Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa
File:                     323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa (raw, json)
Hash identifier:          qr4MuvRtCuOVeEd1GoTuG5DmXhJFUckZDcHqMQ9R2HA=
Subject key identifier:   17:E5:91:DD:4B:8E:70:DB:6B:17:A8:D9:60:1E:93:8F:31:BC:EB:B8
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       4FB557FE810A15859E28213E83C76568C1C27D3D
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:13 +0000
ROA not before:           Sat 16 Oct 2021 16:11:13 +0000
ROA not after:            Sat 15 Oct 2022 16:16:13 +0000
asID:                     262691
IP address blocks:        2804:1cd8:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b5:57:fe:81:0a:15:85:9e:28:21:3e:83:c7:65:68:c1:c2:7d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:13 2021 GMT
            Not After : Oct 15 16:16:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:37:56:f3:4a:bb:ca:ce:7f:c4:4a:f9:05:
                    c2:98:0f:ac:c0:cd:63:71:8f:8c:38:b0:2a:64:d5:
                    1d:a7:b2:9e:4f:c6:cd:53:a9:c8:e9:3f:87:da:1c:
                    ec:9b:82:5b:2a:53:c7:57:0d:2d:d2:88:2f:5c:e7:
                    ec:67:2f:38:30:96:83:8a:21:3a:10:b4:dc:de:82:
                    f1:0e:84:c7:63:01:58:20:17:7f:9e:2a:89:fa:bc:
                    64:0b:dd:aa:dd:b1:9e:3c:42:8b:e4:6a:87:af:13:
                    2e:34:a9:a6:9a:7a:1b:64:5e:dc:98:8e:e8:99:e7:
                    1e:7f:62:7b:18:2d:a5:39:a6:8c:8d:e3:8d:e1:ab:
                    0e:04:bf:74:43:22:8e:3d:7c:e7:9c:be:5f:95:a9:
                    1f:eb:fa:9b:e3:9e:04:c9:67:0b:fb:3a:c6:fe:57:
                    d2:46:14:cc:3c:47:b2:3d:de:39:b7:45:46:d9:79:
                    0a:9c:49:c5:5d:df:8e:e4:59:a2:27:f5:56:98:c6:
                    97:f1:30:87:dd:33:da:a3:44:f1:60:cc:3d:ff:7d:
                    63:5d:69:cb:e8:f8:9c:c5:19:c6:a5:0a:2c:27:61:
                    79:c1:20:a7:c1:e9:d5:52:28:d1:5e:15:12:75:e9:
                    50:5b:bd:5a:11:3e:c8:04:83:82:12:2b:53:f8:60:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:91:DD:4B:8E:70:DB:6B:17:A8:D9:60:1E:93:8F:31:BC:EB:B8
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633030303a3a2f33362d3336203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:10:df:07:2d:2e:ca:a0:f3:28:40:df:01:66:25:c7:ab:
         4f:36:f2:fe:79:80:c2:e2:f0:c0:0c:23:48:d2:4e:9c:4d:e1:
         f0:17:de:2b:07:ee:31:a9:5b:c0:af:f6:3c:e7:57:95:e3:c7:
         d5:ec:bb:fa:df:bb:f3:0d:9e:0c:c4:96:d8:73:a1:4f:6c:a7:
         4c:21:c6:b2:fe:5d:01:a8:75:01:5c:5e:3e:5d:fc:65:90:66:
         94:24:a1:d8:10:b9:b6:b3:26:aa:4f:d2:ab:7c:47:4e:f6:38:
         a6:89:44:ea:38:7f:a2:fe:fd:b4:1d:80:b2:bb:53:a5:79:74:
         05:5f:a8:2e:0b:c4:6e:6b:48:a8:c4:e3:b1:62:ea:e9:d3:f2:
         95:01:d9:ea:91:f5:ed:23:a1:1e:76:90:d9:5a:eb:0d:a2:5b:
         af:b7:8b:e8:f7:5c:57:f8:75:02:82:b0:18:45:cc:3c:59:e9:
         ff:5a:71:99:a8:31:cb:b9:3a:59:96:9b:9c:21:ea:4c:83:0c:
         07:39:ba:91:03:6f:4e:0a:30:42:03:3b:f4:0f:ee:40:19:6f:
         ed:23:f6:88:7c:f1:59:78:28:cd:6c:0a:81:36:f7:11:46:4d:
         c3:c4:27:50:b8:41:c5:b4:78:b2:f3:fb:46:14:c9:86:d0:dc:
         e7:41:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org