Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          8fbr5EZlKbBKQj6fyifJkJZIkmb5d/S1cTCRXJnxKO8=
Subject key identifier:   40:C7:A4:0B:CA:A9:A7:58:53:CF:19:B5:F6:89:DE:36:18:59:C7:9B
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       3406B998FD76542384C6294972636630B5B65D1D
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:59 +0000
ROA not before:           Mon 29 Jan 2024 15:01:59 +0000
ROA not after:            Mon 27 Jan 2025 15:06:59 +0000
asID:                     266437
IP address blocks:        2804:37d0:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:06:b9:98:fd:76:54:23:84:c6:29:49:72:63:66:30:b5:b6:5d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:59 2024 GMT
            Not After : Jan 27 15:06:59 2025 GMT
        Subject: CN=40C7A40BCAA9A75853CF19B5F689DE361859C79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:0b:8c:b6:19:e6:8b:ca:06:e0:96:1a:cc:
                    e0:be:7c:46:6f:42:f8:17:7d:82:8e:70:35:0b:5c:
                    62:b2:02:8f:4f:66:0a:80:47:fe:ae:4b:46:0c:4f:
                    49:f0:65:43:4f:31:15:00:26:4a:3a:61:6e:8e:37:
                    91:64:92:b2:7b:9f:82:c4:5a:09:fb:75:b6:2e:fe:
                    ef:e5:05:bf:c4:bc:4f:67:08:48:f4:fe:3e:dd:7a:
                    ba:7c:f2:4e:52:be:1e:b7:dc:fe:67:af:8d:a2:8f:
                    9d:23:87:88:21:89:67:56:b5:d1:36:2c:1a:3b:92:
                    19:d4:3c:5e:40:bb:94:eb:d0:e3:97:5b:5b:d1:b7:
                    ee:9d:04:d4:22:5c:80:e4:7d:ec:b9:fe:9d:5e:47:
                    b2:0a:97:ad:8d:47:be:72:a9:b6:06:09:01:9d:8e:
                    56:3a:4a:a6:46:f1:f7:80:bb:58:7e:71:5b:e1:76:
                    27:a9:93:25:61:c8:4b:d1:cb:1e:3d:39:20:a7:91:
                    eb:56:92:12:de:da:07:57:48:e0:97:87:1f:aa:7c:
                    ba:58:21:2f:36:a2:72:a0:f9:78:80:21:5d:4d:41:
                    e0:e4:26:08:71:67:04:80:d2:6a:a5:1a:66:cc:df:
                    8e:fc:1e:3e:75:b5:ff:38:84:85:79:44:32:e7:10:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C7:A4:0B:CA:A9:A7:58:53:CF:19:B5:F6:89:DE:36:18:59:C7:9B
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a333030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:30:7a:a1:b1:78:4e:2f:76:0c:29:39:95:dc:16:58:7f:
         0c:c3:b8:e2:20:d1:9b:fd:8a:28:4a:23:b0:9b:a9:05:cf:4a:
         bf:59:5b:ac:fc:0a:6d:48:36:b0:e8:13:a9:3c:f2:a5:23:34:
         3b:63:cf:2e:64:05:73:e3:de:27:00:5c:a1:bc:a2:b8:d9:5a:
         c0:93:be:af:1e:0d:88:f1:31:86:5a:56:ae:0d:72:26:8a:c6:
         78:04:d8:3a:2b:66:a2:c0:ef:bf:a1:4a:c5:38:11:16:60:f2:
         92:e1:1e:ff:d9:fe:3e:24:ab:94:50:e5:48:7c:65:e2:05:fb:
         b6:24:a0:a2:b4:0c:1e:f5:45:6c:c9:ab:3b:f3:7b:b4:be:80:
         4d:8a:b7:ff:cb:31:b2:bc:43:87:97:1b:90:94:27:50:3e:63:
         97:b5:bf:36:a2:64:bb:3c:08:2e:4f:47:3b:b0:d4:b4:0a:70:
         f3:f3:dd:5f:f2:29:60:13:a1:b2:6b:80:9e:eb:92:0e:76:72:
         ac:b5:1b:1f:82:ee:3f:7f:0a:ef:08:c2:99:e2:60:29:ae:67:
         1e:50:9d:8f:e1:38:4a:3c:11:dc:69:54:25:6b:bb:4b:25:c5:
         1c:10:8d:8f:0b:a0:8e:47:4b:7b:9f:47:80:93:2a:56:3e:53:
         21:e8:6e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org