Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          O0ExWKkwvFFh8/L9UmLgLpSLmzsk836nKcECATL1S+0=
Subject key identifier:   C1:65:A3:CD:C8:BE:DB:EC:C7:CC:BD:FD:67:0D:98:81:84:06:E8:50
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       35CEED5FADA6E572DF43990151DEE11EADA5329B
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:58 +0000
ROA not before:           Mon 29 Jan 2024 15:01:58 +0000
ROA not after:            Mon 27 Jan 2025 15:06:58 +0000
asID:                     266437
IP address blocks:        2804:37d0:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ce:ed:5f:ad:a6:e5:72:df:43:99:01:51:de:e1:1e:ad:a5:32:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:58 2024 GMT
            Not After : Jan 27 15:06:58 2025 GMT
        Subject: CN=C165A3CDC8BEDBECC7CCBDFD670D98818406E850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:93:a8:7b:d3:95:65:6b:6d:33:4a:ca:55:
                    f7:1e:12:15:26:6a:ad:47:ab:9b:1c:2b:ae:9d:42:
                    34:83:0b:8a:ab:08:95:75:a9:82:f2:ae:31:a6:08:
                    20:92:98:7b:15:83:58:33:02:b9:eb:74:61:dd:7a:
                    c6:de:d6:dc:01:ef:b2:43:8a:44:c7:bc:74:e5:50:
                    02:2f:46:a6:06:44:66:d3:bd:ca:f3:0f:91:5a:b5:
                    2c:a3:89:d2:7c:37:b3:f0:c2:23:79:d4:fd:dd:14:
                    c3:0c:21:84:18:98:de:dc:7a:0e:4b:50:a6:eb:3f:
                    fc:8f:b3:dd:1c:bc:b5:5e:c9:dc:b0:84:61:f5:ff:
                    98:91:88:1a:07:52:e1:2b:5f:2f:b3:80:ef:71:59:
                    71:f3:15:e7:c6:ea:a9:99:27:8d:20:12:7c:28:f0:
                    88:5f:e6:cf:b4:49:71:35:ec:28:34:4b:3e:ac:eb:
                    15:7f:4d:76:16:0a:6d:1c:ae:13:71:42:12:ef:ec:
                    be:14:ea:8f:16:ee:79:db:69:54:87:90:de:22:ae:
                    b7:61:e3:86:0e:48:14:fa:7e:f0:e1:00:13:e4:30:
                    1e:6a:a0:12:2a:c0:8d:71:92:ff:5e:12:9b:e0:86:
                    88:83:5a:6b:4b:15:d2:dc:b7:18:d7:15:72:2a:15:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:65:A3:CD:C8:BE:DB:EC:C7:CC:BD:FD:67:0D:98:81:84:06:E8:50
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:88:ab:69:f5:52:7a:8a:89:95:56:3b:34:ca:af:4e:3b:
         5c:da:2c:b6:d5:35:9e:d3:f1:0e:79:d1:14:6d:6c:b5:0c:69:
         5b:08:86:d3:8e:af:63:6f:43:63:87:40:fe:2b:ac:a5:f2:7c:
         10:7e:ae:db:db:08:d5:99:17:84:87:28:30:88:db:cc:11:78:
         4e:63:f3:2f:f8:46:57:93:84:be:56:e3:a2:4e:78:e7:0c:b5:
         ba:92:2c:01:2c:5d:4b:7f:1f:13:78:71:c3:20:00:37:fd:d6:
         fb:88:6a:39:4f:a6:87:9c:d1:d7:b9:a3:52:60:c0:d1:6e:29:
         8d:01:01:f1:6a:90:ff:cf:20:36:45:99:84:6d:5a:68:e9:cf:
         64:40:26:0a:0f:e7:62:84:be:b8:9c:3c:61:c7:82:20:e6:6b:
         db:58:73:a7:8c:60:00:20:c1:f6:f1:de:15:bf:fc:42:2f:05:
         40:2b:78:9f:a7:e8:dc:f9:ad:5a:9e:3a:c5:20:57:a5:70:c2:
         29:b6:06:98:08:05:ce:50:5f:ec:bb:8e:7a:1f:c6:2c:ff:c5:
         59:df:45:e1:43:72:c1:20:e6:97:4c:e7:9a:80:e6:a0:4c:a7:
         76:75:4c:39:28:17:a7:c2:fd:16:fc:e0:2b:95:1a:2b:b7:0e:
         c3:f5:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org