Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633430303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a633430303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          PcQlSTJfZM51oi+Ala60Ec3HgRidIR706XjIZaOZPmg=
Subject key identifier:   CF:F8:AE:12:77:85:E5:E4:73:30:F9:4D:76:39:4A:A3:31:F9:5F:C2
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       68960278C765F216949ED6771CC58458783A80A9
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633430303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:42:38 +0000
ROA not before:           Sat 02 Jul 2022 00:37:38 +0000
ROA not after:            Sat 01 Jul 2023 00:42:38 +0000
asID:                     262691
IP address blocks:        2804:1cd8:c400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:96:02:78:c7:65:f2:16:94:9e:d6:77:1c:c5:84:58:78:3a:80:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:37:38 2022 GMT
            Not After : Jul  1 00:42:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:9c:d0:d0:68:02:e1:c5:dc:e3:32:c3:35:
                    68:2e:a1:40:fb:9e:eb:1d:fd:83:6a:91:53:ee:78:
                    59:f2:5c:26:0f:92:c3:f4:81:c5:e9:28:d2:1b:6c:
                    b2:8e:b6:ee:f8:49:16:78:68:cf:f4:3f:7d:d5:49:
                    c0:16:29:fd:31:8d:58:90:ab:c1:84:d4:4e:34:f4:
                    a3:68:65:4b:84:93:8c:a5:90:8c:04:1e:70:af:ed:
                    7e:90:60:d5:b8:e4:0e:9a:f0:42:aa:9b:b9:e5:7d:
                    08:e9:3b:48:11:39:dc:7a:61:50:e0:3a:82:e9:27:
                    6b:d8:84:45:8b:b8:7e:1e:21:d9:83:09:ee:2b:57:
                    59:d4:7f:68:ae:13:d2:10:c1:a1:ef:06:fb:65:57:
                    0c:ae:09:fa:bf:27:fa:14:ea:19:8c:95:9a:da:3e:
                    28:71:0e:da:20:fc:3f:c5:44:37:27:c8:24:49:ef:
                    26:69:73:ad:33:84:6c:4d:13:18:d3:76:5a:f7:0e:
                    5c:f5:7f:a1:cd:34:e2:c9:28:d3:4a:d3:26:ce:54:
                    b3:31:47:a2:c3:f1:80:f9:8c:1b:a0:03:c8:82:21:
                    ee:0e:9f:eb:01:1a:2b:81:c4:41:34:2e:ad:77:50:
                    3b:0f:cf:20:f7:a3:4c:af:9c:91:c4:bd:7d:79:cb:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:AE:12:77:85:E5:E4:73:30:F9:4D:76:39:4A:A3:31:F9:5F:C2
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633430303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:c400::/38

    Signature Algorithm: sha256WithRSAEncryption
         40:83:72:6c:dd:1a:c7:ca:17:1a:14:79:80:37:25:83:26:a3:
         36:1f:07:b9:ff:28:93:12:77:dd:98:78:a9:7a:1b:39:63:5c:
         e6:a6:cd:b7:20:b4:08:c4:dc:ef:36:d3:04:55:46:d8:af:e7:
         c6:ea:16:56:a6:b5:22:1a:45:13:b5:33:16:8b:04:dd:09:dd:
         c1:c0:bf:28:42:8b:ba:4e:5d:90:21:fa:71:a5:05:e8:c5:8e:
