Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a393030303a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a393030303a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          8VaUvW7XZcV8LBgnehxOxRJDqXKOl+jFgPqBsjoL2+g=
Subject key identifier:   91:68:CE:A1:DE:5C:F8:A3:E6:C4:97:CC:CD:E1:C9:D4:DB:16:DF:CE
Certificate issuer:       /CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
Certificate serial:       74338A39005883095574AAC83584DA992C388B35
Authority key identifier: 03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a393030303a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Mon 13 Jun 2022 13:07:40 +0000
ROA not before:           Mon 13 Jun 2022 13:02:40 +0000
ROA not after:            Mon 12 Jun 2023 13:07:40 +0000
asID:                     266437
IP address blocks:        2804:37d0:9000::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:33:8a:39:00:58:83:09:55:74:aa:c8:35:84:da:99:2c:38:8b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
        Validity
            Not Before: Jun 13 13:02:40 2022 GMT
            Not After : Jun 12 13:07:40 2023 GMT
        Subject: CN=9168CEA1DE5CF8A3E6C497CCCDE1C9D4DB16DFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:51:72:e0:e6:96:ae:b6:86:de:13:9d:0f:
                    a4:a1:ed:17:e1:7d:79:7d:0d:58:c7:21:95:49:b3:
                    06:17:ef:e3:16:1d:9b:ee:46:53:99:88:f2:d0:8b:
                    e0:d8:6a:5f:64:d2:d6:05:d3:ff:76:51:0c:91:0d:
                    96:ed:97:d2:45:d2:8c:33:13:c5:17:57:66:1a:01:
                    30:df:11:ef:86:f5:b6:cc:29:f9:95:f6:38:0e:7c:
                    37:60:ef:23:ba:8d:c7:0f:ed:af:e0:4c:de:3e:0a:
                    e1:88:f8:03:f7:24:f6:cb:81:cf:91:f9:7e:39:e3:
                    fa:bc:be:af:6c:96:89:c4:17:0c:a4:9c:bb:1f:4a:
                    4e:38:48:f5:3e:d2:54:8d:5b:57:7a:bd:70:85:3c:
                    db:da:20:b0:d8:a1:df:e1:54:08:17:17:97:18:3c:
                    ae:df:35:29:ab:6a:95:25:eb:1a:9b:39:8f:e0:13:
                    dd:be:84:ed:2d:54:72:ab:03:5f:85:c9:11:78:cc:
                    aa:02:ea:14:cb:41:d9:38:1f:e5:4e:ba:37:27:68:
                    9e:7d:25:df:7f:ca:f6:32:a5:43:cd:07:da:35:38:
                    a8:70:3f:94:93:34:3b:f7:16:15:6b:50:ca:10:8f:
                    70:7c:94:60:c4:42:3f:a4:f7:2d:6f:66:f1:31:85:
                    92:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:CE:A1:DE:5C:F8:A3:E6:C4:97:CC:CD:E1:C9:D4:DB:16:DF:CE
            X509v3 Authority Key Identifier:
                keyid:03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a393030303a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:9000::/46

    Signature Algorithm: sha256WithRSAEncryption
         b3:36:e5:dc:bc:01:a0:6b:64:6a:10:37:00:b0:4d:35:e3:c0:
         91:6b:bd:d1:f3:eb:41:b3:13:50:a0:ad:d4:e8:08:aa:b8:f2:
         55:28:63:fa:fb:85:cd:5a:c8:65:20:c0:cc:db:dc:32:d4:d0:
         22:dd:4a:65:a3:3d:54:4b:06:99:c1:5e:7c:f5:3e:c3:b3:dc:
         83:0b:87:d5:fd:ea:0c:c9:44:a7:2e:f4:e0:9e:ea:c5:47:55:
         88:77:80:f4:44:ec:cb:ac:57:ca:04:f2:93:d4:67:62:be:de:
         b2:fd:2d:c7:31:b2:1f:70:01:a3:a2:16:b6:c2:e4:6d:74:d8:
         82:eb:bb:d0:02:83:42:71:f6:a7:56:9e:26:dd:d5:f4:12:17:
         5a:c8:a1:ca:95:66:3c:ff:cc:1b:4c:5c:6f:66:53:31:31:8e:
         a9:5f:24:c4:21:46:1a:e7:13:06:1a:a9:b0:51:e9:8d:93:35:
         d5:3b:22:18:0c:d6:8c:a6:e3:3d:05:14:c5:e8:a3:84:0e:9c:
         7b:ac:07:7b:d7:9e:92:f9:03:0e:4e:5f:7c:0b:45:32:e3:ec:
         b1:36:d4:33:fa:2a:94:2a:16:08:6b:25:04:e7:e1:5e:88:b8:
         3b:ce:1b:30:3f:35:11:6f:63:14:4d:d9:9f:d5:a3:05:49:b0:
         29:55:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org