Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/323830343a3236303a3a2f33322d3438203d3e203533323134.roa
File:                     323830343a3236303a3a2f33322d3438203d3e203533323134.roa (raw, json)
Hash identifier:          qhv32toLukMWXDNvTHjM+6WrZEihv9fnlQDYYXCqzCw=
Subject key identifier:   18:11:15:8D:57:40:2E:8F:34:D4:6B:87:6C:36:FC:D6:1E:83:B3:56
Certificate issuer:       /CN=38AF302A45034FC3FCFBBA0527B11CEE43AA74F3
Certificate serial:       37A402E23AB62974957B1D045760B7CE55911639
Authority key identifier: 38:AF:30:2A:45:03:4F:C3:FC:FB:BA:05:27:B1:1C:EE:43:AA:74:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AF302A45034FC3FCFBBA0527B11CEE43AA74F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/323830343a3236303a3a2f33322d3438203d3e203533323134.roa
Signing time:             Wed 15 Sep 2021 12:36:51 +0000
ROA not before:           Wed 15 Sep 2021 12:31:51 +0000
ROA not after:            Wed 14 Sep 2022 12:36:51 +0000
asID:                     53214
IP address blocks:        2804:260::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a4:02:e2:3a:b6:29:74:95:7b:1d:04:57:60:b7:ce:55:91:16:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38AF302A45034FC3FCFBBA0527B11CEE43AA74F3
        Validity
            Not Before: Sep 15 12:31:51 2021 GMT
            Not After : Sep 14 12:36:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:8c:ff:8d:97:9d:78:9e:58:c4:e1:37:90:
                    f3:c6:6c:bd:be:93:02:4c:bc:22:45:34:fb:d4:d2:
                    22:bf:6f:30:95:6d:6f:a2:ad:8d:a0:a2:fe:ad:97:
                    eb:d7:f6:48:ec:ae:63:57:31:18:82:3e:e0:17:9c:
                    8c:f9:ea:23:65:7f:50:8d:b2:73:01:73:c9:28:96:
                    5e:dc:51:09:0a:2f:7c:78:23:b1:b6:e5:4a:0d:de:
                    df:d6:e9:c0:fd:de:22:93:f6:39:b0:e1:98:2b:46:
                    60:62:00:a8:b1:4a:4e:af:72:fa:83:f3:ea:36:0e:
                    e8:ad:65:52:2d:95:ee:30:87:99:55:4d:72:2c:5e:
                    95:bd:d2:fa:96:42:fc:e4:b6:bc:b7:2d:e8:9d:7c:
                    c1:c0:84:07:db:f7:0f:52:51:43:e4:86:58:15:0d:
                    5f:2d:89:cc:6f:d4:02:3e:5c:3f:bc:61:a2:23:9e:
                    27:1c:7c:60:07:8e:ad:4e:c1:52:15:a5:40:9f:98:
                    77:81:53:48:79:6b:ab:a1:e6:ce:37:8e:b8:32:57:
                    7f:a0:a5:b1:1c:ea:76:38:75:74:e5:c1:57:1b:82:
                    f3:78:c8:26:91:33:42:67:6e:6d:c2:1b:15:25:56:
                    02:ec:69:d2:7c:3b:ac:a8:ae:b7:6c:ea:4f:1a:84:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:11:15:8D:57:40:2E:8F:34:D4:6B:87:6C:36:FC:D6:1E:83:B3:56
            X509v3 Authority Key Identifier:
                keyid:38:AF:30:2A:45:03:4F:C3:FC:FB:BA:05:27:B1:1C:EE:43:AA:74:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/38AF302A45034FC3FCFBBA0527B11CEE43AA74F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AF302A45034FC3FCFBBA0527B11CEE43AA74F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/371XwPGVbALNHEq2HbyHF2uDkHZrrqWTfNvLxpjbiHVv/0/323830343a3236303a3a2f33322d3438203d3e203533323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:260::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:cb:e8:45:65:ff:1f:37:36:32:4f:b2:4d:90:9a:99:66:
         37:d1:36:a3:ea:79:c1:d1:b1:e7:30:79:54:10:86:aa:97:c4:
         77:99:d6:bb:98:8b:3a:d3:b1:41:11:55:b1:76:a8:36:88:3d:
         7e:5b:4b:99:a8:24:2b:00:72:a4:22:01:07:76:93:2f:24:fb:
         e3:9a:79:66:93:71:97:38:a0:15:49:69:c0:c6:ff:97:8c:39:
         6a:94:7e:50:69:78:4a:53:1c:7d:a7:b3:6f:12:b9:3a:08:f2:
         32:c7:ec:ec:99:65:74:10:b0:fa:0c:7f:51:62:8c:52:43:ab:
         fd:07:4d:fd:da:9b:c0:3b:e5:c6:19:a0:ab:22:f0:fc:9a:9e:
         04:27:6b:ed:bc:c4:51:54:ac:1d:c4:40:8e:20:ad:cb:8a:7d:
         b9:ab:e5:e9:d4:95:b3:77:37:27:ac:8e:58:f1:e9:32:d1:19:
         97:44:41:8c:62:6b:a9:c4:53:98:c1:6f:28:fb:45:44:7f:40:
         85:47:61:89:ff:8c:89:a0:e1:f7:5a:d2:7a:ef:5f:19:e4:fe:
         86:f2:e5:ed:0b:9f:1f:5a:97:6f:f5:2c:d8:ad:6e:d7:ee:81:
         e9:5e:fc:ca:e4:11:b0:54:cb:ba:76:49:a4:b3:94:43:1d:e1:
         e9:72:15:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org