Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030333a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a373030333a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          5GhJCvLEFC90olgn/Hfgvf6lVEtaZIXvRsnitEzhHQQ=
Subject key identifier:   0F:08:F1:81:CD:79:F4:EB:4D:61:7B:B9:63:8A:C2:7F:40:6E:05:26
Certificate issuer:       /CN=9135C08D527D027A8B9E98427B68340ABAED0962
Certificate serial:       4C8F54D1A76051EC80E96B2F6FD906B1C0F407D7
Authority key identifier: 91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030333a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 29 Jan 2024 15:06:57 +0000
ROA not before:           Mon 29 Jan 2024 15:01:57 +0000
ROA not after:            Mon 27 Jan 2025 15:06:57 +0000
asID:                     266437
IP address blocks:        2804:37d0:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8f:54:d1:a7:60:51:ec:80:e9:6b:2f:6f:d9:06:b1:c0:f4:07:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Validity
            Not Before: Jan 29 15:01:57 2024 GMT
            Not After : Jan 27 15:06:57 2025 GMT
        Subject: CN=0F08F181CD79F4EB4D617BB9638AC27F406E0526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:65:10:b3:57:51:f1:c5:96:fa:80:6c:6a:32:
                    b3:be:20:6b:59:b3:db:b3:75:6c:54:03:d3:d9:83:
                    29:ff:64:5f:50:c9:2a:ab:f8:50:c9:e1:1e:b3:90:
                    3b:5e:c9:ce:73:3d:58:e2:56:a6:77:08:9b:6b:6d:
                    2f:1f:8a:44:61:32:bf:2a:a9:9d:13:34:4d:bc:b5:
                    a7:85:d5:b0:ac:30:52:47:d9:09:2d:41:ed:6e:f2:
                    c8:80:66:58:42:2b:e4:15:17:c7:29:ee:52:f0:37:
                    d8:81:fa:6c:68:c2:e3:e4:83:fd:6f:26:9d:bf:70:
                    29:3f:e7:74:9a:d3:c5:be:10:04:98:4d:fb:c5:ae:
                    a4:07:76:64:4e:de:dd:52:a3:e9:64:b0:04:14:52:
                    a9:ad:87:4f:8c:72:a6:0b:7e:a2:da:8d:92:2d:fa:
                    d8:b1:f6:83:21:c3:3c:6d:0e:11:ef:6f:72:84:93:
                    47:12:45:0b:40:0f:74:2e:93:b3:3c:43:e0:c8:33:
                    fd:be:66:45:5f:82:8b:36:4b:d0:f3:84:a3:3f:9e:
                    43:e4:84:f9:16:19:b8:a2:e5:ca:37:0d:ca:18:7e:
                    22:a5:0b:73:0a:4c:91:0a:a5:aa:d0:7f:fa:0c:69:
                    85:ab:0f:70:36:f4:3d:12:ee:31:21:aa:0f:cf:4a:
                    47:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:08:F1:81:CD:79:F4:EB:4D:61:7B:B9:63:8A:C2:7F:40:6E:05:26
            X509v3 Authority Key Identifier:
                keyid:91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a373030333a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:03:b5:9c:a0:aa:6a:01:39:9b:90:8f:fa:6f:68:00:2e:90:
         76:c2:b0:18:b3:1b:b9:14:2f:97:54:2d:f8:47:77:6f:d0:0c:
         37:83:97:9a:a1:14:2b:59:f1:05:49:61:0e:17:c0:f0:91:8e:
         d0:c0:ea:3f:45:e8:48:17:0a:28:20:8b:84:15:0e:13:a6:b3:
         26:5f:d0:63:5a:ec:ee:f8:d1:59:61:54:1d:dd:31:8a:7c:a8:
         f3:ad:0e:55:02:f9:51:0e:a0:45:96:e7:dd:31:f7:87:11:cf:
         3f:0b:c6:9a:64:e8:7d:23:da:d3:3a:a3:7c:4e:b0:73:1c:b9:
         47:0d:8f:22:c8:7c:d6:bf:35:27:19:45:08:30:92:6c:0d:8c:
         64:9e:5c:06:6c:d4:e7:b1:96:e1:d4:5d:18:dd:6f:28:dd:06:
         66:8d:dc:32:6c:16:92:21:8d:3e:a3:d5:89:11:6c:ca:8e:4e:
         76:20:77:ac:59:28:3e:62:45:62:9f:f2:f1:7f:e3:b8:c5:11:
         56:ac:6f:ff:18:d6:1f:da:42:35:ae:84:c8:cc:74:1e:b8:66:
         cf:eb:ba:8a:c3:a8:4e:a8:1e:78:3a:cc:bb:46:c7:3a:6d:12:
         6f:4d:85:7b:6d:ce:20:f1:aa:65:26:ee:55:e4:43:5b:be:58:
         a0:82:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org