Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a646330303a3a2f33382d3338203d3e20323632363931.roa
File:                     323830343a316364383a646330303a3a2f33382d3338203d3e20323632363931.roa (raw, json)
Hash identifier:          vXQxM6i2L5pxYlY5NKHITKCvhnwbCu5HPXzvRDSLlaA=
Subject key identifier:   B8:06:8F:9C:4C:F6:B3:78:1E:AD:ED:31:39:6B:51:2B:BD:03:F9:F3
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       1273EABB9ADC3FF5B043090550881D44EBD30E67
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a646330303a3a2f33382d3338203d3e20323632363931.roa
Signing time:             Sat 02 Jul 2022 00:45:13 +0000
ROA not before:           Sat 02 Jul 2022 00:40:13 +0000
ROA not after:            Sat 01 Jul 2023 00:45:13 +0000
asID:                     262691
IP address blocks:        2804:1cd8:dc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:73:ea:bb:9a:dc:3f:f5:b0:43:09:05:50:88:1d:44:eb:d3:0e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jul  2 00:40:13 2022 GMT
            Not After : Jul  1 00:45:13 2023 GMT
        Subject: CN=3082010A028201010099A03E8876D86E87FCEC85774BC2445AE8A8C8D1E5B3487143DEF22EF5304DCD4B5D773F22B2C37138217AFAAA1C6A87371EF36A59C5DA48761EB5EE9789CD2CB5D09153223CB0795BC9912A7F72E7207A0E535E3D4A9CF75531376086F76A261C22E02AF0DC4F2D8110B76384C6334145ED0598CCC3C9A0E7770C9DE9FEBC4BD23E11B2BCEBB732A328A2C7CF1B018F87F8313642E935161587D7EBBEACA6A0059F3E0B9436C53A32695A66CD35638011361718620FBBE8EF05219C2BCBFCE65FDB2E0B63F9847F7DF79DC2438C4E162DC0BD38B935364254498564A50B39E095C38394B6665B8C5C681ABD9D92DF4C5AB47B110337E5C341D6106B9242C6210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:3e:88:76:d8:6e:87:fc:ec:85:77:4b:c2:
                    44:5a:e8:a8:c8:d1:e5:b3:48:71:43:de:f2:2e:f5:
                    30:4d:cd:4b:5d:77:3f:22:b2:c3:71:38:21:7a:fa:
                    aa:1c:6a:87:37:1e:f3:6a:59:c5:da:48:76:1e:b5:
                    ee:97:89:cd:2c:b5:d0:91:53:22:3c:b0:79:5b:c9:
                    91:2a:7f:72:e7:20:7a:0e:53:5e:3d:4a:9c:f7:55:
                    31:37:60:86:f7:6a:26:1c:22:e0:2a:f0:dc:4f:2d:
                    81:10:b7:63:84:c6:33:41:45:ed:05:98:cc:c3:c9:
                    a0:e7:77:0c:9d:e9:fe:bc:4b:d2:3e:11:b2:bc:eb:
                    b7:32:a3:28:a2:c7:cf:1b:01:8f:87:f8:31:36:42:
                    e9:35:16:15:87:d7:eb:be:ac:a6:a0:05:9f:3e:0b:
                    94:36:c5:3a:32:69:5a:66:cd:35:63:80:11:36:17:
                    18:62:0f:bb:e8:ef:05:21:9c:2b:cb:fc:e6:5f:db:
                    2e:0b:63:f9:84:7f:7d:f7:9d:c2:43:8c:4e:16:2d:
                    c0:bd:38:b9:35:36:42:54:49:85:64:a5:0b:39:e0:
                    95:c3:83:94:b6:66:5b:8c:5c:68:1a:bd:9d:92:df:
                    4c:5a:b4:7b:11:03:37:e5:c3:41:d6:10:6b:92:42:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:06:8F:9C:4C:F6:B3:78:1E:AD:ED:31:39:6B:51:2B:BD:03:F9:F3
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/323830343a316364383a646330303a3a2f33382d3338203d3e20323632363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd8:dc00::/38

    Signature Algorithm: sha256WithRSAEncryption
         38:c4:16:0a:8d:b3:76:5b:0c:ad:1d:2a:9d:9c:9b:4b:66:d2:
         b4:ee:20:96:d4:96:55:a9:bc:b1:f8:5c:57:3b:e7:df:3f:1b:
         0b:6e:3e:c3:89:cb:18:af:1d:10:1e:7f:9e:03:7e:58:8a:dc:
         0c:b9:bd:61:37:fc:4d:ea:61:6e:55:b0:9d:bd:eb:15:19:99:
         d2:8e:3f:66:d6:95:52:31:ca:5d:ca:11:e1:49:93:9a:e3:b8:
         01:59:31:49:c0:bd:42:cd:39:34:61:8c:18:06:2a:06:ee:9e:
         cc:d6:7c:4b:9f:fe:65:0f:05:d9:cd:b6:2a:ef:c8:c1:22:2c:
         22:db:38:26:ce:85:77:ec:15:f7:0b:ed:8f:5f:58:60:af:8e:
         a4:13:e7:ec:dc:1f:e0:94:be:b5:5d:5e:c7:4a:9f:0f:98:5e:
         e7:1d:8d:04:b7:f9:6b:ae:0d:ca:09:30:37:c7:44:2a:70:b7:
         ee:94:4c:b8:08:e4:5e:b2:07:f1:92:90:34:95:45:ee:40:ce:
         16:5d:05:d7:1a:9e:2f:27:3a:49:2d:87:50:59:92:6d:c8:54:
         aa:54:da:e8:51:c6:48:ae:fc:3b:2f:b3:61:00:47:82:f1:1d:
         d9:41:39:4f:ab:ea:13:38:3f:04:df:21:23:ba:81:e9:79:a3:
         52:49:d5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org