Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643430303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a643430303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          tL6tOYUpNalDmf9jm1B9iXjrzUZvXff0GRFJH8lWuGI=
Subject key identifier:   F8:79:71:6E:8E:3B:9E:68:6F:76:8A:93:AF:51:C6:63:39:6F:36:41
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       0C3040B86DC9491B737B3FF41B57BD4B2165E755
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643430303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:44:55 +0000
ROA not before:           Sat 02 Jul 2022 00:39:55 +0000
ROA not after:            Sat 01 Jul 2023 00:44:55 +0000
asID:                     262691
IP address blocks:        2804:1cd8:d400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:30:40:b8:6d:c9:49:1b:73:7b:3f:f4:1b:57:bd:4b:21:65:e7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:39:55 2022 GMT
            Not After : Jul  1 00:44:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:ec:61:19:1f:19:e6:d2:5c:1e:12:f0:53:
                    5d:bd:78:af:5e:01:d1:72:7a:0d:c7:ef:08:8f:05:
                    86:13:09:77:f2:3e:91:57:a0:90:47:5d:7e:fa:16:
                    58:88:99:7b:fb:a7:1a:32:c4:83:90:02:a4:7d:3a:
                    56:c5:ba:76:4b:32:18:df:d0:e9:d0:03:1e:bc:ec:
                    38:bc:52:a7:07:73:c7:49:b4:ff:4f:9e:53:56:8d:
                    3f:63:27:3c:a9:8f:9c:1c:c3:5d:dd:63:5d:8f:9f:
                    dd:76:98:c1:34:95:61:44:9f:c8:02:c6:7e:f4:be:
                    fd:1b:a6:30:4e:2e:54:5a:51:3c:d2:b3:32:9f:64:
                    93:69:1b:72:59:cc:ed:e4:a7:24:17:aa:1b:4a:cd:
                    1e:39:fd:8e:6b:98:7a:89:82:79:8f:fb:5b:c1:0b:
                    58:94:83:2b:11:4b:c8:a3:0c:d4:54:fc:bb:89:50:
                    79:19:03:ad:10:00:50:98:f2:28:b8:10:ac:7c:94:
                    7c:f6:b3:9e:a0:80:3b:11:1e:ae:67:be:1b:3a:bf:
                    48:92:cf:6d:95:cf:4f:5b:af:68:51:1d:f5:4e:ea:
                    dd:a9:35:08:53:e9:c6:e0:e7:c9:87:04:83:5f:40:
                    dd:5c:2f:5c:e4:fd:aa:4b:7b:26:14:12:38:66:1e:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:71:6E:8E:3B:9E:68:6F:76:8A:93:AF:51:C6:63:39:6F:36:41
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a643430303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:d400::/38

    Signature Algorithm: sha256WithRSAEncryption
         59:93:39:b4:5b:c4:d0:7d:fe:dc:75:a1:6e:1b:10:6d:68:f8:
         cb:c4:5e:b7:11:9e:8b:3c:3e:73:90:5e:11:55:6d:cc:db:df:
         a0:08:b1:ae:17:d1:00:1b:f1:ba:9d:c5:85:ba:f2:d5:c5:eb:
         b0:e8:4f:8e:8d:24:ed:7f:de:e7:c2:ae:b0:64:20:8d:6e:e1:
         62:84:8b:56:a3:14:02:b1:00:42:b0:7a:04:4c:d7:97:b5:c4:
         4f:b1:44:2c:31:b1:e0:df:00:d8:e2:e7:dd:c7:b0:dc:7d:16:
         19:74:6d:84:ac:7c:e2:a2:b0:ee:22:29:46:60:0f:6e:05:27:
         a6:0d:de:37:be:86:b7:ba:f1:88:13:dd:55:3d:27:cf:47:08:
