Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a353030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          USkK/EJ1Ncy0rWM0FeKV3ldCtqhowiel2PzuAx7ILJc=
Subject key identifier:   B4:10:98:73:96:AC:14:7F:07:A2:4F:8F:3C:54:5D:3A:BC:CA:26:FF
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       201669280DF23256173BCE637684DBB7E36BB216
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:56 +0000
ROA not before:           Mon 29 Jan 2024 15:01:56 +0000
ROA not after:            Mon 27 Jan 2025 15:06:56 +0000
asID:                     266437
IP address blocks:        2804:37d0:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:16:69:28:0d:f2:32:56:17:3b:ce:63:76:84:db:b7:e3:6b:b2:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:56 2024 GMT
            Not After : Jan 27 15:06:56 2025 GMT
        Subject: CN=B410987396AC147F07A24F8F3C545D3ABCCA26FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:b4:04:9c:a6:ea:af:85:6c:cc:86:b7:da:
                    86:b6:5e:49:d5:d4:5a:04:31:69:2d:2f:83:89:a8:
                    b0:1f:be:5c:f1:d0:3a:39:7e:1b:53:0f:e7:0b:0b:
                    37:67:65:2a:47:3e:47:97:ee:dd:ea:98:ae:75:24:
                    07:ec:58:87:e4:ef:da:96:9c:57:d3:00:85:9d:73:
                    8f:d1:a4:7e:df:8d:4a:fe:c1:de:d0:37:b3:90:5d:
                    64:64:c8:7d:e1:fa:62:ea:a7:65:20:4a:25:75:a3:
                    37:04:5e:15:10:0a:10:00:d3:99:a9:0a:e1:e7:6d:
                    1b:42:00:30:64:73:37:3a:ea:17:ba:46:e2:cc:52:
                    70:06:2a:ed:dc:64:1c:00:ef:e2:44:62:e1:2c:66:
                    af:42:2a:79:aa:c9:59:e2:46:24:d4:f9:f1:bc:94:
                    f2:a4:30:74:57:dd:2d:60:c9:fd:35:86:76:6f:16:
                    68:ca:2f:33:3f:d2:c6:2f:86:ba:9f:59:52:3c:ab:
                    c4:05:61:8e:e3:89:b6:3d:37:50:35:8a:96:6b:0e:
                    3e:03:34:b6:73:ff:4c:57:d6:05:cf:ff:44:6c:1a:
                    fe:6b:28:69:06:cb:a6:59:39:68:cb:1b:ac:0c:37:
                    00:31:9e:bc:16:0a:a4:48:6f:4d:3a:4d:ff:4a:44:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:10:98:73:96:AC:14:7F:07:A2:4F:8F:3C:54:5D:3A:BC:CA:26:FF
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:49:e5:f2:40:d3:6e:ef:aa:5c:a8:b1:ab:7a:8b:c8:1f:5e:
         01:26:8f:fb:6d:7c:52:c8:54:ad:e0:78:36:20:94:53:a2:e4:
         a6:85:ff:88:34:e2:88:37:52:02:4f:fd:3a:11:cf:0c:28:6d:
         97:f1:b9:5c:17:11:4c:28:12:c8:5d:f8:e6:aa:44:12:56:0b:
         81:e6:a5:f5:8c:8a:04:4c:08:33:f1:2a:53:8e:80:26:3b:74:
         1c:97:e2:d6:5c:68:16:6f:87:73:7a:1b:a1:bf:a8:98:11:81:
         4e:27:85:a9:96:70:26:db:18:b7:4c:94:63:74:56:3f:31:12:
         f4:8b:9a:10:38:11:8c:18:15:26:0e:c9:6b:f1:3e:c4:16:ac:
         a1:34:e0:24:0d:1a:97:c3:da:b1:29:01:1b:9d:2b:1a:dd:7d:
         37:1a:cc:79:c3:94:38:91:b8:e2:73:85:66:09:c9:a2:a5:02:
         f7:de:62:44:e8:ec:3b:09:e5:de:fa:bd:52:e3:82:b5:32:92:
         3c:6a:d8:02:74:92:73:67:63:7b:8b:4c:6c:e9:a5:1e:b0:aa:
         e8:62:bd:c0:07:10:ac:84:08:ae:59:a2:a2:89:55:0d:13:aa:
         65:cb:02:66:60:e6:8a:fc:c2:18:e1:c6:2c:76:11:fe:69:a2:
         39:52:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org