Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a3a2f33322d3332203d3e20323632363931.roa
File:                     323830343a316364383a3a2f33322d3332203d3e20323632363931.roa (raw, json)
Hash identifier:          MXjzdhLF1MFdffbFavM8OZ9GcfXJCBgxcHQDa7+STJY=
Subject key identifier:   F8:19:8C:85:E9:A5:9B:B5:ED:EE:EA:16:ED:0A:FA:B6:1D:64:10:9E
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       15CCC832B7FB9BD5FCD55E1DF08630EB62FA9E8B
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a3a2f33322d3332203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        2804:1cd8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cc:c8:32:b7:fb:9b:d5:fc:d5:5e:1d:f0:86:30:eb:62:fa:9e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:23:5e:25:3f:a3:ce:ac:e5:fd:6a:e6:a2:
                    1a:76:8e:80:34:94:d7:6c:ec:2c:b7:32:b7:23:27:
                    ed:e0:03:32:64:c2:bf:fa:fc:ae:3f:95:7e:ab:7b:
                    20:58:c8:3f:0e:e6:e1:67:21:b7:a0:fd:36:ee:dd:
                    79:b1:d8:46:f6:3d:b3:73:14:ef:92:19:6d:a8:3a:
                    1b:50:f2:f0:73:e1:ba:bc:a1:43:16:90:52:60:70:
                    a8:84:93:0b:3f:ff:a6:af:5a:a5:5c:32:40:c6:5d:
                    a0:e7:37:0d:5a:70:c3:ee:6e:8b:c3:ee:f3:60:e2:
                    80:e6:fd:97:f2:1f:52:b2:b3:64:70:a1:8c:70:bf:
                    71:ef:f2:8d:83:31:11:57:be:91:f1:3d:b6:d0:3d:
                    8f:c6:aa:e5:52:50:f6:fd:93:9e:7c:d9:f6:9a:89:
                    63:ce:34:a0:6a:f7:30:49:1f:41:00:e4:b1:54:9b:
                    da:d6:c7:1c:14:55:4b:c5:e2:6b:de:34:8f:9c:73:
                    6b:80:4d:ac:5a:e9:28:d5:0f:4e:98:03:97:ac:ca:
                    ba:8b:da:2b:6c:01:5c:47:50:3f:b1:09:e2:97:e0:
                    83:15:14:20:f4:e6:a4:77:9c:b2:92:32:5a:3a:f7:
                    a9:54:25:a7:f7:97:0a:48:de:3a:f4:a4:e3:b3:c0:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:19:8C:85:E9:A5:9B:B5:ED:EE:EA:16:ED:0A:FA:B6:1D:64:10:9E
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a3a2f33322d3332203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:4c:99:85:a3:19:b0:63:2f:fe:4a:05:12:56:61:58:13:
         c2:eb:b9:f3:41:f7:a4:42:d8:b3:79:2d:52:2c:94:c7:32:42:
         70:01:0f:81:61:4f:c1:a6:3b:2e:84:fa:5f:e5:b3:90:42:94:
         e5:15:61:ae:1e:b0:62:b7:e4:fa:2e:5e:07:6b:7b:66:24:0b:
         b7:9b:33:1d:70:c6:2b:ee:11:1a:33:fb:ed:33:ba:c6:c6:36:
         db:f9:76:8e:f0:26:7f:d1:46:ab:8f:e0:1e:10:a6:95:f1:0b:
         db:b8:f5:bf:80:9c:e1:4f:91:61:86:7a:33:9a:37:12:1c:48:
         14:f7:77:72:c8:31:22:75:89:1e:1c:26:21:8e:57:e7:bb:2a:
         01:80:94:82:6e:d6:17:82:c9:fd:cc:6a:5c:ee:c4:9f:18:51:
         35:e2:07:de:af:33:e2:40:25:53:e4:95:9c:d8:83:63:b9:7a:
         58:32:f5:ff:58:85:30:ec:ad:92:f2:92:30:b0:10:80:5f:91:
         23:d7:96:3e:67:2f:16:93:df:cb:f9:0b:29:17:31:5d:31:35:
         b9:45:76:47:83:f8:80:11:f0:97:ce:44:8e:73:c7:dd:f7:03:
         d8:a4:84:86:5f:ce:2f:5d:04:9f:97:3c:61:39:c1:83:c0:76:
         f7:22:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org