Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          HJcCKQ2O8f5r/zsbiDxZhPvT1zFZvEVQEkOEgZodpTg=
Subject key identifier:   1A:B0:0A:9B:CA:E9:AB:70:1E:E1:5C:18:0E:9B:1E:FF:CA:A7:19:8E
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       253B1BEE565CC1F27000CA90CC84AC356682BABB
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:58 +0000
ROA not before:           Mon 29 Jan 2024 15:01:58 +0000
ROA not after:            Mon 27 Jan 2025 15:06:58 +0000
asID:                     266437
IP address blocks:        2804:37d0:6000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3b:1b:ee:56:5c:c1:f2:70:00:ca:90:cc:84:ac:35:66:82:ba:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:58 2024 GMT
            Not After : Jan 27 15:06:58 2025 GMT
        Subject: CN=1AB00A9BCAE9AB701EE15C180E9B1EFFCAA7198E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:da:84:f7:50:e5:91:32:db:cf:24:10:d2:
                    4a:a8:e6:4f:4a:00:33:af:27:8b:ed:77:0a:9b:66:
                    ef:67:3f:77:fe:3d:d9:a3:26:f7:69:e0:0d:0b:51:
                    a9:23:68:2a:bb:8c:f8:39:93:c4:7d:e3:12:5f:36:
                    c4:50:d9:96:67:a1:0a:ad:d8:c2:2e:79:c8:63:f8:
                    2f:fc:3a:41:c6:98:bf:a8:1d:1d:f3:ff:64:9b:f6:
                    f0:0e:a3:c0:e7:b9:9a:e9:a5:8b:a0:15:eb:cc:1e:
                    d4:30:1e:c8:0e:e6:da:8a:69:44:57:b5:f1:07:04:
                    5e:fb:15:6b:f7:dd:53:8c:49:81:df:10:6d:a0:16:
                    c6:57:a2:e9:40:80:23:1b:f7:37:10:4f:4e:00:04:
                    29:37:d9:78:b8:a9:45:95:03:d4:90:98:5d:1d:e1:
                    1f:18:83:f0:48:a8:17:8e:a7:84:77:13:4e:7b:1e:
                    a4:75:d7:2e:11:31:ce:99:c2:4d:be:12:26:01:20:
                    94:d0:80:28:c5:5d:50:2a:d4:a9:61:c9:83:89:9a:
                    05:79:66:18:ef:04:22:d4:39:ab:fc:cd:d0:36:31:
                    fe:76:77:7f:1c:dd:60:f3:84:b7:b2:23:6c:03:fb:
                    47:d8:3c:17:68:db:e4:0f:31:98:8f:ef:fd:62:cf:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B0:0A:9B:CA:E9:AB:70:1E:E1:5C:18:0E:9B:1E:FF:CA:A7:19:8E
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a363030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:46:75:8f:48:60:3e:19:d3:c4:5d:5e:df:fb:a6:e8:fd:76:
         ee:85:bb:09:77:26:3e:83:75:52:a0:47:e1:4e:4f:97:2f:29:
         e9:b6:20:c2:d7:00:fe:9d:aa:f6:ab:a3:24:f0:a9:36:d9:b9:
         fd:f0:34:2d:fb:a8:ed:88:80:b7:8a:33:47:38:f2:b4:74:9d:
         9a:61:8b:18:76:d4:7a:b3:e1:3d:65:9e:b3:60:d9:2c:db:7c:
         6e:f6:58:3a:28:2c:7e:62:bd:24:01:bd:29:e2:9f:6a:80:9d:
         73:08:9e:18:48:85:d8:26:e4:08:63:1b:b0:14:b7:5a:af:be:
         9b:52:b8:88:c1:ed:66:25:10:ed:c8:35:9a:5e:c7:35:67:53:
         05:64:77:71:09:5e:8a:e5:4d:52:32:73:5b:44:0f:50:1a:a0:
         78:9e:d2:3e:d6:1e:e6:1b:c7:be:39:40:ab:56:be:4e:ff:08:
         5a:be:84:a9:44:46:6f:92:f1:ca:2b:87:73:29:94:fa:a0:5c:
         d7:81:9d:f6:e5:94:d4:55:e9:91:f2:08:bb:80:51:cc:ab:94:
         2b:03:b6:0c:fb:0b:1b:51:e9:a0:1e:94:ea:fd:ef:31:68:59:
         9b:d5:94:fe:15:56:99:73:ae:ca:0a:05:84:82:89:b0:4b:af:
         91:57:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:56 2024 by rpki-client on console-ams.rpki-client.org