Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a333a3a2f34382d3438203d3e20323632363931.roa
File:                     323830343a316364383a333a3a2f34382d3438203d3e20323632363931.roa (raw, json)
Hash identifier:          VDsWa3KWVP+GOwxs5o07vfbmENaN6QciYo/Wf+IQgTE=
Subject key identifier:   B3:7E:8D:15:22:E2:61:0F:C8:6C:D6:C1:1F:EF:19:46:67:10:73:F0
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       318440730B03541EDEFC429B9D594D3E84348B3B
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a333a3a2f34382d3438203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:12 +0000
ROA not before:           Sat 16 Oct 2021 16:11:12 +0000
ROA not after:            Sat 15 Oct 2022 16:16:12 +0000
asID:                     262691
IP address blocks:        2804:1cd8:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:84:40:73:0b:03:54:1e:de:fc:42:9b:9d:59:4d:3e:84:34:8b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:12 2021 GMT
            Not After : Oct 15 16:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:5c:ff:ec:00:7f:d0:78:1d:a8:19:1a:d9:
                    66:eb:a2:61:59:2e:81:45:10:63:4f:12:84:5e:d9:
                    bf:79:26:08:37:6d:40:5f:61:19:aa:42:23:4a:6f:
                    0c:ac:93:1b:ec:c0:16:60:7e:7d:b2:be:5b:ba:f7:
                    2c:4b:52:17:59:b1:1a:86:cc:4d:f5:48:12:80:94:
                    bb:d9:f8:11:56:c1:23:36:bd:29:a8:39:b3:ed:01:
                    04:cb:36:64:2a:50:b5:1a:de:b2:eb:ed:18:31:69:
                    6d:71:e2:e9:b8:2a:ad:87:41:22:0c:9f:01:c7:3e:
                    c9:86:62:72:6c:e4:35:6c:75:27:86:75:e6:31:9b:
                    a6:f4:f1:ef:ad:6b:84:94:69:61:43:6b:19:7f:1e:
                    81:10:94:a0:9f:fb:ae:b9:4f:f9:d1:74:6f:d3:98:
                    99:c1:44:8b:84:33:dd:f8:26:04:52:1f:c1:35:36:
                    cf:26:a0:e7:ef:27:5b:bf:5b:95:ad:1e:28:35:47:
                    33:2a:f6:a4:3c:c3:ee:87:f6:70:ed:62:f6:c2:c1:
                    87:e9:6c:75:70:4a:27:55:d3:b3:a1:3f:67:f1:ab:
                    7b:b5:f9:69:98:e4:7f:d1:b7:28:a2:42:c8:d5:77:
                    40:c7:0c:a9:6f:30:fc:20:4d:7f:0d:c1:9f:dc:e6:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7E:8D:15:22:E2:61:0F:C8:6C:D6:C1:1F:EF:19:46:67:10:73:F0
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a333a3a2f34382d3438203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:51:eb:27:78:fb:9d:79:38:55:69:45:01:01:32:0d:e3:50:
         6e:1f:12:cb:25:98:7f:23:70:ae:6c:16:ac:1a:17:84:17:4a:
         50:39:ab:c9:1d:df:16:3b:75:dd:79:2f:c4:09:d7:08:35:37:
         eb:b9:a3:e0:0f:ea:0a:fa:c7:12:f8:30:bb:15:f3:ab:3d:54:
         6d:c6:61:9f:ba:e8:b5:7e:9c:b9:ea:ca:31:49:26:97:60:d0:
         8d:84:3a:79:2d:4d:c7:70:69:eb:4b:ed:09:d9:18:60:c7:86:
         c2:b9:43:54:79:06:10:cf:b5:18:94:c2:42:4d:cd:e7:84:e8:
         7f:9a:43:81:9f:ce:00:2e:5f:1a:c7:e3:c2:51:2b:d5:92:f4:
         54:c0:20:a3:66:df:db:3b:01:2e:0a:b2:0b:35:d3:ef:ae:1e:
         e2:37:31:99:c7:4c:86:7b:6a:29:24:40:bf:eb:d2:ba:f3:c0:
         c4:e4:30:83:22:62:2b:4c:8e:80:ad:77:02:3a:57:86:ba:c9:
         9e:27:50:4a:aa:3a:aa:f3:1c:d7:53:81:5e:f9:3a:49:05:32:
         50:01:22:b3:d3:15:df:15:6b:c0:e2:5b:bc:59:ff:21:84:3d:
         ee:d3:65:9f:69:23:a7:7e:b1:26:cc:b7:14:62:70:bf:d2:e6:
         d4:d2:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org