Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          /n7PTQN1aMwUHvSf/aUs9z/fi5eJiAULp4iEj9AVZ7o=
Subject key identifier:   78:8E:09:E0:A3:B3:53:5B:9A:13:A0:E5:A9:71:1C:DB:99:5E:B7:EE
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       3C41538C339B4F67AB76200EC51E2D9C97EC6941
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:42 +0000
ROA not before:           Thu 04 Apr 2024 20:18:42 +0000
ROA not after:            Thu 03 Apr 2025 20:23:42 +0000
asID:                     265919
IP address blocks:        2804:3fd8:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:41:53:8c:33:9b:4f:67:ab:76:20:0e:c5:1e:2d:9c:97:ec:69:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:42 2024 GMT
            Not After : Apr  3 20:23:42 2025 GMT
        Subject: CN=788E09E0A3B3535B9A13A0E5A9711CDB995EB7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:09:90:c0:ea:a6:1e:25:0b:38:fe:3f:88:
                    d6:a6:66:33:82:38:05:d1:c6:49:c3:40:6a:42:bc:
                    f0:39:0d:3b:02:76:b4:c7:0a:37:a7:a7:d5:58:7d:
                    93:eb:19:a0:b0:97:f3:22:bb:26:51:2b:41:6a:97:
                    e6:fd:c7:02:23:aa:c1:59:4a:e0:9f:3d:03:a7:c3:
                    a8:06:a0:79:7b:bd:f1:71:dc:fd:5e:4e:e0:98:6e:
                    d9:06:1d:09:9f:e1:b9:74:37:bf:cc:4c:57:16:e9:
                    7b:bc:a2:a8:b9:42:bf:54:70:0b:a7:cb:c8:c6:d3:
                    15:6c:20:66:ab:91:66:e2:db:81:c1:82:c2:62:f7:
                    db:a6:57:35:94:3c:b5:a8:15:33:fb:42:1f:c0:35:
                    48:21:50:31:b4:f1:e5:48:13:63:73:c0:78:58:a9:
                    c9:82:a1:a3:49:a8:02:55:4d:cc:ee:18:5e:e1:d1:
                    60:f0:01:ed:e3:44:fa:1f:dc:95:01:b6:67:9f:e7:
                    7c:09:73:c1:47:d2:44:9c:8a:f7:84:31:a1:50:b3:
                    53:c4:26:5e:a4:5c:49:f0:9b:48:f9:06:97:19:b5:
                    cb:28:8a:72:bd:43:2f:b0:0f:42:4c:c1:67:5e:1d:
                    a1:84:ab:8c:42:3d:f1:68:14:01:9b:4b:7f:17:d6:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8E:09:E0:A3:B3:53:5B:9A:13:A0:E5:A9:71:1C:DB:99:5E:B7:EE
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:65:f7:0e:f5:42:50:60:c3:1f:d6:00:b0:2e:0a:f5:70:d7:
         bf:bc:e6:62:b2:0c:fc:09:fa:ae:aa:2a:b9:50:d2:ed:86:1e:
         55:c2:0e:62:52:ba:81:6c:34:60:21:dc:cf:f7:fb:c3:33:fb:
         d7:e1:22:ca:90:f3:02:d3:96:c8:77:e0:16:99:8f:55:62:64:
         04:1d:e6:69:2a:ff:bb:80:50:1f:88:96:c7:1b:0c:31:3b:e5:
         8b:f3:f4:5b:2a:e1:26:26:71:82:b1:7f:0b:95:6e:91:da:8c:
         ba:ad:e9:0f:c2:23:a5:c2:ca:a8:68:12:ac:66:d4:1a:93:01:
         d3:ec:d4:c2:63:ee:af:75:66:19:0e:42:51:2f:08:ed:0c:b6:
         ce:73:22:7d:3c:f3:f4:38:08:0e:21:49:08:d7:1c:73:23:46:
         37:5e:f4:92:76:28:a7:1a:e6:f3:53:db:56:cc:57:f9:67:45:
         65:49:32:42:8e:d8:54:d8:f7:62:b1:1e:29:8b:e2:78:25:26:
         d4:0d:f4:8e:3e:77:f7:ec:18:96:7a:f8:6a:ea:fe:bf:1f:3d:
         a8:93:b6:5e:74:09:75:03:ae:50:f2:2b:6b:8f:b8:26:c7:b7:
         e7:df:01:da:1f:0a:ed:22:ec:cb:8d:72:6d:31:45:35:a3:fe:
         3b:08:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org