Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          4DWFC/qgje0v6Q3SSeZJbRRKgwWk17emxPRaBecd/TU=
Subject key identifier:   6C:D6:32:63:FA:95:27:22:84:C0:98:71:64:4B:4B:3C:DE:06:C0:91
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       1DB055DB98B6BAA1FA0B0D9E57FC35D32AA4E960
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:58 +0000
ROA not before:           Mon 29 Jan 2024 15:01:58 +0000
ROA not after:            Mon 27 Jan 2025 15:06:58 +0000
asID:                     266437
IP address blocks:        2804:37d0:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b0:55:db:98:b6:ba:a1:fa:0b:0d:9e:57:fc:35:d3:2a:a4:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:58 2024 GMT
            Not After : Jan 27 15:06:58 2025 GMT
        Subject: CN=6CD63263FA95272284C09871644B4B3CDE06C091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:00:b1:a5:17:69:27:af:b5:46:fc:3b:2d:
                    45:8b:62:6c:41:0d:57:9c:ee:db:b1:67:64:cd:85:
                    37:68:08:56:37:fb:50:f0:71:99:2a:25:c4:4c:65:
                    d5:d0:43:87:e7:35:16:b3:10:68:1d:f4:aa:3d:ef:
                    ca:34:bb:89:9f:bf:e0:d0:1a:33:1a:eb:84:9a:f2:
                    cb:12:56:64:9c:20:17:f4:c9:08:43:b5:41:5c:f4:
                    c2:1c:d1:96:65:9d:c6:e4:20:09:e9:78:b2:87:7c:
                    8a:47:82:12:27:17:d5:79:60:35:03:49:10:30:08:
                    b7:f0:47:9e:38:1d:9c:ac:40:88:e7:b9:75:b2:ea:
                    59:66:9c:6c:7a:f9:16:9e:72:3b:17:66:46:1e:5f:
                    ce:b3:b4:b7:44:85:70:db:d5:5a:73:0e:93:11:ed:
                    48:9e:25:b3:20:c5:5b:4f:70:20:b1:b6:4e:4d:83:
                    e4:5f:2c:94:f7:f6:73:eb:d0:34:4b:45:4e:ae:d5:
                    af:58:69:d7:b7:e3:10:08:98:ac:03:6a:d4:27:87:
                    ae:b6:bf:4e:25:d8:16:e7:c3:6d:c7:02:24:b8:57:
                    30:85:30:55:0f:cd:0f:32:00:70:ff:e9:fb:4f:06:
                    48:ca:c2:70:67:6b:96:1c:6f:90:f7:46:15:ca:e3:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:32:63:FA:95:27:22:84:C0:98:71:64:4B:4B:3C:DE:06:C0:91
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:5a:90:a8:da:9a:85:99:81:d5:4a:26:58:23:11:ca:b9:af:
         7e:ac:ff:c1:b2:9b:52:71:72:1b:16:f5:7b:ab:ea:b3:d4:33:
         15:36:a5:3f:e6:b2:9a:3a:c6:a4:87:d3:e7:28:f3:66:14:f3:
         99:70:b9:7f:03:06:9b:8a:54:ab:07:9c:2d:5e:8a:c3:03:75:
         cb:bb:c9:e8:5f:38:59:69:b1:7b:bd:c9:3a:f1:a0:68:f8:e3:
         83:40:79:4c:de:b8:db:a0:64:6a:9a:aa:df:10:7d:dc:d5:c1:
         c0:42:fc:48:7a:c9:8d:7a:e1:06:0c:4d:11:07:cd:00:1e:1d:
         cd:8b:56:25:76:cd:97:64:dd:b0:29:03:11:76:3b:fe:94:2c:
         37:5c:7b:f4:a8:fd:a4:b1:d7:82:86:02:e8:24:b4:13:98:70:
         e4:ae:98:97:0c:74:1e:2e:f8:ff:01:55:90:4b:6a:36:71:43:
         bc:19:7d:91:d3:98:68:ee:ed:26:aa:f9:74:b6:2d:cc:c6:cc:
         24:0a:8d:1e:32:65:a6:54:c2:b7:66:8f:c9:9b:59:78:8d:22:
         c8:f4:bd:52:72:d1:1a:b4:1c:da:c6:f4:fd:0b:5f:cb:b2:4f:
         2c:c5:29:63:ee:b9:51:27:ed:9d:91:89:38:5d:5f:83:31:ee:
         48:70:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org