Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          unK8By7o3hCY7N68By8lBQZCofZWP1XLPfgmZcOrUHU=
Subject key identifier:   47:E4:6A:36:31:83:BA:A4:CB:08:D0:5B:39:6D:8E:AC:C3:42:40:D3
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       46FD4A01CF10F0042453EC9FA1FCFD58D8DA255A
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:42 +0000
ROA not before:           Thu 04 Apr 2024 20:18:42 +0000
ROA not after:            Thu 03 Apr 2025 20:23:42 +0000
asID:                     265919
IP address blocks:        2804:3fd8:8946::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fd:4a:01:cf:10:f0:04:24:53:ec:9f:a1:fc:fd:58:d8:da:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:42 2024 GMT
            Not After : Apr  3 20:23:42 2025 GMT
        Subject: CN=47E46A363183BAA4CB08D05B396D8EACC34240D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:f8:93:42:a7:d7:c5:d2:ce:b3:b2:2e:19:
                    9b:05:4e:7c:29:50:8e:2d:5b:30:52:c5:89:41:ac:
                    e6:4d:5a:2f:13:49:95:9a:96:c1:70:93:af:27:7a:
                    44:b5:0c:04:9e:55:79:2c:6b:c4:8c:b9:07:ca:b4:
                    49:12:d5:30:ca:cc:df:3c:ee:1e:22:d3:65:90:75:
                    fc:94:7b:fd:b7:ab:50:58:cf:da:7e:67:28:4c:57:
                    55:e4:cb:0b:f5:1a:ac:b6:46:82:ec:06:73:b7:98:
                    0d:58:0a:3c:e0:78:a2:15:ae:6f:01:06:47:fe:72:
                    28:cf:c4:55:50:80:14:c7:6c:8b:aa:ab:28:59:ec:
                    6f:0a:54:ed:27:a3:f0:67:2b:e5:0b:96:79:36:44:
                    83:cf:5d:55:56:b3:6a:8f:04:70:6d:f5:ea:6d:5f:
                    d0:46:6c:35:2f:85:32:f4:1a:49:98:db:bb:fa:70:
                    a1:f0:69:a5:e4:47:06:6a:2c:52:a6:21:f3:1c:0d:
                    e7:96:ed:42:e5:1e:fd:df:11:8d:2f:1f:39:9d:de:
                    40:6f:df:14:66:5d:ae:27:f4:de:6c:84:7c:3f:56:
                    c6:fa:31:f2:fa:fc:51:4e:08:68:60:76:70:bc:bc:
                    c5:16:0c:b2:bf:6f:ee:50:ad:be:2b:f5:8a:46:5f:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E4:6A:36:31:83:BA:A4:CB:08:D0:5B:39:6D:8E:AC:C3:42:40:D3
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:8946::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:62:91:e7:1d:ac:9d:3c:5f:a7:bb:72:d9:23:d7:40:95:bf:
         8f:97:63:b6:c8:15:ef:2e:ca:c3:4b:74:52:9d:59:65:0d:df:
         0e:84:6c:65:71:de:77:e1:ff:a2:ee:6b:c6:e6:1a:c3:01:30:
         f4:14:25:86:5b:9a:90:c6:66:b0:49:f0:f8:da:9d:da:40:95:
         a9:fc:cf:15:95:c9:be:0c:41:5c:a7:c6:90:d7:7c:66:71:ed:
         b9:bf:33:dc:13:57:d5:16:47:d1:20:05:dc:92:ec:c0:33:0e:
         48:d3:22:03:72:14:df:78:3b:1a:18:52:6d:80:b7:d9:c7:1b:
         00:41:15:85:1d:4c:8f:19:17:ce:f6:04:68:49:61:2e:60:66:
         c7:59:b1:29:58:4f:3e:3b:b4:c4:d0:1e:01:cc:db:fb:69:97:
         55:b7:60:70:47:1f:09:d0:65:f6:09:13:38:d9:33:fe:e4:08:
         19:e6:ab:fd:44:d3:3f:d6:81:29:db:3b:e5:1b:c0:75:ca:28:
         1b:49:43:89:16:02:c8:28:78:d0:42:70:08:9b:cc:dd:6d:94:
         e0:74:e8:47:ba:a3:2b:65:a7:12:cf:9b:ab:8b:ce:4f:9d:d2:
         5d:43:7c:d1:64:cd:d3:0b:d3:11:43:10:16:68:ba:b7:ad:84:
         c9:a2:3d:fa
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIURv1KAc8Q8AQkU+yfofz9WNjaJVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ2OTM4MkY3OUJBM0Q5RDlBMzJBOTg0OTQyMDI5QzQz
NDFBQjE2NzAeFw0yNDA0MDQyMDE4NDJaFw0yNTA0MDMyMDIzNDJaMDMxMTAvBgNV
BAMTKDQ3RTQ2QTM2MzE4M0JBQTRDQjA4RDA1QjM5NkQ4RUFDQzM0MjQwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFfiTQqfXxdLOs7IuGZsFTnwp
UI4tWzBSxYlBrOZNWi8TSZWalsFwk68nekS1DASeVXksa8SMuQfKtEkS1TDKzN88
7h4i02WQdfyUe/23q1BYz9p+ZyhMV1Xkywv1Gqy2RoLsBnO3mA1YCjzgeKIVrm8B
Bkf+cijPxFVQgBTHbIuqqyhZ7G8KVO0no/BnK+ULlnk2RIPPXVVWs2qPBHBt9ept
X9BGbDUvhTL0GkmY27v6cKHwaaXkRwZqLFKmIfMcDeeW7ULlHv3fEY0vHzmd3kBv
3xRmXa4n9N5shHw/Vsb6MfL6/FFOCGhgdnC8vMUWDLK/b+5Qrb4r9YpGX+WbAgMB
AAGjggJcMIICWDAdBgNVHQ4EFgQUR+RqNjGDuqTLCNBbOW2OrMNCQNMwHwYDVR0j
BBgwFoAUvWk4L3m6PZ2aMqmElCApxDQasWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZBcFFkcjNldWQySGpwM0hXRk52NkV1M3lBaXk3WE5vTjVpRlduWXFh
bzQvMS9CRDY5MzgyRjc5QkEzRDlEOUEzMkE5ODQ5NDIwMjlDNDM0MUFCMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JENjkzODJGNzlCQTNEOUQ5
QTMyQTk4NDk0MjAyOUM0MzQxQUIxNjcuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGQXBRZHIzZXVkMkhqcDNIV0ZOdjZFdTN5QWl5N1hOb041aUZXbllxYW80LzEv
MzIzODMwMzQzYTMzNjY2NDM4M2EzODM5MzQzNjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDMyMzYzNTM5MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgEP9iJRjANBgkqhkiG9w0BAQsF
AAOCAQEAdmKR5x2snTxfp7ty2SPXQJW/j5djtsgV7y7Kw0t0Up1ZZQ3fDoRsZXHe
d+H/ou5rxuYawwEw9BQlhluakMZmsEnw+Nqd2kCVqfzPFZXJvgxBXKfGkNd8ZnHt
ub8z3BNX1RZH0SAF3JLswDMOSNMiA3IU33g7GhhSbYC32ccbAEEVhR1MjxkXzvYE
aElhLmBmx1mxKVhPPju0xNAeAczb+2mXVbdgcEcfCdBl9gkTONkz/uQIGear/UTT
P9aBKds75RvAdcooG0lDiRYCyCh40EJwCJvM3W2U4HToR7qjK2WnEs+bq4vOT53S
XUN80WTN0wvTEUMQFmi6t62EyaI9+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org