Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633030303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a633030303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          8WFEk1KDyf/GYwHCmvy7seBEXkTtFB7n7YWniCqcAZY=
Subject key identifier:   10:63:DB:08:7F:0A:A6:73:72:B1:43:00:B0:1C:7A:FC:97:DB:6C:EF
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       7AD98E3B311822D47C7C545CE5FCA4F4A0304437
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633030303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:42:28 +0000
ROA not before:           Sat 02 Jul 2022 00:37:28 +0000
ROA not after:            Sat 01 Jul 2023 00:42:28 +0000
asID:                     262691
IP address blocks:        2804:1cd8:c000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d9:8e:3b:31:18:22:d4:7c:7c:54:5c:e5:fc:a4:f4:a0:30:44:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:37:28 2022 GMT
            Not After : Jul  1 00:42:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:b2:07:29:d5:c5:22:84:51:b3:98:5f:6f:
                    4e:82:08:2a:b5:41:b7:a5:00:1e:52:23:3f:b4:f9:
                    36:49:50:65:45:a7:08:06:ac:10:e7:39:eb:62:52:
                    9e:15:f3:fe:ba:2e:25:0f:29:9b:51:e1:7d:d6:d9:
                    8c:0b:c5:f1:96:fd:f8:2c:15:3c:d8:7d:6b:9b:8a:
                    d0:27:cf:57:aa:50:bd:12:4b:f4:71:da:a6:9d:84:
                    95:a3:e3:3e:00:a3:d0:5f:20:2b:97:b8:f8:59:96:
                    2b:bc:3e:8a:fe:96:25:10:da:01:41:01:f1:9d:01:
                    76:5f:80:5b:07:59:33:9d:7c:c5:ee:04:9e:2d:15:
                    c5:2a:71:1a:bc:6e:9f:51:d9:6a:fc:43:7a:57:e6:
                    7a:4d:83:38:94:94:a5:bc:2f:86:d4:f1:f8:a7:b9:
                    06:22:cd:96:97:22:57:27:10:c7:20:45:34:35:b0:
                    cd:05:f0:ec:0c:57:1a:e8:d1:dc:ff:82:53:2d:c3:
                    7f:d1:30:b9:16:03:0f:37:80:b4:4a:47:4e:c6:f0:
                    7f:98:6f:4a:dc:5f:03:d1:0a:9d:3f:2a:be:9f:c1:
                    84:de:a3:b6:3e:fd:d0:bc:6f:53:c8:d8:a8:9f:ab:
                    d0:bc:c9:c9:78:ac:f5:24:37:e3:29:a1:6f:9c:be:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:63:DB:08:7F:0A:A6:73:72:B1:43:00:B0:1C:7A:FC:97:DB:6C:EF
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633030303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:c000::/38

    Signature Algorithm: sha256WithRSAEncryption
         ac:5e:a8:e8:2a:de:e9:63:b3:8b:7c:bb:be:7d:a1:ac:4e:95:
         c4:da:00:bc:26:61:c7:2b:5a:b8:4d:72:49:e4:d4:e1:bf:b4:
         6d:27:5a:d6:43:74:7b:56:cb:ae:8e:36:13:55:8b:be:ca:2f:
         35:64:a7:45:f8:0b:6d:b2:1c:40:d2:0a:11:02:7b:d4:79:c0:
         28:9f:46:cf:42:59:cd:39:24:69:c5:09:ed:8d:7b:dc:81:11:
         c0:ef:86:e8:9e:59:d7:3e:8b:6d:d9:62:db:7c:58:cb:42:0f:
         3b:5a:7d:18:47:58:11:d1:59:6f:a2:39:23:4f:88:9c:63:ae:
         b3:0c:dd:0e:d2:cf:16:d7:ee:76:08:8e:36:7d:39:e2:b4:7f:
         58:0d:24:a6:61:0c:ac:78:19:3d:d6:73:81:9f:bd:e4:12:54:
         36:79:11:bd:cc:4a:d0:ac:7f:1e:f5:fb:c8:cd:31:30:34:ec:
         b0:44:b3:2b:e1:cc:68:f8:59:1f:52:68:c8:13:6d:4a:32:a4:
         f3:66:67:32:c1:fb:da:44:ba:3f:a7:27:c2:5c:ec:ec:c1:50:
         e6:2a:3f:1e:69:9e:80:e8:80:3a:4d:9a:c7:a3:29:68:9b:06:
         31:11:9d:a8:05:b1:ba:f6:7f:0f:17:6e:46:86:46:58:6d:e0:
         38:97:21:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org