Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383230303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a383230303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          F0AKJ+0J4WqTxuCGJLL+mr+QqNb8ZytYqS9Qdgjwaqg=
Subject key identifier:   C3:F9:D0:B2:16:F5:80:DD:AE:CC:13:9A:86:28:BC:22:D3:48:E3:D0
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       0E406685C4562EA1AD14C1B1BC3AAE57C4A4F069
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383230303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:21 +0000
ROA not before:           Mon 07 Feb 2022 12:04:21 +0000
ROA not after:            Mon 06 Feb 2023 12:09:21 +0000
asID:                     263924
IP address blocks:        2804:27d4:8200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:40:66:85:c4:56:2e:a1:ad:14:c1:b1:bc:3a:ae:57:c4:a4:f0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:21 2022 GMT
            Not After : Feb  6 12:09:21 2023 GMT
        Subject: CN=C3F9D0B216F580DDAECC139A8628BC22D348E3D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:d0:58:57:3a:1b:25:1a:cb:13:81:cb:37:
                    09:af:61:00:d7:f0:48:56:a2:6c:60:d2:36:95:5e:
                    09:b9:9e:44:40:27:20:68:7d:09:7c:aa:ad:67:07:
                    85:bf:52:d1:d4:7a:f7:25:c7:25:68:7d:71:b5:95:
                    05:31:ec:8a:1c:47:96:91:23:be:b0:13:fc:3c:c7:
                    74:81:5a:ca:87:5d:50:49:63:33:4d:0b:43:45:eb:
                    11:b2:bf:a6:3c:d3:b9:d8:c4:19:ea:ab:c7:1e:29:
                    0d:f4:70:b4:36:52:95:58:5b:eb:b6:f4:7b:d7:a7:
                    b7:3b:f3:34:63:dd:5e:e9:24:2a:61:39:42:3c:d2:
                    45:21:8f:dc:a0:c6:a7:cd:e6:ea:da:bd:51:73:af:
                    be:2e:9e:71:fc:8e:38:f4:de:ff:39:11:61:b0:7d:
                    47:25:43:ca:c2:8f:d2:b2:4a:77:7d:b2:81:0f:55:
                    53:a6:ac:39:ce:14:70:01:2c:a9:8f:94:52:34:11:
                    84:ac:af:24:eb:8f:58:35:56:ae:df:ee:bf:b6:b6:
                    54:3d:2f:7e:15:16:ce:24:8a:4f:aa:a4:ec:03:0d:
                    4d:b1:df:63:50:3d:10:0d:3b:80:9f:1e:aa:1f:b7:
                    06:b4:9c:90:41:42:e7:f1:fd:2d:d1:ae:9a:a7:12:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F9:D0:B2:16:F5:80:DD:AE:CC:13:9A:86:28:BC:22:D3:48:E3:D0
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383230303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:91:2d:b3:e1:9a:1d:84:5f:2c:b7:0a:d7:15:34:8f:d0:88:
         dd:b3:4d:81:86:4d:e9:82:be:5d:0b:49:90:7e:70:5e:37:ef:
         d4:fc:bd:33:54:8e:dc:a0:9f:3f:db:90:4c:37:43:14:da:09:
         01:25:58:87:f1:5d:0d:cb:05:3b:20:be:6e:78:7c:eb:9f:81:
         cc:3d:4e:aa:12:5e:62:76:23:ef:5a:3c:4e:ad:47:e1:f0:f6:
         78:69:bd:72:22:48:75:54:0e:32:b2:bf:92:9f:e7:14:36:51:
         ab:b1:7e:07:eb:b3:31:7b:71:f1:66:20:a0:05:f3:b2:8d:58:
         51:dc:be:45:1d:9e:a8:43:13:93:88:eb:38:d0:ee:2f:1a:8c:
         7d:a7:da:94:47:05:7d:7e:b0:8e:00:4b:7e:e9:08:e0:5d:73:
         23:96:3c:ef:30:b6:d5:ca:95:70:7f:30:1b:e2:d5:9d:57:f8:
         b6:85:76:48:41:f5:1e:69:25:ca:93:b5:d4:49:24:e0:3d:5a:
         ae:9a:de:5d:b8:ed:bb:90:77:be:e2:88:4a:d9:7e:15:36:8a:
         e1:10:eb:fa:ee:cc:f9:5d:5e:5a:3b:eb:80:cc:37:d4:a6:c7:
         8c:3b:f5:c5:d9:2e:79:06:ab:2c:6d:50:c7:9a:29:5a:c7:bd:
         7d:d4:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org