Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643030303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a643030303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          lPpwFEN7Mpxv7Y3KXc5/IJhO/3G4T/jJ1SfdZ0eHi5s=
Subject key identifier:   37:4D:83:7D:C6:04:A8:59:91:04:D5:89:BE:72:55:D3:8F:1F:D7:FC
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       2FE8A2CD8FE9F5EB1ED4985DDED0808DCD49C722
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643030303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:44:45 +0000
ROA not before:           Sat 02 Jul 2022 00:39:45 +0000
ROA not after:            Sat 01 Jul 2023 00:44:45 +0000
asID:                     262691
IP address blocks:        2804:1cd8:d000::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e8:a2:cd:8f:e9:f5:eb:1e:d4:98:5d:de:d0:80:8d:cd:49:c7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:39:45 2022 GMT
            Not After : Jul  1 00:44:45 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5d:47:0c:9f:a3:ed:36:e7:f7:6b:56:87:18:
                    59:c2:13:10:cd:8e:58:51:00:11:a7:99:be:f1:10:
                    14:31:b4:fa:1b:61:a6:25:a7:b0:6f:d1:8b:73:ed:
                    a4:f4:7b:5a:81:12:7e:89:4b:af:06:e1:be:f3:d4:
                    1c:7b:0c:7a:bd:3a:4b:53:e9:45:51:fd:8d:37:ed:
                    ce:c6:12:e1:d0:d9:c0:c4:49:14:db:5f:64:db:cf:
                    de:7f:0c:07:79:fc:d2:6a:cc:64:8e:fd:e2:0a:95:
                    be:eb:b1:08:31:e4:16:cc:e3:ce:3b:f1:e0:1c:3e:
                    7d:87:93:2d:9b:e6:97:94:56:40:50:26:d2:72:7e:
                    4c:39:0e:ad:27:1c:d8:84:ce:05:61:04:63:4b:f2:
                    2f:1a:e3:06:16:6f:c8:88:ce:c6:a3:6f:c7:9c:6e:
                    6a:7e:7d:97:27:6a:70:72:fa:28:97:13:3b:6c:85:
                    1f:44:e6:65:70:4d:80:4c:24:52:33:9a:47:aa:f4:
                    f7:8b:6d:21:6b:0d:d0:94:27:c5:8e:b1:d8:2c:20:
                    f1:c4:01:91:6b:2d:c8:e3:cc:ce:27:9d:c9:d0:e5:
                    7a:15:a8:b3:47:ca:a8:f5:03:28:dd:96:31:10:69:
                    57:ef:22:82:9c:d7:92:21:7f:b4:54:ad:dc:0f:2b:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4D:83:7D:C6:04:A8:59:91:04:D5:89:BE:72:55:D3:8F:1F:D7:FC
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643030303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:d000::/38

    Signature Algorithm: sha256WithRSAEncryption
         72:96:d1:17:50:68:5e:53:47:f7:0b:dc:dd:cf:b1:40:79:d9:
         45:1f:23:09:79:8b:eb:a5:5c:b0:02:ce:25:7f:91:40:92:46:
         b9:e9:3a:de:ee:2c:5e:ba:b5:4e:10:99:f5:1f:c7:00:79:82:
         54:f6:3d:41:b2:22:00:dc:57:45:45:82:c5:e6:11:fe:9a:a2:
         3f:71:36:45:b0:c3:a7:d0:fd:77:b2:c9:1d:5c:65:c5:93:4e:
         cf:09:a4:25:a3:68:49:68:94:17:10:a0:7c:51:4b:f1:43:97:
         42:19:20:ee:bd:fa:6e:56:a4:7f:9b:16:aa:61:4d:f8:cf:6a:
         05:7d:12:5e:c4:a3:f0:ad:54:6f:8c:79:5a:e5:d3:6b:b7:a2:
         db:53:d1:02:91:1d:02:9a:80:1c:bd:ec:f3:11:90:c9:4a:3a:
         59:3d:ec:9d:a2:bb:9c:e8:00:69:74:b8:62:e6:1e:51:57:4e:
         80:c3:c3:84:7c:c9:b1:f8:6e:78:3e:17:dc:90:76:fc:59:6c:
         cb:0c:19:e4:7a:45:d0:44:d9:22:1a:08:a3:49:aa:b8:e2:d5:
         83:a3:c7:7d:b4:54:4c:9e:22:f1:17:a9:0e:e5:18:53:d2:66:
         2e:9a:e5:5c:1b:46:7f:b0:57:25:72:e6:ef:78:bf:08:8e:71:
         d4:8d:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org