Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a633030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a633030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          BamJU6KG6ghkJQwMfJ2EFyW+SiPxOHKrYGRIydrXWuU=
Subject key identifier:   19:F7:88:4D:55:07:5A:A0:92:BF:24:8F:BE:67:8E:D5:18:17:ED:F8
Certificate issuer:       /CN=BD69382F79BA3D9D9A32A984942029C4341AB167
Certificate serial:       2D1D08DC0225664F7E6F003E32DBFFB71611FC78
Authority key identifier: BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a633030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 04 Apr 2024 20:23:40 +0000
ROA not before:           Thu 04 Apr 2024 20:18:40 +0000
ROA not after:            Thu 03 Apr 2025 20:23:40 +0000
asID:                     265919
IP address blocks:        2804:3fd8:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:08:dc:02:25:66:4f:7e:6f:00:3e:32:db:ff:b7:16:11:fc:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69382F79BA3D9D9A32A984942029C4341AB167
        Validity
            Not Before: Apr  4 20:18:40 2024 GMT
            Not After : Apr  3 20:23:40 2025 GMT
        Subject: CN=19F7884D55075AA092BF248FBE678ED51817EDF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:20:21:10:63:e7:e1:ee:fd:7d:2a:cc:86:
                    d3:69:77:cc:1b:20:ee:39:84:d7:f0:10:c9:33:57:
                    36:2e:b1:08:92:c9:5a:d8:f7:42:bf:dd:17:a0:92:
                    51:0a:65:61:55:d6:7b:0d:04:72:f3:c0:29:ef:77:
                    b9:28:34:0f:51:bc:71:c7:2b:5d:ab:13:86:06:80:
                    99:3b:ec:c2:42:fa:69:3b:80:90:40:1f:e7:12:d5:
                    01:00:c8:05:16:7f:16:01:f5:13:29:be:4c:cf:fb:
                    c6:e8:13:9d:a0:65:c5:b8:7e:6f:9d:c4:9f:75:a3:
                    56:91:03:ec:24:39:f4:72:59:28:61:51:9c:94:a1:
                    f5:be:86:b6:e8:7c:4e:27:3e:ea:e6:d0:8d:91:69:
                    d8:cc:f0:08:52:6b:10:ce:3a:f6:e6:29:af:51:37:
                    dd:da:33:78:43:2f:09:38:ea:ed:7e:53:62:8e:14:
                    27:99:03:34:22:fe:b8:01:a3:e9:81:23:b4:80:ba:
                    bc:1f:bd:cf:89:d4:45:dc:59:f7:c9:81:25:8e:df:
                    d9:3d:64:5e:5a:9a:f6:62:61:b8:7b:35:27:03:e4:
                    3f:75:b2:9a:4b:5a:7e:38:5a:fb:a7:83:da:c0:e9:
                    23:e4:ff:bd:be:c7:d2:13:28:77:eb:8d:11:01:c3:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:88:4D:55:07:5A:A0:92:BF:24:8F:BE:67:8E:D5:18:17:ED:F8
            X509v3 Authority Key Identifier:
                keyid:BD:69:38:2F:79:BA:3D:9D:9A:32:A9:84:94:20:29:C4:34:1A:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/BD69382F79BA3D9D9A32A984942029C4341AB167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD69382F79BA3D9D9A32A984942029C4341AB167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/1/323830343a336664383a633030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:0b:bb:f8:33:fb:ae:66:a8:35:d7:e8:da:38:56:c4:64:
         85:b3:c5:d4:42:7b:a8:1b:4e:33:01:8a:f6:c0:44:e5:39:0d:
         ba:96:07:13:61:59:21:b5:4c:5d:3e:4c:60:46:b9:80:11:e5:
         92:dc:a2:d6:86:06:96:6c:32:a5:cd:59:26:bb:8c:f8:af:95:
         c9:6e:7b:d8:3d:2a:68:41:0a:04:42:39:7d:53:01:8c:95:b7:
         d7:72:74:b3:61:19:8a:ef:3a:3f:7a:90:2c:5a:b6:37:38:e3:
         b5:61:28:d9:93:37:d0:1f:a5:f2:89:8e:30:f3:2b:1d:67:5e:
         9f:cb:4f:09:07:8a:96:b8:20:ac:05:35:31:02:92:6b:4c:68:
         ac:30:a0:d0:b6:ec:86:a3:c1:41:29:0c:01:4f:c7:4c:95:0b:
         ca:76:66:cf:7d:ab:13:a9:f2:1e:af:3f:4f:ec:98:a8:c4:0d:
         5c:00:80:1f:5d:15:5a:f3:f4:39:77:df:57:3b:1b:20:8c:31:
         96:8e:24:af:4c:3a:20:39:45:46:46:bc:2c:e7:98:8a:ff:eb:
         cb:ba:cc:1d:75:1b:6c:9b:3a:b6:08:03:87:60:70:9a:98:09:
         e8:49:33:a1:3e:59:54:a1:8f:7f:96:8a:bc:5d:fb:6e:31:92:
         48:8d:b3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org