Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          J1Z+XChYMSvfIHaGr360nEbsT180OViZthc76FVsoW4=
Subject key identifier:   AB:D9:63:B6:59:BF:8C:DD:7E:80:3F:21:24:7F:D9:CD:46:58:6B:89
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       76BD75EB181B162885CF9453CAEC0B21AD12034F
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:56 +0000
ROA not before:           Mon 29 Jan 2024 15:01:56 +0000
ROA not after:            Mon 27 Jan 2025 15:06:56 +0000
asID:                     266437
IP address blocks:        2804:37d0:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bd:75:eb:18:1b:16:28:85:cf:94:53:ca:ec:0b:21:ad:12:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:56 2024 GMT
            Not After : Jan 27 15:06:56 2025 GMT
        Subject: CN=ABD963B659BF8CDD7E803F21247FD9CD46586B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:f3:eb:26:bd:71:7c:fc:32:7c:0e:d1:eb:
                    a5:35:84:ea:ea:e5:4b:14:6f:2d:6c:a6:9c:c5:88:
                    9e:be:fb:dd:3d:64:6a:02:ce:0a:fb:79:15:ca:9d:
                    b6:8b:e3:c0:c8:4e:a8:ed:99:2f:4e:08:09:6f:c7:
                    26:ed:c2:70:2d:11:c0:4a:f1:b8:33:88:1a:bc:e9:
                    d5:52:74:2d:3d:28:9a:7b:ba:0d:df:73:e4:3e:35:
                    85:7a:80:e0:98:bf:3a:38:2c:85:2c:96:bf:e1:93:
                    a0:36:2c:3f:36:0f:64:e2:45:32:cc:37:7b:5c:5c:
                    cf:82:a2:ba:75:a6:49:fe:0c:29:1d:56:67:5a:47:
                    1b:d7:4a:81:d6:88:eb:ab:39:54:b4:aa:aa:f3:85:
                    6a:d7:5e:be:38:78:58:bc:40:ff:5e:5c:56:d5:4c:
                    68:c5:0d:27:77:43:71:35:cf:1b:3e:17:7d:7d:20:
                    d8:e0:1f:c6:63:c3:d3:8c:3c:bf:cc:fd:cc:de:3a:
                    04:92:3d:8f:46:fc:5c:9d:ef:18:79:f6:20:80:13:
                    05:52:5d:51:ed:c9:6f:d8:ca:64:8e:43:48:35:b4:
                    72:37:96:d6:09:77:0e:63:d4:8a:1b:72:4c:25:24:
                    ec:8a:ef:f3:01:60:6f:a0:a2:5c:8f:be:fe:b9:08:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D9:63:B6:59:BF:8C:DD:7E:80:3F:21:24:7F:D9:CD:46:58:6B:89
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a313030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:e6:6f:48:cd:c1:41:df:72:47:b6:9d:85:60:c2:fa:23:3b:
         62:00:2a:fe:f8:23:6c:b5:7a:f2:dc:c4:0a:32:fe:0e:2c:b8:
         ef:c3:90:f6:17:c0:d3:64:ec:8b:87:dc:92:66:72:08:f5:81:
         e9:86:6a:98:46:c8:86:b9:06:f0:1b:5c:14:7a:1f:41:9c:d1:
         a7:26:cc:e9:5b:c9:7a:6a:4b:8b:f4:c5:9a:95:4e:b7:3a:79:
         11:f0:52:87:9f:f1:bc:4f:a4:e1:6c:c9:3a:00:b6:05:3c:cd:
         59:e7:41:90:8a:f1:f6:75:45:ae:0b:3d:37:b0:aa:13:21:6e:
         ba:fb:26:4e:d9:dc:c8:72:90:f7:70:22:e5:08:a5:b0:6f:10:
         96:41:ff:28:bb:65:a4:e7:8c:b7:50:64:32:5e:22:3e:40:02:
         a7:a9:a4:04:6d:9b:e4:d4:67:b3:e4:c7:56:39:94:72:ab:74:
         3f:31:be:2b:41:24:98:a8:17:7c:fc:8f:67:5b:ab:7f:89:43:
         51:09:51:19:88:c4:20:8e:34:28:3c:4f:ce:44:fe:f8:6b:f5:
         d3:a9:06:e6:92:29:d9:b8:0c:a8:bc:f2:4d:95:f4:fe:51:e2:
         33:db:1a:a1:07:40:4e:69:87:5d:a5:4a:d4:28:4b:b1:06:61:
         e5:1e:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org