Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          RgkHjfbrebd+jcwYrEdZcM1S5ZU/f6Sc94QHNxVtQdI=
Subject key identifier:   2C:64:E8:46:D4:69:16:5C:B3:31:86:09:EA:88:B1:ED:8C:A5:4B:61
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       DEDB6DCE4B6BE80F3C2DE220365FDF7F98406F
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:41 +0000
ROA not before:           Thu 04 Apr 2024 20:18:41 +0000
ROA not after:            Thu 03 Apr 2025 20:23:41 +0000
asID:                     265919
IP address blocks:        2804:3fd8:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:db:6d:ce:4b:6b:e8:0f:3c:2d:e2:20:36:5f:df:7f:98:40:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:41 2024 GMT
            Not After : Apr  3 20:23:41 2025 GMT
        Subject: CN=2C64E846D469165CB3318609EA88B1ED8CA54B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:34:49:f7:43:a2:83:4e:d2:9b:52:46:3f:
                    e5:fa:6c:98:c6:34:34:db:ee:d1:71:52:ae:12:d8:
                    13:fd:f3:2a:c0:c0:e7:aa:7f:90:44:75:48:ad:a8:
                    1a:ec:e1:64:fd:c2:67:04:bd:2f:3f:79:fd:3f:84:
                    7f:5c:e9:f1:de:d8:00:70:63:0f:50:56:bb:5c:f9:
                    d3:d6:18:ab:b6:b9:2c:54:95:2c:34:3c:f3:52:b7:
                    2d:da:a3:85:e5:de:cc:d8:90:10:01:2e:89:6d:ba:
                    e7:39:eb:6c:c0:67:8d:13:4b:40:14:2d:95:8d:10:
                    14:a3:08:71:fb:d8:03:6a:1a:61:33:69:dc:d5:4a:
                    bf:64:6a:5f:f6:6f:9c:93:a3:3b:cc:da:09:ed:bb:
                    c8:b3:1f:67:81:8e:e3:07:ce:e8:cf:06:69:11:44:
                    94:fe:b7:b5:d8:da:b7:36:5d:2e:c9:91:b0:78:e4:
                    6f:c1:e0:6a:6b:75:f2:c1:a3:3c:f8:ab:b7:52:a9:
                    58:55:2e:0a:d5:04:05:08:b6:ab:aa:86:8b:51:04:
                    03:b9:f2:e6:e9:cf:a0:38:eb:21:f6:53:75:46:58:
                    3a:7a:4a:af:65:d4:31:93:50:9d:f7:bf:97:02:80:
                    b4:51:69:44:7b:52:cf:8d:70:45:23:a6:ce:e0:1c:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:64:E8:46:D4:69:16:5C:B3:31:86:09:EA:88:B1:ED:8C:A5:4B:61
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:26:5c:28:f9:69:ca:3b:74:c1:d7:18:c2:e7:42:9f:1c:
         80:fa:86:ed:21:18:20:68:fc:0a:14:e8:0e:16:a0:28:af:0a:
         71:31:66:b7:0c:cd:20:09:92:5f:1c:46:f2:3d:21:d8:24:e1:
         30:e7:6c:a5:8b:5a:12:72:92:20:ea:fb:12:33:91:fc:ad:14:
         d9:49:f9:06:77:43:aa:bb:5d:6a:14:b2:8d:28:82:91:ea:4c:
         41:7b:e2:7b:77:7c:b3:9c:ef:46:ec:c3:ed:f6:65:d8:75:9b:
         ca:b4:9e:68:06:48:9f:c7:92:2d:0c:65:b3:e4:db:37:cd:9f:
         75:b9:c9:bc:e5:ba:98:f6:ee:df:2a:b9:37:9d:09:36:e4:9b:
         87:94:1a:43:4e:36:d3:4d:04:17:e6:57:34:cd:bf:5a:8e:7c:
         6c:52:59:2a:b9:d6:39:28:80:4a:ab:5d:ee:f0:b3:22:5f:e5:
         8c:78:83:db:c1:8c:af:d6:d7:61:76:40:14:14:2c:49:47:c7:
         5d:7e:bd:ab:18:58:d4:e1:31:69:a9:71:bd:e2:1f:c8:4c:2b:
         e7:ef:88:89:30:39:5e:c8:13:19:97:85:ec:0e:a8:c8:7d:d2:
         87:3d:d8:2c:88:e9:8e:c1:71:61:12:7c:28:da:e7:44:5d:18:
         f3:85:f8:cd
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIUAN7bbc5La+gPPC3iIDZf33+YQG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ2OTM4MkY3OUJBM0Q5RDlBMzJBOTg0OTQyMDI5QzQz
NDFBQjE2NzAeFw0yNDA0MDQyMDE4NDFaFw0yNTA0MDMyMDIzNDFaMDMxMTAvBgNV
BAMTKDJDNjRFODQ2RDQ2OTE2NUNCMzMxODYwOUVBODhCMUVEOENBNTRCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsuzRJ90Oig07Sm1JGP+X6bJjG
NDTb7tFxUq4S2BP98yrAwOeqf5BEdUitqBrs4WT9wmcEvS8/ef0/hH9c6fHe2ABw
Yw9QVrtc+dPWGKu2uSxUlSw0PPNSty3ao4Xl3szYkBABLoltuuc562zAZ40TS0AU
LZWNEBSjCHH72ANqGmEzadzVSr9kal/2b5yTozvM2gntu8izH2eBjuMHzujPBmkR
RJT+t7XY2rc2XS7JkbB45G/B4GprdfLBozz4q7dSqVhVLgrVBAUItquqhotRBAO5
8ubpz6A46yH2U3VGWDp6Sq9l1DGTUJ33v5cCgLRRaUR7Us+NcEUjps7gHPBDAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQULGToRtRpFlyzMYYJ6oix7YylS2EwHwYDVR0j
BBgwFoAUvWk4L3m6PZ2aMqmElCApxDQasWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMS9CRDY5MzgyRjc5QkEzRDlEOUEzMkE5ODQ5NDIwMjlDNDM0MUFCMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JENjkzODJGNzlCQTNEOUQ5
QTMyQTk4NDk0MjAyOUM0MzQxQUIxNjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzEv
MzIzODMwMzQzYTMzNjY2NDM4M2EzNzMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEP9hwADANBgkqhkiG9w0BAQsF
AAOCAQEAcT8mXCj5aco7dMHXGMLnQp8cgPqG7SEYIGj8ChToDhagKK8KcTFmtwzN
IAmSXxxG8j0h2CThMOdspYtaEnKSIOr7EjOR/K0U2Un5BndDqrtdahSyjSiCkepM
QXvie3d8s5zvRuzD7fZl2HWbyrSeaAZIn8eSLQxls+TbN82fdbnJvOW6mPbu3yq5
N50JNuSbh5QaQ042000EF+ZXNM2/Wo58bFJZKrnWOSiASqtd7vCzIl/ljHiD28GM
r9bXYXZAFBQsSUfHXX69qxhY1OExaalxveIfyEwr5++IiTA5XsgTGZeF7A6oyH3S
hz3YLIjpjsFxYRJ8KNrnRF0Y84X4zQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org