:0a:2f:10:a3:8c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:41 2024 GMT
            Not After : Apr  3 20:23:41 2025 GMT
        Subject: CN=3D1501CFB98D328F5C8610994A2107C8ACBEC322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:ed:47:b4:9e:e9:ed:b8:4e:4c:2f:ef:82:
                    01:f9:a6:19:a3:7a:a2:f1:85:c3:00:01:54:b4:6f:
                    4f:df:0c:02:00:69:1a:93:e3:a3:54:be:b1:54:a5:
                    6d:d9:30:fa:df:10:b4:98:6a:58:60:a8:fa:89:ad:
                    5e:a9:87:56:ee:53:0f:1e:9c:5e:68:07:51:76:f4:
                    14:8c:af:82:cc:e8:4d:88:d4:5c:ad:14:3e:8a:1c:
                    35:13:e9:8f:12:46:c5:97:2f:03:c8:07:d2:3d:43:
                    2b:95:32:58:b2:f0:41:d7:2d:74:50:6c:d8:f4:be:
                    41:b2:c3:34:8d:0e:21:c6:fc:01:24:80:85:01:a0:
                    83:f2:f6:45:b0:aa:5f:e4:c1:10:ef:29:6c:6d:f6:
                    25:5f:5e:54:d8:3c:81:73:32:c6:4c:29:bf:02:08:
                    d9:6a:9c:ce:cd:1c:43:43:d5:5d:e2:4c:9a:15:93:
                    de:db:91:34:c9:7e:6b:e0:3a:6d:03:7f:2f:8e:a0:
                    86:f3:31:b3:f2:15:5d:66:bf:97:f8:95:d0:77:ba:
                    2c:3d:3f:99:bd:73:db:ff:69:5f:d7:39:97:d1:d0:
                    75:19:21:6c:7f:27:bc:22:63:0f:a8:ac:02:f1:41:
                    e3:5e:e2:02:8c:d4:dc:a9:d3:89:c4:69:37:64:6c:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:15:01:CF:B9:8D:32:8F:5C:86:10:99:4A:21:07:C8:AC:BE:C3:22
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:19:6d:2e:c9:56:6f:31:8e:f4:2e:a7:c5:7d:4d:e4:44:2a:
         71:01:10:a4:d5:d3:90:74:e1:04:68:3e:97:75:57:43:2a:08:
         d9:1d:c9:e9:b3:d5:14:6c:12:60:52:0f:87:e3:ce:78:f4:2e:
         9b:ec:77:ef:75:8f:6f:7a:e0:0f:fc:fe:4d:4d:b2:13:6a:c7:
         ca:11:fe:32:0b:21:ce:80:09:6b:93:6d:52:50:13:fb:43:a9:
         89:b9:78:aa:7a:b3:30:4c:44:34:1a:b3:c4:75:21:dc:7f:f1:
         42:82:e5:b0:a3:27:3e:a7:5f:0b:e5:43:24:78:c3:11:f6:dc:
         b7:bf:34:78:3a:10:09:57:ac:3d:49:75:50:90:11:f8:9e:7c:
         ef:6d:b8:5b:46:1b:24:5c:c9:35:96:da:21:1d:6d:e5:5f:63:
         0a:11:55:de:bb:97:ee:65:58:f4:fb:11:98:3a:10:11:14:30:
         6b:7f:2f:b3:97:1b:94:c6:a9:21:8a:1b:de:14:b2:63:67:a0:
         46:30:e6:a2:75:48:47:66:03:b7:17:f6:19:35:aa:31:2d:b1:
         55:98:ef:82:bc:00:ae:ae:cb:49:78:20:8c:aa:77:fc:f7:68:
         55:2b:8a:cf:18:bd:42:d6:df:91:56:26:3e:69:25:be:f1:34:
         5a:52:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org