Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633830303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a633830303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          F4nALehTW8kCzxjH92SOf5ghcggqCjmD7ao48blNNS0=
Subject key identifier:   43:27:00:15:BD:B8:15:5F:61:16:D2:7D:A9:8B:1B:AA:42:4A:26:64
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       171EB947DDF56190312BB17EF98CC9299A810FB9
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633830303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:42:49 +0000
ROA not before:           Sat 02 Jul 2022 00:37:49 +0000
ROA not after:            Sat 01 Jul 2023 00:42:49 +0000
asID:                     262691
IP address blocks:        2804:1cd8:c800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:1e:b9:47:dd:f5:61:90:31:2b:b1:7e:f9:8c:c9:29:9a:81:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:37:49 2022 GMT
            Not After : Jul  1 00:42:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:65:a1:62:ee:81:8c:b2:a4:60:72:4f:3b:
                    e5:d0:31:9a:61:bc:65:3a:62:e1:f6:ec:5b:c6:20:
                    28:07:20:05:5a:ff:0f:08:5e:10:95:c3:43:36:f7:
                    52:81:61:01:32:3c:f7:9e:ca:b3:a3:c6:dc:60:62:
                    1a:ed:3d:fa:96:7a:a7:77:a0:c4:b8:2c:1b:30:40:
                    ae:33:1c:f3:a7:c9:e7:34:10:aa:f2:c7:4f:e8:81:
                    eb:4e:db:f9:08:70:3e:47:db:00:b3:dd:49:4f:bd:
                    09:37:60:32:fb:3d:99:30:e1:03:de:fc:5d:ca:4f:
                    0f:e6:81:30:27:47:67:2a:57:40:68:44:76:8d:bc:
                    d8:31:39:f3:fd:13:21:95:f2:0e:8e:24:41:88:3a:
                    41:a4:63:5c:83:d0:ca:26:8c:f6:9b:cc:b8:fa:bf:
                    11:03:21:52:9e:f8:bd:52:15:2b:2f:32:47:8a:34:
                    73:ca:c5:fc:3b:17:04:f8:00:01:e7:61:9b:e3:4d:
                    2d:47:b8:0f:23:19:db:9d:d8:d5:9c:01:42:8d:6a:
                    26:dd:89:59:06:44:4a:e9:db:d9:74:64:dc:21:1f:
                    50:5c:03:45:ef:78:6d:95:69:00:00:a8:8a:7e:7f:
                    a7:b4:5c:06:7f:36:ef:23:9b:27:93:6e:ea:69:72:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:27:00:15:BD:B8:15:5F:61:16:D2:7D:A9:8B:1B:AA:42:4A:26:64
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a633830303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:c800::/38

    Signature Algorithm: sha256WithRSAEncryption
         b0:c7:e2:52:e2:a3:14:e5:11:91:ef:26:8e:45:93:89:0e:28:
         cc:b7:73:aa:ce:66:c2:00:7f:60:3e:bf:c3:17:7f:61:40:a1:
         05:a5:df:91:b4:7c:7a:f9:0b:10:99:49:f0:d3:33:6e:34:4f:
         66:f1:4d:62:77:bd:f4:45:33:e1:b8:31:53:12:36:68:8c:33:
         37:3d:ad:7b:56:d8:ce:f9:f7:c5:20:e6:f5:31:b4:df:14:90:
         a1:5a:c5:ec:0f:14:bc:ee:a1:95:7e:77:a1:01:80:01:31:76:
         c9:17:80:c3:a1:98:94:62:90:5c:6e:30:6f:ed:3d:2c:49:34:
         0d:55:f7:17:3e:a6:3a:3f:94:8b:5e:16:7d:2e:39:b8:a8:51:
         35:c1:19:18:6d:54:53:c1:b9:d4:70:26:6a:6d:39:e1:6b:c7:
         a4:8c:1b:54:c1:fc:eb:d4:41:a4:bd:01:6c:93:20:ba:54:58:
         85:9d:ea:aa:d0:a1:6a:e1:ec:68:79:4c:88:9f:a8:05:ad:6e:
         92:53:0c:e4:00:ce:04:de:8f:d2:0c:d5:16:d2:b5:40:49:6b:
         90:18:8d:27:25:c2:0d:1c:99:ef:3c:46:e0:7e:3d:4b:5f:8f:
         e2:cd:c8:35:42:d6:4e:8e:8d:4d:5a:cf:a3:8b:e0:8f:6e:01:
         3c:96:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org