Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa
File:                     323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa (raw, json)
Hash identifier:          nV0fspXCliyB36gp1VKtvkjhHCw0MjA66HfKv59um9g=
Subject key identifier:   93:E4:61:4D:E3:0B:9F:B0:36:43:3B:38:AE:C8:B2:BB:C2:70:9E:05
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       3324F8CDC4FA5E03A8805F7476B26E800FDF6F10
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa
Signing time:             Sat 16 Oct 2021 16:16:17 +0000
ROA not before:           Sat 16 Oct 2021 16:11:17 +0000
ROA not after:            Sat 15 Oct 2022 16:16:17 +0000
asID:                     262691
IP address blocks:        2804:1cd8:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:24:f8:cd:c4:fa:5e:03:a8:80:5f:74:76:b2:6e:80:0f:df:6f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Oct 16 16:11:17 2021 GMT
            Not After : Oct 15 16:16:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:7f:e7:5a:99:79:6b:f5:3f:83:2d:74:bc:
                    74:bf:0e:22:fb:37:7d:70:00:34:d9:ed:11:1e:5b:
                    5b:32:4c:f3:87:46:16:70:dc:65:97:03:fd:55:72:
                    f8:66:eb:4f:49:73:8b:c6:56:a8:31:54:78:bf:58:
                    03:6c:74:f6:68:d4:33:b3:3d:b7:02:77:f6:93:96:
                    fc:76:ec:37:ff:3f:4b:7e:f6:56:63:72:e9:8a:f8:
                    a2:07:98:0e:13:3c:22:86:f2:62:72:d5:8e:0b:d8:
                    1b:59:f7:66:8a:02:2c:ba:10:52:73:05:d9:81:e0:
                    50:87:88:a5:70:3b:2e:0a:cf:7e:5f:bc:ad:d9:76:
                    3c:ae:4a:e5:e2:de:18:fd:7f:d3:4f:42:10:01:ed:
                    c1:ac:5a:d7:be:cd:fa:54:f6:c3:c9:22:95:01:ff:
                    1d:07:ac:47:e4:62:71:23:f1:d2:ce:d0:20:8f:dc:
                    72:42:cc:ce:3d:18:a9:05:f0:04:fa:a0:31:d8:b7:
                    d5:cf:08:e2:84:36:0f:9e:ee:e6:3f:25:79:b1:71:
                    09:e9:39:1e:fc:32:66:33:9f:0c:ae:df:e7:49:35:
                    7d:a2:d8:f1:c0:f6:1a:4e:ff:dd:2c:f7:b6:5e:45:
                    75:5f:69:fb:20:bc:85:61:c5:94:17:13:3c:f8:8c:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E4:61:4D:E3:0B:9F:B0:36:43:3B:38:AE:C8:B2:BB:C2:70:9E:05
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643030303a3a2f33362d3336203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:1e:a6:e3:8f:48:42:ad:3e:03:8f:c9:5c:0b:39:5c:2d:
         f8:36:76:7e:84:32:92:d8:2f:81:ed:19:ee:10:15:c7:d8:a4:
         2c:1e:7f:95:c2:b8:b2:02:a1:09:7e:af:d5:dd:e2:52:6a:0b:
         9b:cd:57:ec:03:65:6b:3a:56:dd:2c:eb:64:d0:59:6d:bc:ae:
         2a:7e:c8:79:f6:bb:a0:c6:16:51:9e:93:ba:3b:97:31:0b:9b:
         e6:bc:4d:cf:6f:52:9b:b4:bd:ee:38:46:86:19:95:59:b0:75:
         75:d7:53:a5:81:e2:5d:b3:7a:91:c8:ff:3d:a5:2d:aa:66:df:
         fd:d3:9d:26:c9:f6:84:d0:f5:03:f9:4e:1c:77:f8:e0:9c:d8:
         e8:c1:a7:a3:67:75:dd:db:46:95:83:ed:81:d0:c9:25:3a:38:
         78:f6:7a:08:40:48:b8:08:03:e5:d3:f4:53:b1:20:c0:fc:98:
         ab:7b:58:a5:63:ab:a6:6a:ba:d4:53:e4:82:a4:8c:c2:b2:53:
         ba:27:f3:f1:c9:de:53:6a:e1:3f:7f:66:3c:32:4d:b3:d7:61:
         98:bd:51:a3:56:fe:97:48:85:42:65:9a:16:28:5d:e9:de:74:
         1c:ef:24:2b:30:57:31:c8:c1:ff:ed:8e:41:a2:c2:6f:6f:71:
         8c:81:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org