Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a363030303a3a2f33372d3337203d3e20323636343337.roa
File:                     323830343a333764303a363030303a3a2f33372d3337203d3e20323636343337.roa (raw, json)
Hash identifier:          58vc1psWkXJEZL4x5dV3b96EjoLNgFVW3AAMrcaIs5o=
Subject key identifier:   5B:6B:01:07:A7:64:41:F1:63:1F:BB:2E:47:B2:57:CF:F6:F6:C6:F0
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       3CAB082716E5D3E9F34555AB005FAD1C982E2FD7
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a363030303a3a2f33372d3337203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:57 +0000
ROA not before:           Mon 29 Jan 2024 15:01:57 +0000
ROA not after:            Mon 27 Jan 2025 15:06:57 +0000
asID:                     266437
IP address blocks:        2804:37d0:6000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ab:08:27:16:e5:d3:e9:f3:45:55:ab:00:5f:ad:1c:98:2e:2f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:57 2024 GMT
            Not After : Jan 27 15:06:57 2025 GMT
        Subject: CN=5B6B0107A76441F1631FBB2E47B257CFF6F6C6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:b1:03:d5:09:f0:b1:fc:49:55:98:12:7b:
                    b3:45:3f:d5:72:b3:1f:4a:27:b9:7a:a8:d1:0c:23:
                    e4:a3:a2:48:30:40:d4:41:ec:90:9a:5b:ac:4e:b8:
                    70:99:64:e1:25:95:50:69:cc:6a:e9:17:03:34:41:
                    6f:6c:e5:9e:7f:7f:3e:e9:c4:b6:69:14:9d:3a:83:
                    99:46:ff:9f:76:2f:64:c1:15:c8:61:b2:84:22:f6:
                    f5:30:69:80:2a:37:78:ad:cb:19:8a:34:3c:66:6e:
                    8a:87:4a:e7:8e:04:28:da:88:c1:a8:46:05:b2:c9:
                    7b:2f:b0:37:66:00:07:21:8e:84:9e:cd:31:59:f3:
                    d1:2c:a6:67:b0:31:04:5a:2e:dd:36:8d:cb:ec:d0:
                    73:da:24:5a:43:47:34:0a:5b:4d:51:7c:6d:0e:bb:
                    80:52:f1:f4:66:8a:27:d6:69:27:ec:70:31:ae:a5:
                    62:7d:f9:89:28:b0:2d:cb:8e:09:89:90:79:4c:1e:
                    af:34:96:b7:1e:9e:26:22:c2:5c:51:9f:68:e6:3a:
                    b0:36:e3:15:b2:89:e5:bc:08:a7:bd:fe:04:cf:4d:
                    2e:82:85:85:ea:0c:a2:93:c5:8f:de:fd:9c:58:2a:
                    26:6f:7e:f3:f8:19:d5:cc:ff:a9:7c:99:57:69:9d:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6B:01:07:A7:64:41:F1:63:1F:BB:2E:47:B2:57:CF:F6:F6:C6:F0
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a363030303a3a2f33372d3337203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:6000::/37

    Signature Algorithm: sha256WithRSAEncryption
         48:29:6c:8f:46:84:47:20:11:d8:e9:6f:1e:18:12:31:47:4b:
         72:36:26:bd:ee:54:44:01:76:74:3c:45:ee:de:89:d5:fd:a5:
         af:ef:e1:36:3e:7e:8e:f6:6b:1b:bb:c9:46:fb:81:37:93:f3:
         2e:08:c6:56:4d:cc:2d:5b:f7:75:98:68:8e:e6:14:44:91:ac:
         ce:7b:f8:e8:d2:e7:5d:0a:d0:35:e7:44:d5:de:09:2f:ab:97:
         7f:3b:1f:38:68:59:d8:d5:c3:d3:e8:82:2e:a1:3d:fa:f8:82:
         50:5f:ba:f6:3e:0b:2a:38:f0:fe:ed:bd:8c:3c:b9:c6:51:f7:
         11:1c:1f:1e:f4:11:79:43:4e:dc:0f:52:4b:24:9b:90:dc:6e:
         5d:a1:79:ab:ff:f6:d5:e6:82:69:e5:5e:a8:cc:67:18:80:fc:
         7a:86:b9:90:7b:15:6e:5f:63:54:08:d5:36:cc:8e:71:9b:e3:
         b4:6a:56:2c:de:54:07:63:0e:19:18:10:47:51:0e:04:04:1e:
         be:a1:d8:a9:34:a3:e4:76:10:05:9f:75:96:57:1f:53:7d:ff:
         fb:c7:0a:8c:25:26:ce:7f:db:a4:f5:66:b7:50:5d:fb:86:51:
         99:14:5e:2c:ee:2f:d6:84:b0:42:67:d4:90:28:62:ad:9a:49:
         18:b4:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org