Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a3a2f33322d3332203d3e20323637343233.roa
File:                     323830343a343134303a3a2f33322d3332203d3e20323637343233.roa (raw, json)
Hash identifier:          tAmLFWBYLDxqCgdKla8zaST9P63Ge3wd/gGdvTwlYSU=
Subject key identifier:   24:E0:21:F2:10:1C:00:20:1A:4B:7F:1A:7C:38:E2:3D:BE:FE:72:2B
Certificate issuer:       /CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
Certificate serial:       3BC7B9EDB0770A92469BB6BA9BCC21699AFEDD45
Authority key identifier: BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a3a2f33322d3332203d3e20323637343233.roa
Signing time:             Wed 03 Apr 2024 18:59:35 +0000
ROA not before:           Wed 03 Apr 2024 18:54:35 +0000
ROA not after:            Wed 02 Apr 2025 18:59:35 +0000
asID:                     267423
IP address blocks:        2804:4140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c7:b9:ed:b0:77:0a:92:46:9b:b6:ba:9b:cc:21:69:9a:fe:dd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
        Validity
            Not Before: Apr  3 18:54:35 2024 GMT
            Not After : Apr  2 18:59:35 2025 GMT
        Subject: CN=24E021F2101C00201A4B7F1A7C38E23DBEFE722B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:c9:05:09:73:94:4a:50:e1:50:7e:29:e1:
                    1f:97:47:61:60:d1:cd:fd:5d:94:2b:91:7e:eb:8f:
                    9d:03:75:41:ae:69:34:95:88:4b:99:84:6e:e9:97:
                    5d:79:88:9c:01:e5:70:6f:c1:90:43:e6:f6:79:f8:
                    f2:ac:22:d3:bb:a2:49:ce:7c:86:97:0c:23:5b:de:
                    76:8c:ba:2f:8c:91:8b:a6:a3:e3:f7:4a:6a:44:24:
                    fc:7b:e3:42:0e:2a:6f:3c:56:c5:19:4e:6e:64:c9:
                    98:89:72:65:57:99:67:51:33:fd:57:74:c8:06:29:
                    84:4b:fd:03:c5:2e:ff:c1:2d:be:6d:c9:09:47:9b:
                    ea:25:ee:dd:d1:82:3a:51:06:c5:61:d2:7e:da:41:
                    d8:29:5e:55:70:24:05:f4:e5:f3:86:19:61:27:e4:
                    ee:eb:23:c2:6c:19:bd:bf:80:f0:d2:6b:44:c7:32:
                    60:6c:9b:19:40:75:67:b6:10:b2:24:8a:16:ba:68:
                    6e:cd:54:b8:20:9a:ed:2a:c4:36:2c:3b:9c:fa:8d:
                    47:c1:4f:55:cf:5c:ba:62:33:bf:72:37:26:fa:ec:
                    9b:ef:5b:ed:9c:0e:55:ee:49:fe:55:75:44:5e:cd:
                    2c:1a:a6:40:20:61:dd:e8:35:f1:31:91:08:b7:4c:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:21:F2:10:1C:00:20:1A:4B:7F:1A:7C:38:E2:3D:BE:FE:72:2B
            X509v3 Authority Key Identifier:
                keyid:BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a3a2f33322d3332203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4140::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:cf:ba:7f:13:70:49:e7:e9:0c:92:d9:9d:99:37:6d:2a:d2:
         c8:dd:cc:ea:0d:04:2b:ed:04:59:e8:7e:26:ad:93:d2:34:c8:
         b0:e7:03:13:f9:67:ef:7d:62:b0:78:75:8f:79:f9:a5:5d:5e:
         5a:e7:d9:ad:43:cd:46:dd:92:f8:f2:6d:a0:f5:3a:96:79:3b:
         1f:20:1e:6d:44:5a:6e:64:56:1d:3e:0d:e8:78:1c:a7:3f:58:
         7e:67:37:cb:bc:e4:f2:a4:3c:03:70:b2:aa:a3:c4:b5:ff:7b:
         c2:f7:30:37:34:12:5d:21:a9:be:80:a6:a6:9c:fd:1f:bc:4b:
         08:37:15:e0:6d:91:82:d9:bb:be:f7:ac:32:36:00:19:bb:51:
         0b:21:9d:6a:69:fa:a8:50:95:91:73:45:4d:f3:1a:31:50:b4:
         6c:8d:05:2b:cf:73:a9:98:13:3b:c0:3c:3e:33:60:39:2e:3d:
         63:39:88:c4:70:07:15:31:e6:4a:a5:77:9e:b4:61:b2:1e:9c:
         62:51:6f:86:82:16:54:4a:94:9b:e7:2e:d1:49:54:37:86:a4:
         f9:5b:8c:4e:29:c4:b1:58:ab:75:b2:86:bd:be:92:c2:94:90:
         34:ac:39:da:3d:5d:28:fa:4f:8e:f4:31:92:4a:c8:7b:c0:bb:
         bf:10:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org