Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a636330303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a636330303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          ZiyeOlq3/slf6/k3QET78SPKDEUZ4H4IYVuxbu6ZkIQ=
Subject key identifier:   57:82:13:B3:28:B6:CE:77:C2:30:CF:1E:29:D5:19:44:6C:E5:D5:66
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       582D368F6BFD97985F745B1989FD1F12FDB45C78
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a636330303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:43:32 +0000
ROA not before:           Sat 02 Jul 2022 00:38:32 +0000
ROA not after:            Sat 01 Jul 2023 00:43:32 +0000
asID:                     262691
IP address blocks:        2804:1cd8:cc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:2d:36:8f:6b:fd:97:98:5f:74:5b:19:89:fd:1f:12:fd:b4:5c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:38:32 2022 GMT
            Not After : Jul  1 00:43:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:27:93:26:62:0a:ee:ec:90:5a:ef:68:e0:
                    38:75:77:af:86:dc:30:01:2a:5c:2d:69:0c:52:fd:
                    76:05:4c:5d:ff:c4:f3:ab:f4:bc:63:4c:e4:1a:20:
                    14:d1:d7:1f:8d:e2:62:eb:3c:2a:56:ed:04:b9:fc:
                    e7:24:44:26:25:6b:cf:05:23:81:58:d1:94:6a:51:
                    bd:85:0c:d4:40:c0:ff:7a:ce:33:ca:06:8c:6a:6e:
                    29:fc:83:6a:45:f3:55:5f:c9:62:0b:01:53:ae:fb:
                    55:77:85:fc:7f:34:85:94:ee:a0:ef:99:70:99:90:
                    f9:a2:23:f2:d8:ae:67:ae:3b:7f:37:85:b5:15:1f:
                    5a:0c:8b:9c:4f:52:c9:6d:d8:fb:bc:64:b2:83:1a:
                    ee:5f:93:10:32:45:ca:fd:46:c0:80:58:19:24:bd:
                    ad:d8:75:d0:39:28:15:ed:04:78:96:a2:2f:eb:5f:
                    b9:2a:b1:0f:7e:fc:80:25:91:25:fb:70:5e:7a:1b:
                    01:54:ec:02:9f:b6:e6:d0:51:e4:14:0f:20:12:5b:
                    3b:55:e7:fb:b7:6a:90:e3:e6:f6:60:b7:87:af:3b:
                    dd:0c:52:c4:7d:ed:5c:c7:b8:2f:cf:24:1d:83:a7:
                    f4:c5:e4:1f:50:d7:b9:c8:00:56:04:c7:98:5a:83:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:13:B3:28:B6:CE:77:C2:30:CF:1E:29:D5:19:44:6C:E5:D5:66
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a636330303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:cc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         62:23:9e:e6:d3:ab:a2:c6:19:f2:2f:7c:2f:f9:d2:12:2b:71:
         df:83:de:72:f4:3c:7b:5f:84:d4:47:a2:40:8d:d3:7b:25:f3:
         c2:e1:3d:7d:6a:07:d1:52:49:46:69:4c:e7:79:7a:19:89:67:
         16:ab:a7:88:19:c3:56:1d:0a:c5:15:f2:76:2d:35:5a:81:c2:
         44:1d:89:f9:33:71:7c:59:d5:f6:b9:7a:2c:9f:40:9c:95:af:
         21:a3:76:49:b0:fc:f0:f7:6d:9e:d9:38:2a:82:53:f1:d4:4d:
         5f:3b:68:65:30:17:ab:9f:a8:d6:ee:f3:78:81:a7:b1:16:69:
         a5:17:c6:89:57:5f:cb:e8:91:d6:32:7e:c9:d5:ad:6a:41:0b:
         17:5f:5c:13:8e:81:10:fe:97:b7:80:18:fa:fe:d8:56:22:fc:
         fe:ee:24:c9:0a:80:56:69:a9:cf:47:28:a0:b7:7d:12:55:e2:
         9b:48:71:72:76:80:6b:24:37:99:7e:81:80:21:42:57:9c:91:
         78:1c:5a:7a:db:8d:2a:32:81:af:b9:3e:f8:b9:fd:18:44:12:
         a6:15:20:5f:f8:e4:0e:5b:3d:6e:22:ff:40:fc:ca:78:db:42:
         72:1c:29:89:48:88:18:78:24:e7:ca:d2:b9:91:73:77:99:8a:
         16:17:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org