Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a343030303a3a2f33342d3334203d3e20323637343233.roa
File:                     323830343a343134303a343030303a3a2f33342d3334203d3e20323637343233.roa (raw, json)
Hash identifier:          j4dEaETIRfCs3Mohv7MxXUk7oGtWDOgaiBX5zGMlvBM=
Subject key identifier:   82:CF:E7:42:C5:50:1D:0E:FD:5C:0C:8A:99:E0:3E:AF:65:0F:FB:5C
Certificate issuer:       /CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
Certificate serial:       60DCDBAEF8EFC0F21D13C3311DE92BF629115BC5
Authority key identifier: BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a343030303a3a2f33342d3334203d3e20323637343233.roa
Signing time:             Wed 03 Apr 2024 18:59:36 +0000
ROA not before:           Wed 03 Apr 2024 18:54:36 +0000
ROA not after:            Wed 02 Apr 2025 18:59:36 +0000
asID:                     267423
IP address blocks:        2804:4140:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:dc:db:ae:f8:ef:c0:f2:1d:13:c3:31:1d:e9:2b:f6:29:11:5b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
        Validity
            Not Before: Apr  3 18:54:36 2024 GMT
            Not After : Apr  2 18:59:36 2025 GMT
        Subject: CN=82CFE742C5501D0EFD5C0C8A99E03EAF650FFB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7f:f2:64:55:05:09:04:26:89:73:1f:fb:00:
                    81:c3:e1:9e:a5:5d:f8:bf:81:55:75:ec:38:23:85:
                    d1:f4:7a:31:14:60:e4:a1:92:70:6e:38:6f:b7:c9:
                    04:a6:03:f1:94:cf:53:d9:a7:f6:3f:60:4e:69:88:
                    e1:f9:d5:8b:37:30:7b:8a:b4:01:32:77:36:5d:ba:
                    a8:f1:6a:cb:ab:af:d5:04:91:98:7d:db:51:fe:29:
                    2e:ce:3f:ce:0a:79:6a:50:2c:f8:5a:c9:fb:0b:c5:
                    c0:18:c6:7e:03:21:a1:4d:cf:d6:6d:3d:79:04:50:
                    92:8d:5b:06:ea:c8:d1:b3:21:c8:7d:5d:0b:ff:0f:
                    01:fe:05:9e:c4:08:11:b1:81:01:b4:79:74:10:56:
                    9b:bc:f3:aa:80:b6:27:91:e4:33:55:1f:11:68:5f:
                    67:97:39:9e:f3:ce:57:8e:0a:07:d1:fa:40:af:6d:
                    a0:93:cd:16:49:15:4f:46:cc:d6:b4:7f:df:19:61:
                    c4:74:f5:13:bb:62:1b:a6:6f:21:03:f1:6b:61:15:
                    b1:1e:5f:95:0c:27:a2:40:18:94:8a:ec:1b:06:b5:
                    c4:70:ef:94:8a:47:f1:0b:55:62:a9:ec:5d:0d:19:
                    03:5d:b6:cf:71:e9:06:75:aa:42:b9:d7:4a:8f:9c:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:E7:42:C5:50:1D:0E:FD:5C:0C:8A:99:E0:3E:AF:65:0F:FB:5C
            X509v3 Authority Key Identifier:
                keyid:BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a343030303a3a2f33342d3334203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4140:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:d2:7e:6a:e0:3d:2d:cf:ff:78:ae:54:bd:64:33:99:43:b4:
         1a:9f:98:6c:82:63:5e:34:99:fc:fa:8f:6c:a7:b2:01:d2:2d:
         49:d9:46:ca:92:55:b6:43:20:ca:a8:85:b9:0b:3a:7a:a0:e8:
         25:71:ae:80:84:be:d8:03:f2:ec:af:04:14:ac:3f:fb:4c:2b:
         81:a3:e6:4a:6d:e7:82:06:70:3e:0a:7f:19:0a:1b:11:70:fa:
         6f:65:92:7c:08:0e:d0:a3:cb:1f:e3:bc:8c:0c:a0:7c:e8:c1:
         ff:ad:04:fe:56:39:89:39:51:2c:70:01:53:52:24:37:31:89:
         4c:73:41:86:6e:66:44:5e:47:10:aa:05:60:01:31:a9:46:54:
         28:ab:03:a8:88:63:3b:bc:9d:2b:0d:2d:f0:8e:d8:e8:4c:74:
         64:87:06:d0:00:83:40:99:a7:6f:fd:33:b8:4f:3c:c8:b7:86:
         a3:25:57:6c:dd:b2:cc:0e:c5:65:1a:91:9c:b0:94:cc:69:9d:
         46:26:36:21:c2:53:e0:ec:70:0e:41:42:52:d2:da:91:1b:d3:
         50:81:14:54:fd:92:81:f0:1f:94:8d:40:7a:5d:3e:0d:fb:91:
         95:4a:36:14:0e:a9:66:be:7c:be:7f:33:6e:9d:90:30:75:a3:
         f2:49:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org