         64:24:d4:53:62:f2:4e:8e:10:c8:82:00:50:0b:10:3e:d7:b8:
         3b:15:f2:41:b5:6f:d5:a0:33:c0:45:98:2c:6b:53:06:14:16:
         ea:3a:ec:d3:40:09:88:0e:94:87:18:4e:9c:ba:01:d4:cd:bc:
         50:08:83:12:2b:30:89:a1:43:00:18:bd:8d:4a:a6:b4:d5:5a:
         7b:d0:89:f1:aa:54:27:14:24:44:48:bb:d0:6b:aa:57:96:69:
         3c:54:5d:49:79:75:64:ae:9c:07:f6:62:9e:12:73:83:7c:a4:
         72:b6:ea:07:c6:db:28:d5:ca:0a:3d:fb:f0:20:b3:1e:26:49:
         85:6d:bb:5e:6b:74:2f:0f:87:4a:d8:6c:ed:d7:90:12:9c:4e:
         7f:2c:58:64:83:07:fb:a5:0d:a2:b7:d0:2d:b8:5f:b9:3e:67:
         af:59:98:a8
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUaJYCeMdl8haUntZ3HMWEWHg6gKkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMjA3MDIwMDM3MzhaFw0yMzA3MDEwMDQyMzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREQ3ODlDRDBEMDY4MDJFMUM1
RENFMzMyQzMzNTY4MkVBMTQwRkI5RUVCMURGRDgzNkE5MTUzRUU3ODU5RjI1QzI2
MEY5MkMzRjQ4MUM1RTkyOEQyMUI2Q0IyOEVCNkVFRjg0OTE2Nzg2OENGRjQzRjdE
RDU0OUMwMTYyOUZEMzE4RDU4OTBBQkMxODRENDRFMzRGNEEzNjg2NTRCODQ5MzhD
QTU5MDhDMDQxRTcwQUZFRDdFOTA2MEQ1QjhFNDBFOUFGMDQyQUE5QkI5RTU3RDA4
RTkzQjQ4MTEzOURDN0E2MTUwRTAzQTgyRTkyNzZCRDg4NDQ1OEJCODdFMUUyMUQ5
ODMwOUVFMkI1NzU5RDQ3RjY4QUUxM0QyMTBDMUExRUYwNkZCNjU1NzBDQUUwOUZB
QkYyN0ZBMTRFQTE5OEM5NTlBREEzRTI4NzEwRURBMjBGQzNGQzU0NDM3MjdDODI0
NDlFRjI2Njk3M0FEMzM4NDZDNEQxMzE4RDM3NjVBRjcwRTVDRjU3RkExQ0QzNEUy
QzkyOEQzNEFEMzI2Q0U1NEIzMzE0N0EyQzNGMTgwRjk4QzFCQTAwM0M4ODIyMUVF
MEU5RkVCMDExQTJCODFDNDQxMzQyRUFENzc1MDNCMEZDRjIwRjdBMzRDQUY5Qzkx
QzRCRDdENzlDQjU5MDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3Xic0NBoAuHF3OMywzVoLqFA+57rHf2DapFT7nhZ8lwmD5LD9IHF
6SjSG2yyjrbu+EkWeGjP9D991UnAFin9MY1YkKvBhNRONPSjaGVLhJOMpZCMBB5w
r+1+kGDVuOQOmvBCqpu55X0I6TtIETncemFQ4DqC6Sdr2IRFi7h+HiHZgwnuK1dZ
1H9orhPSEMGh7wb7ZVcMrgn6vyf6FOoZjJWa2j4ocQ7aIPw/xUQ3J8gkSe8maXOt
M4RsTRMY03Za9w5c9X+hzTTiySjTStMmzlSzMUeiw/GA+YwboAPIgiHuDp/rARor
gcRBNC6td1A7D88g96NMr5yRxL19ectZAwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FM/4rhJ3heXkczD5TXY5SqMx+V/CMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMyMzgzMDM0M2EzMTYzNjQzODNh
NjMzNDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMjM2MzIzNjM5MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgIoBBzYxDANBgkqhkiG9w0BAQsFAAOCAQEAQINybN0ax8oXGhR5gDcl
gyajNh8Huf8okxJ33Zh4qXobOWNc5qbNtyC0CMTc7zbTBFVG2K/nxuoWVqa1IhpF
E7UzFosE3QndwcC/KEKLuk5dkCH6caUF6MWOZCTUU2LyTo4QyIIAUAsQPte4OxXy
QbVv1aAzwEWYLGtTBhQW6jrs00AJiA6UhxhOnLoB1M28UAiDEiswiaFDABi9jUqm
tNVae9CJ8apUJxQkREi70GuqV5ZpPFRdSXl1ZK6cB/ZinhJzg3ykcrbqB8bbKNXK
Cj378CCzHiZJhW27Xmt0Lw+HSths7deQEpxOfyxYZIMH+6UNorfQLbhfuT5nr1mY
qA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org