Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a653030313a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a653030313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          HbEzNcWJ0gp6s5Z+T7IiKNGQB25QuCy743w11UL6gto=
Subject key identifier:   37:C8:42:C2:D5:C0:72:99:8E:1E:09:1A:4E:D7:06:41:37:57:B1:D5
Certificate issuer:       /CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
Certificate serial:       43F603B10AFD2C9036149656CF9E03BAE3E6456C
Authority key identifier: 03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a653030313a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Mon 13 Jun 2022 13:09:25 +0000
ROA not before:           Mon 13 Jun 2022 13:04:25 +0000
ROA not after:            Mon 12 Jun 2023 13:09:25 +0000
asID:                     266437
IP address blocks:        2804:37d0:e001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f6:03:b1:0a:fd:2c:90:36:14:96:56:cf:9e:03:ba:e3:e6:45:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0381D8A02BA99F48982DB0E51B0F614DC9B6173D
        Validity
            Not Before: Jun 13 13:04:25 2022 GMT
            Not After : Jun 12 13:09:25 2023 GMT
        Subject: CN=37C842C2D5C072998E1E091A4ED706413757B1D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:16:89:29:e2:cc:5f:27:8f:65:31:d0:ef:
                    a1:5f:ac:a3:d5:28:7a:aa:66:e9:f5:83:cd:7c:1b:
                    fc:61:5d:10:fb:c8:10:e1:52:ba:ad:e9:b1:e7:9a:
                    18:2c:73:bb:eb:08:05:f4:4d:a5:f8:6e:6e:45:3f:
                    91:e9:c4:12:b0:8c:33:87:08:fb:1a:86:ff:90:c2:
                    98:ef:a3:1a:46:81:4e:55:47:ff:c3:f1:ba:af:81:
                    b5:26:0a:14:f8:c7:69:32:19:47:fc:8c:5c:21:e9:
                    4e:1e:c0:db:3b:59:89:dd:b7:4c:35:60:2c:98:10:
                    59:77:d6:1c:84:d7:bf:e5:aa:de:35:91:c1:6b:cf:
                    79:93:3a:82:c4:08:84:c6:ed:10:5d:96:76:dc:5e:
                    20:9f:4a:95:a6:80:70:08:33:9c:e6:c4:76:77:4a:
                    ba:42:e7:9a:d8:c3:25:c4:2d:e3:8f:7e:51:eb:ec:
                    4b:d6:2a:7b:72:49:d5:6c:12:30:17:9e:74:a1:57:
                    3d:7f:77:cd:07:33:25:be:4e:ab:2b:68:be:9f:89:
                    b7:cc:0e:b4:d7:d1:99:68:d3:55:18:33:2f:de:ce:
                    e0:05:17:3e:6c:aa:14:07:88:e5:4b:ca:de:ac:2b:
                    c0:c8:9e:de:e3:12:43:0d:08:7b:a8:bf:4a:a8:55:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C8:42:C2:D5:C0:72:99:8E:1E:09:1A:4E:D7:06:41:37:57:B1:D5
            X509v3 Authority Key Identifier:
                keyid:03:81:D8:A0:2B:A9:9F:48:98:2D:B0:E5:1B:0F:61:4D:C9:B6:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0381D8A02BA99F48982DB0E51B0F614DC9B6173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/323830343a333764303a653030313a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:9a:11:1c:c3:ac:df:bf:33:45:8e:cd:8a:f1:58:9f:33:f7:
         da:5c:d0:88:17:2d:42:b4:0d:24:f6:d7:68:f3:e4:53:fa:ac:
         5f:42:2c:ce:94:f3:6a:0a:6f:96:39:7b:29:1b:23:a1:a4:cb:
         82:5d:08:06:0f:2f:a1:25:9d:c8:a9:07:c8:be:1b:61:8d:4e:
         c1:d3:c4:5e:f2:3c:d5:91:59:8a:95:50:b6:21:2e:68:f1:35:
         ee:f5:cb:5a:d3:b0:0e:5b:67:34:f2:b4:23:c0:de:e4:c4:e0:
         a6:8d:8d:58:61:43:98:94:40:11:06:53:f9:aa:d0:06:e5:45:
         e6:83:f9:91:5d:96:85:57:f1:32:64:8e:de:9d:54:fc:d0:4d:
         22:85:a1:8f:fb:51:19:f3:2f:70:d0:fc:ae:2c:c4:a8:37:58:
         c8:cd:1c:ac:d7:99:38:66:e2:34:d9:07:47:fd:6d:2a:1c:68:
         66:38:dc:2e:f1:10:a1:81:28:47:2b:b8:4f:a9:5f:16:81:c8:
         51:97:42:78:50:4d:e9:54:b9:e0:9a:22:84:77:0b:19:03:f3:
         5b:5a:c1:47:5a:d8:92:af:48:50:87:54:f7:8f:62:18:2b:bf:
         7e:50:95:5e:16:07:87:fd:00:cc:c4:1c:e6:49:8a:23:c6:c5:
         2b:ac:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org