Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          WyqsS7qJdhe+3JKHKfCfdnem/3XO0elR37+VpZdma7o=
Subject key identifier:   13:37:7D:A6:AC:5D:23:65:22:A1:F8:09:FA:E3:C7:25:DB:45:89:41
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       37B1A5E137A3E5D0A488B805D9D990A1316951CD
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:41 +0000
ROA not before:           Thu 04 Apr 2024 20:18:41 +0000
ROA not after:            Thu 03 Apr 2025 20:23:41 +0000
asID:                     265919
IP address blocks:        2804:3fd8:196::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b1:a5:e1:37:a3:e5:d0:a4:88:b8:05:d9:d9:90:a1:31:69:51:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:41 2024 GMT
            Not After : Apr  3 20:23:41 2025 GMT
        Subject: CN=13377DA6AC5D236522A1F809FAE3C725DB458941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fb:80:ed:92:bd:d4:3a:37:f1:68:5c:70:39:
                    2e:4e:8c:f2:60:f2:af:f8:86:79:e7:db:56:86:d0:
                    a2:a7:74:4e:17:73:e3:36:8b:93:c7:0c:d0:27:2d:
                    f8:8d:dc:0e:21:99:f7:6f:35:7d:d0:11:89:54:6b:
                    54:ca:b4:98:ef:1a:64:e7:7f:d6:a3:56:1a:11:51:
                    6e:d2:c9:e2:9e:19:9b:8c:8a:be:e3:67:9f:e4:41:
                    74:9a:2d:16:e6:29:db:f4:99:07:70:0a:16:ec:62:
                    6c:53:ef:32:c3:fc:31:9a:4a:d6:7b:58:de:57:55:
                    8c:87:71:03:c0:99:5f:f2:f7:c5:d0:21:37:4e:e8:
                    bf:7f:c3:8c:f1:b1:5e:50:a9:fc:71:81:f6:71:a8:
                    3e:9a:40:39:4b:38:95:cc:52:40:38:a4:ca:69:57:
                    63:cc:97:6e:09:cd:c8:56:10:e3:57:7d:13:8a:6d:
                    91:3b:d2:1d:43:64:11:0e:00:c2:21:e3:4d:a6:47:
                    76:d2:56:63:6c:de:b2:ac:6e:f9:ca:d3:54:29:9d:
                    7a:20:53:8c:2b:81:de:3e:e4:51:77:55:73:4a:47:
                    7d:ea:dd:10:25:7d:bb:47:d2:dd:9e:05:45:75:3d:
                    e8:09:b3:1f:ee:fe:f4:19:c5:d9:28:c5:1c:f6:8b:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:7D:A6:AC:5D:23:65:22:A1:F8:09:FA:E3:C7:25:DB:45:89:41
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:196::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:30:a7:9e:16:6a:ce:69:92:69:49:62:a8:52:e6:15:3b:
         24:99:ba:8e:08:2d:79:41:42:5a:52:d4:0b:96:98:49:6e:e5:
         99:8b:9c:ba:9b:66:2f:ee:25:d3:76:3c:fd:51:3a:71:25:6d:
         af:8f:f6:e5:1b:8f:37:a5:68:78:49:68:73:86:73:f1:25:9d:
         0a:71:d5:df:84:3b:ee:b6:32:2f:3f:be:80:2e:fd:8d:38:55:
         96:1c:45:4f:9c:e1:5c:33:49:fe:ff:19:41:3e:0b:ae:d1:ec:
         63:43:d9:7e:d9:9e:c5:e2:5e:fc:cf:c3:8d:62:d5:51:d0:3f:
         81:0e:b9:f7:21:e7:29:d0:1d:4f:ec:33:da:c4:80:58:51:9e:
         05:92:76:9e:fe:62:58:47:ac:db:83:1d:70:36:b9:2e:ea:0b:
         a7:7d:8d:99:6a:1c:5c:73:59:e9:54:d6:8f:7f:7d:11:94:05:
         59:04:43:77:82:e4:a6:b6:46:60:95:75:9c:21:fc:33:bb:a1:
         ea:4b:56:83:5d:aa:e6:fa:3a:30:df:ad:a0:dd:df:ec:ab:1d:
         35:1a:ec:82:68:eb:10:fe:9e:4d:2b:10:0e:24:ba:cc:27:aa:
         ca:8d:df:3c:27:a6:6d:7b:17:4a:73:23:26:df:48:d5:af:85:
         62:c3:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org