Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/323830343a336162383a3a2f33322d313238203d3e20323636313035.roa
File:                     323830343a336162383a3a2f33322d313238203d3e20323636313035.roa (raw, json)
Hash identifier:          PcX3B2uW/HYH1pZVVsjsZYlGBWAeNw/nwiaBIJ0l9y0=
Subject key identifier:   A5:1E:01:79:6D:57:F2:92:79:83:54:54:4E:AB:DD:90:07:29:04:DC
Certificate issuer:       /CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
Certificate serial:       04B9897E27FA173E2FB13D168DBF3ED8CFF468A4
Authority key identifier: BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/323830343a336162383a3a2f33322d313238203d3e20323636313035.roa
Signing time:             Thu 04 Apr 2024 04:17:41 +0000
ROA not before:           Thu 04 Apr 2024 04:12:41 +0000
ROA not after:            Thu 03 Apr 2025 04:17:41 +0000
asID:                     266105
IP address blocks:        2804:3ab8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b9:89:7e:27:fa:17:3e:2f:b1:3d:16:8d:bf:3e:d8:cf:f4:68:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDED1ED39E25BB8119504E29E3014EC3968ECCEA
        Validity
            Not Before: Apr  4 04:12:41 2024 GMT
            Not After : Apr  3 04:17:41 2025 GMT
        Subject: CN=A51E01796D57F292798354544EABDD90072904DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:48:69:84:3e:b4:ab:73:06:b5:53:d0:f1:
                    ea:21:24:eb:92:76:5f:97:c0:52:69:83:a3:c7:39:
                    22:bd:15:45:f4:4a:d2:5e:7f:e7:e3:48:0f:1d:52:
                    42:6b:8a:99:2d:74:e6:e2:d8:7b:5a:93:36:39:0e:
                    e1:0c:b5:8e:03:6d:d5:6f:97:9e:8c:d3:bf:bb:06:
                    e3:b0:22:79:9e:4f:df:d8:b5:29:78:7e:22:6c:42:
                    47:6b:b0:d8:2e:4e:e6:56:cc:f0:82:37:1b:1c:d8:
                    c4:e2:85:7c:fa:ef:9c:88:45:bb:00:3d:77:d3:ef:
                    31:9e:34:5e:aa:29:f8:fb:57:ed:ab:a8:4f:ce:5c:
                    a3:93:db:e6:92:38:b4:0d:9d:56:b2:60:a9:a6:22:
                    45:cd:ba:0f:ea:8c:d8:9f:d9:f4:af:7d:c6:92:73:
                    df:ee:74:8e:c8:ad:67:e4:55:7b:d9:3e:85:ee:52:
                    6d:10:fe:83:e6:8f:db:0b:24:56:50:13:32:c7:3a:
                    e4:ac:d2:7c:cb:9e:b0:49:5b:9c:05:f0:1b:ff:81:
                    da:4f:90:8b:da:61:2e:64:42:ec:af:7f:00:93:fb:
                    ee:17:61:86:03:68:d7:3a:d3:d2:de:ed:85:a1:94:
                    3f:e4:77:b8:c7:60:f1:a4:65:b2:e6:38:55:25:71:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1E:01:79:6D:57:F2:92:79:83:54:54:4E:AB:DD:90:07:29:04:DC
            X509v3 Authority Key Identifier:
                keyid:BD:ED:1E:D3:9E:25:BB:81:19:50:4E:29:E3:01:4E:C3:96:8E:CC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDED1ED39E25BB8119504E29E3014EC3968ECCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/1/323830343a336162383a3a2f33322d313238203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:72:54:9b:a2:09:21:a6:4a:4d:34:e1:fb:89:d3:cd:93:c3:
         d7:78:f7:38:f4:3c:78:e7:15:3c:1d:3a:ad:27:d0:e2:d3:d8:
         05:ce:bd:fb:fe:e2:34:c2:ed:a0:41:d4:2e:0f:02:eb:0e:b9:
         31:35:6b:23:0c:74:90:79:2a:66:69:b2:8a:69:38:be:6b:ca:
         f7:c5:8b:86:7d:6c:c8:bb:cc:df:ec:55:2f:3a:90:58:96:82:
         d2:88:29:e2:bd:bf:ec:2c:4c:61:71:f2:4e:e9:83:4f:9a:5a:
         ed:a3:35:56:57:a2:d2:84:a1:1e:f7:97:48:31:54:80:04:d6:
         2b:a9:1f:c9:60:64:d2:f0:57:5d:27:08:5b:4f:a5:0e:08:30:
         b8:f8:43:03:f1:48:0c:c7:6e:fc:4a:13:ff:64:46:65:a8:8c:
         27:b0:36:65:bc:fc:f8:f6:23:61:02:78:58:3a:a1:03:e3:e5:
         8f:e4:0d:9e:71:a3:3f:9e:73:1e:1b:40:19:37:0d:90:4e:eb:
         77:29:1a:72:4c:1c:14:96:9f:ee:ae:12:38:fb:3c:06:53:29:
         3f:b3:2e:6f:de:b5:98:ff:b5:1c:d3:58:6e:2f:55:d5:a0:38:
         8b:7f:d8:b8:2c:54:31:34:4d:01:e1:2d:d4:97:07:19:81:6c:
         c6:4e:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org