Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a3a2f33322d3334203d3e20323731343235.roa
File:                     323830343a376235343a3a2f33322d3334203d3e20323731343235.roa (raw, json)
Hash identifier:          W3UJoF+982X2/TTGN2YaaMNQHni7ami4qkQ1EN/8elE=
Subject key identifier:   C2:CE:46:B2:EB:B8:43:1A:B3:F0:6A:1F:6C:8E:CC:EB:43:6D:E9:73
Certificate issuer:       /CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
Certificate serial:       22380EDCFAD5437552A254BA9ED15B09F4F71E22
Authority key identifier: 3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a3a2f33322d3334203d3e20323731343235.roa
Signing time:             Sun 27 Aug 2023 14:08:30 +0000
ROA not before:           Sun 27 Aug 2023 14:03:30 +0000
ROA not after:            Sun 25 Aug 2024 14:08:30 +0000
asID:                     271425
IP address blocks:        2804:7b54::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:38:0e:dc:fa:d5:43:75:52:a2:54:ba:9e:d1:5b:09:f4:f7:1e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B37C2C485106C1192DC4462E27FBBA779AA590B
        Validity
            Not Before: Aug 27 14:03:30 2023 GMT
            Not After : Aug 25 14:08:30 2024 GMT
        Subject: CN=C2CE46B2EBB8431AB3F06A1F6C8ECCEB436DE973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:2d:52:4b:7b:6c:bb:06:f6:f4:fc:e8:f5:
                    34:88:cf:37:4c:ec:90:f1:06:59:89:57:6c:ca:5c:
                    c2:5d:a6:07:8e:60:57:e0:ed:98:b2:2e:a4:ef:2d:
                    39:33:68:9a:04:12:1b:02:21:9b:06:8f:02:9a:d0:
                    c9:a0:ae:5f:9e:69:52:20:12:2d:f5:cb:a1:f1:01:
                    42:9e:2c:49:b1:6b:22:8f:ff:27:9b:a2:85:b9:3c:
                    ec:a5:82:b8:99:c0:86:1e:77:1d:04:b4:ba:19:24:
                    1c:e3:6b:8f:6d:1e:d3:f5:b8:e5:c4:ea:e5:8c:bc:
                    58:20:14:69:64:10:1f:16:fd:36:77:28:a8:13:d4:
                    fd:24:bc:4a:3b:ed:5a:1f:52:55:da:7a:09:c3:3e:
                    de:2c:15:53:f7:13:c9:39:e1:e0:6c:b0:5e:a0:0e:
                    1a:fa:7f:3c:bf:61:dd:16:d6:f8:d7:7d:1f:06:54:
                    3d:d6:be:35:79:60:63:a1:8e:1e:e2:89:f2:1f:ef:
                    9a:13:74:ac:8b:f7:b9:dd:4c:ba:83:fd:a0:b1:0c:
                    e4:c6:ee:46:b6:2c:00:bd:50:7e:61:cf:8a:76:e7:
                    56:aa:98:5d:f8:30:cb:5b:cd:20:8d:1e:75:b3:0d:
                    6a:a2:0b:34:39:d9:ba:fa:2a:93:a2:29:95:6c:66:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:46:B2:EB:B8:43:1A:B3:F0:6A:1F:6C:8E:CC:EB:43:6D:E9:73
            X509v3 Authority Key Identifier:
                keyid:3B:37:C2:C4:85:10:6C:11:92:DC:44:62:E2:7F:BB:A7:79:AA:59:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37C2C485106C1192DC4462E27FBBA779AA590B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/0/323830343a376235343a3a2f33322d3334203d3e20323731343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:01:12:5e:fe:98:34:d2:a5:31:0f:c3:72:60:14:8f:9f:2b:
         3b:3a:cd:88:f0:c9:b6:4c:f2:96:88:0c:b9:fc:f2:17:7d:2d:
         33:2d:ee:c5:48:5a:4e:57:5f:36:b5:63:e3:e9:68:89:cc:d2:
         fc:87:42:8e:73:2c:91:b8:bd:d3:1d:6d:b5:70:d3:07:36:ac:
         db:2c:14:94:4b:51:af:6d:17:cb:69:ca:d7:a6:cb:7c:fe:98:
         b4:72:da:25:1e:ad:52:11:69:90:6f:98:bc:40:74:63:f3:1d:
         50:b6:4e:a2:df:e1:21:93:e0:60:da:62:35:b0:1a:72:ea:27:
         5e:12:7d:9a:5e:d5:8f:cc:9a:56:fd:7a:f1:4d:9c:02:ea:7f:
         6a:45:7f:b4:25:69:5c:b1:2d:98:b7:18:b4:ac:25:ae:a9:17:
         cf:d1:18:08:a9:a4:93:e3:3e:79:0e:44:af:65:63:3f:b7:79:
         d1:bf:ed:ca:c7:c9:14:e9:b3:87:12:9c:6f:81:8c:0b:a9:30:
         73:4f:41:44:42:5e:cb:4f:8e:8c:20:68:88:c8:8d:3d:08:ec:
         80:fc:3f:8b:82:83:52:07:28:ba:62:92:d2:60:64:12:bb:27:
         e5:3c:37:8f:0d:5a:0c:6e:74:40:7e:b1:89:04:01:02:3e:4b:
         97:b5:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org