Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          IBTrJ1FnQxCSraR9xyMTugasAbhdrsZb8lL1hgTZy4M=
Subject key identifier:   89:CC:5F:88:7F:A0:02:E7:0A:96:79:CB:36:4C:37:45:ED:C0:DD:C6
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       697522BD6B528A65908F465E3A35B324EA3C984D
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:57 +0000
ROA not before:           Mon 29 Jan 2024 15:01:57 +0000
ROA not after:            Mon 27 Jan 2025 15:06:57 +0000
asID:                     266437
IP address blocks:        2804:37d0:5000::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:75:22:bd:6b:52:8a:65:90:8f:46:5e:3a:35:b3:24:ea:3c:98:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:57 2024 GMT
            Not After : Jan 27 15:06:57 2025 GMT
        Subject: CN=89CC5F887FA002E70A9679CB364C3745EDC0DDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:61:68:ad:ed:e2:92:97:a4:0f:f9:37:fc:
                    a6:5d:8f:09:05:17:7b:66:13:c0:ed:b9:76:17:9d:
                    76:6c:9d:aa:d0:ff:12:76:bc:16:b5:8b:42:61:69:
                    36:c1:35:49:21:ad:da:81:eb:3e:c5:fa:b5:e7:f1:
                    7a:48:62:f1:84:51:53:83:40:bf:64:fd:cc:a6:2e:
                    76:ae:d5:e4:4a:37:1e:a7:a6:37:d7:d9:31:f5:2c:
                    fe:e6:5c:c5:af:73:8b:e5:24:d6:6c:0f:7c:30:ff:
                    96:64:c3:c8:ca:78:43:5a:70:c9:ec:5d:8a:1e:97:
                    27:19:b5:cf:56:62:52:c5:56:c9:fb:ab:14:0e:61:
                    82:33:c0:7a:de:c9:42:ca:e9:67:7e:7a:01:ae:06:
                    ca:11:09:ef:b3:66:ad:f3:84:4d:02:8d:76:1e:ef:
                    3b:c7:d1:4a:e7:a1:1f:57:e2:34:35:ac:6c:50:56:
                    34:46:bd:15:6c:af:32:4b:44:02:80:7e:12:fd:4b:
                    bc:c2:96:2f:32:af:e5:c5:f9:4f:c3:db:14:f7:18:
                    22:f6:3f:9a:15:83:30:d8:95:80:d9:03:6c:b1:aa:
                    18:26:45:f2:00:ed:d9:86:d9:7e:04:a0:9e:74:b6:
                    c2:30:07:97:70:77:9c:66:69:6b:87:73:6c:51:32:
                    f8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CC:5F:88:7F:A0:02:E7:0A:96:79:CB:36:4C:37:45:ED:C0:DD:C6
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5000::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:8b:d5:9f:2d:98:ba:73:47:41:c1:2d:f3:92:51:f8:45:
         c1:27:90:fe:26:e3:a8:61:88:ed:d2:be:2f:8c:a4:98:da:54:
         65:0d:2c:a0:ca:d1:3f:ff:5e:e1:fd:07:cf:40:0d:c4:40:eb:
         f6:b0:2c:26:7b:24:fe:ac:64:27:b3:e5:d4:02:07:ca:89:20:
         93:41:a4:ee:3b:29:44:4a:5a:4b:51:a0:51:d0:66:ed:98:50:
         e9:62:9d:b9:d0:1a:80:06:20:a5:c5:4b:02:c5:7a:3f:0b:8f:
         68:48:03:4f:3d:6a:cd:60:35:f6:fb:4e:1a:ad:41:f2:12:76:
         5c:d9:a2:fc:08:b4:ba:98:90:41:0e:50:41:db:bb:3f:70:bb:
         de:3e:6f:91:ef:aa:14:aa:eb:5c:fc:84:fd:8f:2f:95:ce:3c:
         dc:7e:d1:3a:52:c7:b9:8c:63:1e:47:55:8b:04:91:34:34:f6:
         be:4f:1e:13:08:85:36:57:cb:1c:7a:eb:de:c2:5b:e8:ff:26:
         3f:3b:bc:72:52:e9:bf:df:93:9a:5a:b8:f6:d8:52:4b:f8:c8:
         88:4d:56:ff:2e:7e:27:a6:8d:fb:1d:c7:92:b7:c5:67:ea:d2:
         d5:d6:6b:ce:97:30:7f:0a:75:51:df:fd:47:0f:16:0e:0e:62:
         c2:8b:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org