Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          1pmBAOZqrUdiOMfhBpsW15ZTyJoeVFZZTnzoitjBKtU=
Subject key identifier:   42:6F:EA:FE:A4:C2:3B:AD:8C:3B:2D:EF:C1:27:76:21:22:5D:57:FF
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       4B263DA12DF39F89688D239932800E437D6B203C
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:40 +0000
ROA not before:           Thu 04 Apr 2024 20:18:40 +0000
ROA not after:            Thu 03 Apr 2025 20:23:40 +0000
asID:                     265919
IP address blocks:        2804:3fd8:197::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:26:3d:a1:2d:f3:9f:89:68:8d:23:99:32:80:0e:43:7d:6b:20:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:40 2024 GMT
            Not After : Apr  3 20:23:40 2025 GMT
        Subject: CN=426FEAFEA4C23BAD8C3B2DEFC1277621225D57FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:d3:19:f4:aa:4a:45:bf:7d:67:1a:de:43:
                    5e:23:40:a5:7c:e0:f5:ed:43:e8:c3:e8:c5:ef:d2:
                    2d:85:3d:66:ce:34:3b:90:19:f1:fb:87:db:9e:9f:
                    b9:c4:ee:5e:77:a4:db:0a:50:56:86:9b:5e:c7:53:
                    33:f2:af:bc:97:a4:c9:3b:48:68:df:5e:20:8b:0c:
                    d9:06:ce:ef:66:53:73:ee:3e:c3:d3:af:9b:70:dd:
                    33:6b:31:d3:70:45:61:5f:70:18:e0:0c:fe:0e:ba:
                    54:d3:fa:a4:c0:d2:3f:be:ad:6f:62:4e:3d:c6:0a:
                    4e:87:0d:af:bd:f1:b0:1d:39:d4:82:01:f1:b9:28:
                    a4:36:0f:b4:ae:1f:7b:f2:bd:af:e7:0b:8e:0c:1b:
                    99:52:9c:f6:88:94:41:ca:08:61:65:82:5e:58:63:
                    70:57:41:00:4e:eb:fd:78:6b:43:c5:e4:99:cc:da:
                    49:8b:06:db:03:86:f2:7c:5e:a1:1b:12:42:bc:e9:
                    09:a6:10:1b:80:69:1d:55:7b:f1:e9:7e:f9:a1:57:
                    63:a6:21:f1:f1:41:02:50:3b:44:dc:b2:8b:6d:39:
                    c7:64:52:f6:7b:20:ae:4d:b4:34:15:a1:2a:21:48:
                    4c:3e:d5:55:b8:8f:29:b0:bc:24:bf:24:0d:36:2a:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6F:EA:FE:A4:C2:3B:AD:8C:3B:2D:EF:C1:27:76:21:22:5D:57:FF
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3139373a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:197::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:16:e2:66:4f:ec:20:1d:e0:29:a9:47:4d:39:ed:c0:6f:a3:
         0c:13:d0:31:64:70:6f:c5:4a:eb:a1:26:13:55:03:cd:bb:20:
         67:f9:49:50:38:d1:06:9b:6d:5f:28:8a:46:19:34:10:2c:55:
         99:3a:09:4d:74:2d:0a:16:aa:f6:da:ab:ea:f9:77:0b:e5:b9:
         f1:10:bd:9c:12:14:66:3e:92:bc:53:c8:c2:35:13:e2:b1:e2:
         fc:01:e7:34:0c:57:ff:ca:1e:a3:19:ab:34:aa:c9:a9:c2:50:
         79:69:4a:a2:26:4b:e4:c9:16:e3:17:63:1c:57:22:b8:87:87:
         91:7e:e1:f6:bc:0d:87:1a:0a:04:62:f5:d3:ae:60:8e:62:0b:
         1c:1f:d0:cc:24:26:1c:51:3c:c4:79:37:17:fe:98:4e:a2:c2:
         de:a0:b2:31:e4:d5:99:60:a2:ca:41:f2:37:e4:e7:7e:85:b9:
         c4:78:2e:90:9b:a2:1b:34:7b:de:3f:21:f8:dc:90:dc:f3:a6:
         a2:a3:dc:a6:b9:4b:52:ae:b8:8f:b6:17:af:65:d5:26:ed:9a:
         9d:65:03:c6:b5:67:98:b6:e6:db:93:37:2a:f7:5e:2a:88:7d:
         da:4d:09:4e:b5:fd:31:d2:42:f0:19:99:b6:65:60:5c:94:04:
         7a:f6:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org