Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a3a2f33342d3334203d3e20323637343233.roa
File:                     323830343a343134303a3a2f33342d3334203d3e20323637343233.roa (raw, json)
Hash identifier:          6td4/IwlADs1USChuDsWmVneOYYbJwh3GnzkSkGsals=
Subject key identifier:   30:01:B0:42:CE:28:98:A9:E9:1E:D0:D7:6F:49:BF:0A:19:4E:2F:32
Certificate issuer:       /CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
Certificate serial:       3FA7B3A85654336C69DB603B5C5E2A594BA16A0F
Authority key identifier: BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a3a2f33342d3334203d3e20323637343233.roa
Signing time:             Wed 03 Apr 2024 18:59:36 +0000
ROA not before:           Wed 03 Apr 2024 18:54:36 +0000
ROA not after:            Wed 02 Apr 2025 18:59:36 +0000
asID:                     267423
IP address blocks:        2804:4140::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a7:b3:a8:56:54:33:6c:69:db:60:3b:5c:5e:2a:59:4b:a1:6a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0ABABF52B8E6785B15256C7FD495224ABEDA31
        Validity
            Not Before: Apr  3 18:54:36 2024 GMT
            Not After : Apr  2 18:59:36 2025 GMT
        Subject: CN=3001B042CE2898A9E91ED0D76F49BF0A194E2F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:34:64:55:d4:47:dd:94:2a:38:31:ce:d7:
                    be:ac:47:fb:4f:86:1a:cd:ab:b0:fb:27:37:6a:09:
                    b5:04:ce:87:71:45:2b:39:5e:a0:43:bd:ba:59:e3:
                    73:bf:63:ce:0b:ab:e4:ab:75:b4:6c:fb:dd:d4:a9:
                    ff:0a:31:c0:a0:cf:b1:c1:57:09:f5:96:a1:d5:ca:
                    44:cd:e9:6c:9d:01:df:4a:6b:96:f2:78:d6:4c:a9:
                    53:6e:eb:42:63:2d:d7:ba:e1:80:77:96:97:fb:27:
                    3c:df:dc:a5:26:51:26:4d:0a:ed:a4:83:ea:b1:a4:
                    17:4b:55:d6:be:31:9d:13:da:3d:29:84:19:8a:75:
                    72:4f:e1:08:1f:8d:d7:5e:24:94:cd:2f:e1:3f:38:
                    9f:5b:9a:be:ba:fa:18:38:55:4a:68:f2:43:53:f7:
                    61:a9:f9:1b:b7:6a:97:3a:3d:06:1e:d0:01:27:7e:
                    5e:90:52:fb:3a:e1:1d:23:28:81:ee:42:00:39:fa:
                    91:6e:a0:e4:5a:3b:60:52:21:0a:73:a0:f7:99:73:
                    d2:26:e9:b1:9c:e4:63:0d:8a:60:ea:7c:d0:f7:9d:
                    01:28:93:3f:38:79:32:fa:4b:a0:78:4a:0e:0f:b9:
                    09:4a:9d:42:3b:14:22:a5:f1:4a:e5:a4:35:a2:59:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:B0:42:CE:28:98:A9:E9:1E:D0:D7:6F:49:BF:0A:19:4E:2F:32
            X509v3 Authority Key Identifier:
                keyid:BF:0A:BA:BF:52:B8:E6:78:5B:15:25:6C:7F:D4:95:22:4A:BE:DA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF0ABABF52B8E6785B15256C7FD495224ABEDA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/1/323830343a343134303a3a2f33342d3334203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4140::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:23:2c:e7:89:08:24:8c:66:d5:9f:f9:f6:1d:a1:34:3a:fe:
         fe:f5:44:21:13:22:3a:da:39:ad:b1:eb:ee:a8:e6:ff:f8:45:
         0a:8c:16:da:0c:27:37:75:59:e1:c9:d2:77:cb:3f:ff:dd:27:
         6d:13:a2:50:5f:38:f8:e8:41:76:02:40:91:b9:b2:93:8e:a6:
         88:06:3a:cf:b9:42:e2:6c:6f:b1:10:b3:1c:1a:78:f5:70:32:
         f2:1e:6b:8d:15:3a:46:37:13:98:df:4b:e0:b4:33:63:6c:2b:
         d9:d3:e2:46:05:79:f6:e6:f3:f9:20:7c:31:58:a5:70:9c:48:
         94:4e:92:2c:bf:00:ce:73:55:da:83:6d:e4:a1:f4:bc:a2:f6:
         ea:28:eb:16:b9:a4:77:71:2a:8c:e1:34:e3:42:05:8a:42:e2:
         24:f2:08:ee:e7:cc:1d:2d:ae:51:bf:17:d4:2e:fa:22:f6:92:
         73:48:b1:c2:7f:cf:69:21:fb:3b:73:e2:49:67:33:fd:74:5e:
         8c:ee:f4:a2:30:d9:9e:79:12:58:7a:3b:50:be:90:1a:11:74:
         42:f3:eb:41:e9:68:de:00:14:9b:9a:dd:c8:de:48:1f:7b:e4:
         a2:4e:0b:4a:8a:18:ae:f8:d8:e2:02:09:71:b6:0b:ed:e2:b2:
         92:dd:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org