Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          NHaIqpKmcLAeQCxQjtJI+hkxHg6CD+1cInzBJo2joCw=
Subject key identifier:   B1:AE:38:FD:3A:F8:40:9C:FF:E0:4C:80:41:5C:B8:97:3B:FC:5F:C3
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       44DE7879742F391F2D39E87D359F71A5F69AB881
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:42 +0000
ROA not before:           Thu 04 Apr 2024 20:18:42 +0000
ROA not after:            Thu 03 Apr 2025 20:23:42 +0000
asID:                     265919
IP address blocks:        2804:3fd8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:de:78:79:74:2f:39:1f:2d:39:e8:7d:35:9f:71:a5:f6:9a:b8:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:42 2024 GMT
            Not After : Apr  3 20:23:42 2025 GMT
        Subject: CN=B1AE38FD3AF8409CFFE04C80415CB8973BFC5FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:83:9b:8a:be:71:cd:10:10:37:15:2b:9d:
                    55:d4:41:1c:71:2a:62:8f:e1:6a:43:fe:d9:8b:96:
                    d1:ee:0b:5d:91:47:f6:47:9b:f1:3d:4c:96:c1:a1:
                    fd:59:cd:3e:54:f0:fb:7f:00:4a:56:29:0a:82:4b:
                    1d:0c:fe:c9:d6:d3:4a:e6:be:d0:83:19:8d:ca:d8:
                    b8:3c:b4:67:0a:fc:0d:63:98:3d:a3:4b:b5:23:4a:
                    57:1b:d9:da:c1:de:10:7c:05:c7:3e:26:ae:90:0c:
                    87:9a:8a:68:c8:16:97:46:23:e1:7a:cf:eb:e0:87:
                    22:8a:a1:00:4c:47:8b:ea:7f:67:63:7a:d3:45:50:
                    c8:ba:96:00:cb:c0:2a:51:f3:d1:55:e7:1d:91:64:
                    99:25:85:b5:e2:9d:14:ff:fb:19:9c:6c:3a:52:77:
                    eb:e3:b9:a3:cf:75:53:d4:c1:73:e7:3c:f0:bd:34:
                    71:d4:d6:8f:f6:40:78:e3:a6:0b:d8:5a:4e:66:4b:
                    d5:67:30:88:db:56:dd:25:10:27:2c:e6:33:b1:d5:
                    16:df:c3:ac:b2:11:7a:07:8c:f8:9c:37:a5:10:a1:
                    e1:23:af:8e:77:80:d7:28:97:c1:22:47:b7:e4:f7:
                    be:b1:01:c2:5e:87:52:8c:14:16:2a:9d:25:b1:7a:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AE:38:FD:3A:F8:40:9C:FF:E0:4C:80:41:5C:B8:97:3B:FC:5F:C3
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:90:dc:2d:fc:ba:36:b8:b4:e9:83:43:50:5d:c3:c1:88:48:
         ca:91:e4:0a:29:23:67:30:f1:b5:11:dc:a4:35:c8:55:4d:f4:
         85:e5:f8:af:a4:49:01:8a:d6:f6:6a:a9:d2:5a:39:3c:6e:08:
         41:69:7b:43:dc:bc:55:b2:e7:88:50:df:b1:e2:8b:b8:cd:a0:
         49:a0:e5:b9:37:b2:83:ee:ac:87:1b:63:67:c8:ec:d2:cb:4d:
         d0:9b:f0:22:51:db:03:47:a1:83:3f:61:f5:85:60:cf:ce:91:
         02:b5:35:2f:03:41:97:52:85:b8:45:83:8b:67:c9:3d:e0:fa:
         aa:7f:c0:4d:62:63:3b:4f:9d:83:f1:2b:c9:60:d7:d9:60:b4:
         ed:8f:bf:79:9f:7a:aa:66:44:2e:ce:7a:fb:51:8a:0b:50:7c:
         cb:e9:8d:79:0f:4c:84:c7:8a:1c:65:8a:1e:c9:8f:61:ae:f9:
         ad:19:21:d8:ad:fa:00:84:83:bb:fd:0b:2b:df:24:df:90:7d:
         9a:34:2d:91:0b:fe:b9:53:eb:6b:76:0c:ec:f6:fe:8d:b5:e5:
         a3:7b:9a:1e:19:c0:3a:a2:68:e4:f7:6e:03:a1:fd:e4:c3:30:
         6c:9c:17:ae:a2:5c:6f:a1:88:6d:63:10:db:d3:71:c0:a0:00:
         cb:7c:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org