         61:0e:e5:e8:06:01:58:5c:30:da:09:0c:cc:60:80:ab:5f:2d:
         ca:a4:f0:91:33:14:93:cd:10:3c:0b:bb:03:22:96:c1:d3:0d:
         a8:ba:67:f8:82:2e:f4:b1:f9:34:c9:a6:43:e3:44:9b:72:b4:
         9b:6d:08:a0:26:1b:e3:c0:2d:83:34:49:e7:d0:a2:9e:f2:a9:
         52:b6:f4:99:82:36:f4:4b:d2:b6:3c:d7:ee:88:1d:6f:f7:89:
         6f:eb:51:0e:fa:45:6e:3f:91:4d:e3:c6:13:10:0a:86:1b:0c:
         57:69:ce:08
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUDDBAuG3JSRtzez/0G1e9SyFl51UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0I3NjVCNzAxQTQ3QkY3MkU3N0I4NjQyQURDMjgwQTMw
MTcxODVCOTAeFw0yMjA3MDIwMDM5NTVaFw0yMzA3MDEwMDQ0NTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkE3Q0VDNjExOTFGMTlFNkQy
NUMxRTEyRjA1MzVEQkQ3OEFGNUUwMUQxNzI3QTBEQzdFRjA4OEYwNTg2MTMwOTc3
RjIzRTkxNTdBMDkwNDc1RDdFRkExNjU4ODg5OTdCRkJBNzFBMzJDNDgzOTAwMkE0
N0QzQTU2QzVCQTc2NEIzMjE4REZEMEU5RDAwMzFFQkNFQzM4QkM1MkE3MDc3M0M3
NDlCNEZGNEY5RTUzNTY4RDNGNjMyNzNDQTk4RjlDMUNDMzVEREQ2MzVEOEY5RkRE
NzY5OEMxMzQ5NTYxNDQ5RkM4MDJDNjdFRjRCRUZEMUJBNjMwNEUyRTU0NUE1MTND
RDJCMzMyOUY2NDkzNjkxQjcyNTlDQ0VERTRBNzI0MTdBQTFCNEFDRDFFMzlGRDhF
NkI5ODdBODk4Mjc5OEZGQjVCQzEwQjU4OTQ4MzJCMTE0QkM4QTMwQ0Q0NTRGQ0JC
ODk1MDc5MTkwM0FEMTAwMDUwOThGMjI4QjgxMEFDN0M5NDdDRjZCMzlFQTA4MDNC
MTExRUFFNjdCRTFCM0FCRjQ4OTJDRjZEOTVDRjRGNUJBRjY4NTExREY1NEVFQURE
QTkzNTA4NTNFOUM2RTBFN0M5ODcwNDgzNUY0MERENUMyRjVDRTRGREFBNEI3QjI2
MTQxMjM4NjYxRTE4QkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAunzsYRkfGebSXB4S8FNdvXivXgHRcnoNx+8IjwWGEwl38j6RV6CQ
R11++hZYiJl7+6caMsSDkAKkfTpWxbp2SzIY39Dp0AMevOw4vFKnB3PHSbT/T55T
Vo0/Yyc8qY+cHMNd3WNdj5/ddpjBNJVhRJ/IAsZ+9L79G6YwTi5UWlE80rMyn2ST
aRtyWczt5KckF6obSs0eOf2Oa5h6iYJ5j/tbwQtYlIMrEUvIowzUVPy7iVB5GQOt
EABQmPIouBCsfJR89rOeoIA7ER6uZ74bOr9Iks9tlc9PW69oUR31TurdqTUIU+nG
4OfJhwSDX0DdXC9c5P2qS3smFBI4Zh4YuwIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FPh5cW6OO55ob3aKk69RxmM5bzZBMB8GA1UdIwQYMBaAFDt2W3AaR79y53uGQq3C
gKMBcYW5MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlpd2RBNGJ6NHZYSGdr
Z2ZDaDlKajVaTWJkYk5NaVRYcm45Z1BOTnRWNHZCLzAvM0I3NjVCNzAxQTQ3QkY3
MkU3N0I4NjQyQURDMjgwQTMwMTcxODVCOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8zQjc2NUI3MDFBNDdCRjcyRTc3Qjg2NDJBREMyODBBMzAxNzE4
NUI5LmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85aXdkQTRiejR2WEhna2dmQ2g5
Smo1Wk1iZGJOTWlUWHJuOWdQTk50VjR2Qi8wLzMyMzgzMDM0M2EzMTYzNjQzODNh
NjQzNDMwMzAzYTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMjM2MzIzNjM5MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgIoBBzY1DANBgkqhkiG9w0BAQsFAAOCAQEAWZM5tFvE0H3+3HWhbhsQ
bWj4y8RetxGeizw+c5BeEVVtzNvfoAixrhfRABvxup3Fhbry1cXrsOhPjo0k7X/e
58KusGQgjW7hYoSLVqMUArEAQrB6BEzXl7XET7FELDGx4N8A2OLn3cew3H0WGXRt
hKx84qKw7iIpRmAPbgUnpg3eN76Gt7rxiBPdVT0nz0cIYQ7l6AYBWFww2gkMzGCA
q18tyqTwkTMUk80QPAu7AyKWwdMNqLpn+IIu9LH5NMmmQ+NEm3K0m20IoCYb48At
gzRJ59CinvKpUrb0mYI29EvStjzX7ogdb/eJb+tRDvpFbj+RTePGExAKhhsMV2nO
CA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org