Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a353030303a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          b7y3XSH0emWWxFkyiHzYIOf/W7fE0svWC6KQzZVEgNg=
Subject key identifier:   42:0F:28:62:4A:DD:A7:79:AB:46:BF:C6:51:58:D8:13:43:46:1C:32
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       37D3F563DFBF9907BA67EB140CB3D340F5B2FA3A
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:57 +0000
ROA not before:           Mon 29 Jan 2024 15:01:57 +0000
ROA not after:            Mon 27 Jan 2025 15:06:57 +0000
asID:                     266437
IP address blocks:        2804:37d0:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d3:f5:63:df:bf:99:07:ba:67:eb:14:0c:b3:d3:40:f5:b2:fa:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:57 2024 GMT
            Not After : Jan 27 15:06:57 2025 GMT
        Subject: CN=420F28624ADDA779AB46BFC65158D81343461C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:f1:84:d0:cd:a8:ec:03:d3:1a:9d:2a:40:
                    1a:c9:02:fc:77:4a:5e:61:55:2d:9d:dc:fd:4e:28:
                    7f:d0:63:de:32:c6:69:a4:bd:d9:0c:09:5f:e8:1c:
                    f2:97:78:4b:6b:9b:29:d5:ea:1f:4e:2e:db:d9:ae:
                    55:b3:bf:85:ae:c0:0c:15:49:55:24:6c:0f:22:09:
                    66:59:5a:5f:31:9d:a9:85:ef:e4:69:7d:db:ae:77:
                    5a:c4:0d:81:f4:57:d6:57:47:0d:1d:42:9d:80:fd:
                    22:be:c3:c2:54:ba:4a:55:1a:94:05:83:dd:04:d7:
                    73:37:c4:43:25:1a:f3:58:d4:0c:d4:f4:df:5e:6b:
                    53:5f:2e:87:83:e3:90:7e:01:1c:55:5d:29:d1:34:
                    10:b0:4f:7a:c9:1a:20:93:60:b1:ea:d5:81:45:be:
                    3b:ea:c1:5b:bf:10:ce:11:4f:92:10:19:38:38:88:
                    5e:3e:26:90:60:9c:03:d6:38:6f:7c:3e:69:23:65:
                    4b:17:f9:3d:74:ed:72:24:62:f1:bf:44:86:b4:48:
                    2d:1f:4f:cb:16:2f:c0:6d:e8:e6:81:bf:d7:0d:0b:
                    18:18:fc:0c:03:3e:ee:2d:06:08:49:b8:1f:45:a0:
                    c7:93:e5:1e:93:c8:47:8c:ac:5a:80:b3:c3:7a:ea:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0F:28:62:4A:DD:A7:79:AB:46:BF:C6:51:58:D8:13:43:46:1C:32
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a353030303a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:27:61:97:59:8e:4d:35:d5:2f:91:63:e8:2b:f1:16:72:d9:
         f4:d7:1f:06:b2:33:ad:e9:45:02:43:b2:73:f7:b3:4d:0a:93:
         b3:69:61:4a:c4:af:62:7c:7a:71:4f:c5:13:98:32:cc:f9:43:
         d5:cb:13:a1:2a:47:8c:86:14:cb:d1:72:40:31:bf:c1:af:4b:
         79:19:7d:73:d8:1f:8e:9e:74:91:06:fc:f1:02:b1:1d:a3:59:
         7f:e5:20:75:78:8d:1b:a9:6d:c3:1d:c8:1d:52:02:eb:8d:12:
         8f:7d:a2:32:49:79:97:48:39:e1:44:c9:7c:40:9b:43:5f:d2:
         65:07:02:13:7b:01:26:eb:db:50:d2:6d:4a:87:4b:aa:2b:0d:
         a4:db:4f:2e:43:70:cd:dd:81:17:c8:05:d3:29:e4:81:de:b7:
         ab:53:a1:42:26:42:ea:56:bd:6a:44:07:4f:ca:f5:e2:84:85:
         56:0b:57:2a:f7:aa:1b:90:4a:10:24:eb:79:ca:09:2f:ab:3d:
         bc:a9:9b:c8:32:06:fb:51:85:8b:16:9f:bc:09:43:7e:44:e5:
         47:c8:97:ef:88:b4:05:08:90:aa:65:03:f2:b6:bf:3b:95:fe:
         af:2b:30:c3:5e:8e:62:ee:12:87:19:40:d2:7b:0a:7c:d7:c4:
         1f:23:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org