Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a633030303a3a2f3334203d3e20323636303230.roa
File:                     323830343a333933633a633030303a3a2f3334203d3e20323636303230.roa (raw, json)
Hash identifier:          Zi0uLHhc6MSSJxwc0ZG7ptJpNFmho5MJEsJpY8G+15I=
Subject key identifier:   E8:60:B5:48:B3:A9:2E:97:5C:99:2F:D2:21:6C:77:07:6E:E3:ED:FF
Certificate issuer:       /CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
Certificate serial:       185DB3539E5D9B9E0356A074CEF98309B1C94555
Authority key identifier: 9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a633030303a3a2f3334203d3e20323636303230.roa
Signing time:             Wed 17 Jan 2024 15:00:02 +0000
ROA not before:           Wed 17 Jan 2024 14:55:02 +0000
ROA not after:            Fri 17 Jan 2025 15:00:02 +0000
asID:                     266020
IP address blocks:        2804:393c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5d:b3:53:9e:5d:9b:9e:03:56:a0:74:ce:f9:83:09:b1:c9:45:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82367026AF19E52BC80C942DEF8DA09D76AEF3
        Validity
            Not Before: Jan 17 14:55:02 2024 GMT
            Not After : Jan 17 15:00:02 2025 GMT
        Subject: CN=3082010A0282010100BF3E0FBDB3AC23F618E2BA418144C00B672E2B297FB23613B0D1D2C0DB935DFD627B8E0DF11625EFA7EEC7BB7AA15121E41E2642F56F604667155F710CBB99E5B99FA8A035C2BF14C4AF102DEEA2F36BADBFDBDC2FBC0DE2BFC3428640320E3AE0093DACA4AD764E90EEE22D4A6D03F8A92B0EAE8A2E23C8FABF97BF14BC2A18645BF4BEC327B35D186B05BEC76C77AF9582445EB9573B87C37A4E45EEA08FE1B16EF6AD806FE8FCBD967DC6B470CB1B7C3DE8F0019DF8337261BB61A87660F6063E3B07BD67D1624B73EE81F0AAD301EBAD87D51109A535F3816161EBF938B99E97F6CEEB426AE2C36781246E54334010E7D6EAB9E0C8C2D5594A8103B6923D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:0f:bd:b3:ac:23:f6:18:e2:ba:41:81:44:
                    c0:0b:67:2e:2b:29:7f:b2:36:13:b0:d1:d2:c0:db:
                    93:5d:fd:62:7b:8e:0d:f1:16:25:ef:a7:ee:c7:bb:
                    7a:a1:51:21:e4:1e:26:42:f5:6f:60:46:67:15:5f:
                    71:0c:bb:99:e5:b9:9f:a8:a0:35:c2:bf:14:c4:af:
                    10:2d:ee:a2:f3:6b:ad:bf:db:dc:2f:bc:0d:e2:bf:
                    c3:42:86:40:32:0e:3a:e0:09:3d:ac:a4:ad:76:4e:
                    90:ee:e2:2d:4a:6d:03:f8:a9:2b:0e:ae:8a:2e:23:
                    c8:fa:bf:97:bf:14:bc:2a:18:64:5b:f4:be:c3:27:
                    b3:5d:18:6b:05:be:c7:6c:77:af:95:82:44:5e:b9:
                    57:3b:87:c3:7a:4e:45:ee:a0:8f:e1:b1:6e:f6:ad:
                    80:6f:e8:fc:bd:96:7d:c6:b4:70:cb:1b:7c:3d:e8:
                    f0:01:9d:f8:33:72:61:bb:61:a8:76:60:f6:06:3e:
                    3b:07:bd:67:d1:62:4b:73:ee:81:f0:aa:d3:01:eb:
                    ad:87:d5:11:09:a5:35:f3:81:61:61:eb:f9:38:b9:
                    9e:97:f6:ce:eb:42:6a:e2:c3:67:81:24:6e:54:33:
                    40:10:e7:d6:ea:b9:e0:c8:c2:d5:59:4a:81:03:b6:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:60:B5:48:B3:A9:2E:97:5C:99:2F:D2:21:6C:77:07:6E:E3:ED:FF
            X509v3 Authority Key Identifier:
                keyid:9B:82:36:70:26:AF:19:E5:2B:C8:0C:94:2D:EF:8D:A0:9D:76:AE:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9B82367026AF19E52BC80C942DEF8DA09D76AEF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a633030303a3a2f3334203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:20:23:97:75:f4:a6:ae:de:44:ad:4f:55:cd:d4:76:49:7b:
         85:8e:3e:55:9d:a2:a9:40:5d:42:43:eb:9d:db:dd:1a:76:6f:
         54:5d:37:75:61:6f:dc:bf:c7:d7:98:8b:80:23:19:55:60:25:
         bd:1c:7a:a4:69:ef:a2:e4:f9:be:3b:04:6d:b6:ad:b3:c6:4b:
         ff:5d:75:d8:21:a8:2b:60:56:61:cf:4a:d6:80:06:90:39:77:
         e1:b8:98:0b:08:08:85:fc:14:7d:b5:32:63:ef:35:66:86:cc:
         73:c0:dd:f3:94:7f:05:7d:49:ab:c9:b7:24:50:89:19:44:7e:
         b4:c3:5e:1c:9e:06:f2:7c:29:a0:ed:c9:d8:d9:17:10:72:9f:
         a2:39:3f:0b:11:70:90:8b:b4:0b:67:63:c6:bf:5c:7d:da:5e:
         af:ee:34:fc:2e:b8:18:fa:43:29:09:fb:b9:08:50:3a:dd:13:
         93:74:22:4a:92:d1:c8:e8:fb:f5:f3:76:ff:eb:9b:dd:4c:90:
         3f:a6:e0:42:a6:b6:0f:f2:ce:33:0e:42:f0:2c:84:05:ad:62:
         8b:29:32:f4:54:88:ee:0c:c0:d2:10:de:5e:08:cd:80:58:97:
         1d:d3:17:3a:47:7c:b8:bb:92:ce:7b:a4:59:5f:a6:54:14:51:
         c3:f0:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org