Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3a2f33322d3332203d3e20323635393139.roa
File:                     323830343a336664383a3a2f33322d3332203d3e20323635393139.roa (raw, json)
Hash identifier:          T1HVUE8iOWK2WqZGHb5Qu70druxxPA3ytYXmymd6HzE=
Subject key identifier:   C9:65:DE:84:5D:F5:B3:CF:36:B1:70:5C:13:2C:49:2F:85:83:7F:CA
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       71F0305701D7B43FF965CEFAF0A923F0204578CA
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3a2f33322d3332203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:41 +0000
ROA not before:           Thu 04 Apr 2024 20:18:41 +0000
ROA not after:            Thu 03 Apr 2025 20:23:41 +0000
asID:                     265919
IP address blocks:        2804:3fd8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f0:30:57:01:d7:b4:3f:f9:65:ce:fa:f0:a9:23:f0:20:45:78:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:41 2024 GMT
            Not After : Apr  3 20:23:41 2025 GMT
        Subject: CN=C965DE845DF5B3CF36B1705C132C492F85837FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:f6:93:73:18:5b:5d:4d:45:d8:5c:13:9c:
                    d2:27:23:7b:5a:48:6e:3e:ab:21:b4:40:00:75:71:
                    e7:9e:16:89:42:98:5a:8f:da:de:e6:11:ca:68:60:
                    c8:b7:a1:c4:4b:32:49:28:08:91:9e:9f:bc:74:49:
                    04:d5:0e:73:a1:be:50:0a:73:de:76:a6:96:f3:14:
                    76:fe:59:7d:46:ba:70:9d:98:39:5c:ab:09:bd:10:
                    29:40:9d:54:05:d3:1a:2f:8c:be:7f:16:9f:a2:44:
                    f1:89:de:bb:01:d9:b5:80:22:e7:c4:a4:69:a4:d8:
                    76:3c:0c:a5:14:f3:3f:03:af:de:8d:ad:38:6e:de:
                    95:7c:65:76:78:15:2a:32:e6:19:02:63:f3:c2:5d:
                    9a:8d:0e:2e:16:31:43:35:6d:b0:57:cf:c5:a3:a6:
                    45:21:06:71:bd:b1:43:0b:06:17:b0:6e:25:48:9a:
                    4b:a8:e1:cc:78:59:f4:76:ea:c7:c8:d0:a7:f1:3e:
                    5e:83:ca:6d:8e:9b:8d:72:09:84:f4:a5:7f:56:e8:
                    a1:5f:c9:7a:a7:54:80:31:35:66:30:53:64:b7:89:
                    e5:fc:ae:75:8a:58:55:b2:8c:b4:9b:39:3f:65:59:
                    49:26:49:4b:e0:dc:05:af:d3:4b:2f:51:4e:b2:b9:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:65:DE:84:5D:F5:B3:CF:36:B1:70:5C:13:2C:49:2F:85:83:7F:CA
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3a2f33322d3332203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:85:4b:f8:25:82:7c:8a:77:6a:1d:1a:ae:9a:3e:9e:59:ff:
         e2:21:da:e6:54:3e:f7:d4:97:52:8e:82:8a:a6:a7:8d:ac:89:
         e8:d9:74:38:87:52:c6:66:67:cf:00:dd:63:33:2d:5a:57:3d:
         8f:23:7c:55:b3:67:24:c7:d8:5f:a8:0b:8a:e1:fd:4f:28:a0:
         1f:06:c1:c0:f4:a4:11:17:86:9f:9e:ae:d9:ab:3f:ab:75:f4:
         bd:12:ff:d1:ce:2d:da:32:9e:e6:b9:23:56:8a:b2:3a:26:5a:
         79:9b:2f:fc:1a:cb:98:0c:92:4e:0c:c5:15:c0:53:37:15:74:
         b7:7a:31:7b:15:9c:7f:a0:38:91:9e:f0:44:43:24:89:4b:f6:
         2c:75:47:f3:2f:be:7b:c1:0c:07:99:7a:a8:82:ca:d7:2a:63:
         00:f8:6e:4a:9f:37:a3:53:5e:a2:88:e7:d7:39:e7:e9:36:1e:
         39:00:22:1d:12:a2:c8:2d:61:c0:45:d6:34:32:92:9f:2d:eb:
         48:c3:a5:dc:6f:d2:1d:b5:4e:68:66:e8:93:4c:0a:52:6a:dd:
         ee:71:2b:ae:90:bb:14:ef:32:bd:5e:56:f6:cb:87:cb:74:0e:
         51:14:0b:90:1a:0d:48:81:27:7d:b9:19:54:01:5d:3f:03:ac:
         bb:70:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org