Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a31303a3a2f34382d3438203d3e20323639303730.roa
File:                     323830343a356630303a31303a3a2f34382d3438203d3e20323639303730.roa (raw, json)
Hash identifier:          VAyBmKKyR5oNrPgrEBCED/UIyBM3+HEVCiAAn564zq4=
Subject key identifier:   25:E0:24:A5:DC:79:27:CE:13:3D:B8:CE:BE:31:FF:D7:F1:C6:FE:50
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       4E0DBAFBE66841C2BB2285AF226ED59C6DBF6EDB
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a31303a3a2f34382d3438203d3e20323639303730.roa
Signing time:             Sun 06 Nov 2022 13:00:00 +0000
ROA not before:           Sun 06 Nov 2022 12:55:00 +0000
ROA not after:            Sun 05 Nov 2023 13:00:00 +0000
asID:                     269070
IP address blocks:        2804:5f00:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0d:ba:fb:e6:68:41:c2:bb:22:85:af:22:6e:d5:9c:6d:bf:6e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Nov  6 12:55:00 2022 GMT
            Not After : Nov  5 13:00:00 2023 GMT
        Subject: CN=3082010A0282010100B01885F4FEEB22E0259BD73D494448F18D5EFBF3D0B3252D602003A4F34E343B3882F3E1C9FB53C36F2DAAC12DE526BA4CAEAE0EEDD0C950705065D26DB26A95282E47A87F1DD7D347D590AD5CA73D3AC7BD7527D23305E1FA599A6A1C9267FD9C1D2AAAD769F5597C22D160917CC2E2B5898A7883C60C0BF1F17CE204917DA4623C670D8051FB808CE76E823B777DAF6B567FE4ED35EE246EEA9D5E1A1E2029E66F06605DEEC4199785B3E1A37E709F66332A93E64CE55E125C53D89F44131ABBB22B31247031700E4A5285825C7AA79EC3ADD6ED62ABC786F3DBD141CDAAFA96880E86DD270A2B097101AF0F799CF31F0BBD60202B4D000A3BC717AE0ACC590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:85:f4:fe:eb:22:e0:25:9b:d7:3d:49:44:
                    48:f1:8d:5e:fb:f3:d0:b3:25:2d:60:20:03:a4:f3:
                    4e:34:3b:38:82:f3:e1:c9:fb:53:c3:6f:2d:aa:c1:
                    2d:e5:26:ba:4c:ae:ae:0e:ed:d0:c9:50:70:50:65:
                    d2:6d:b2:6a:95:28:2e:47:a8:7f:1d:d7:d3:47:d5:
                    90:ad:5c:a7:3d:3a:c7:bd:75:27:d2:33:05:e1:fa:
                    59:9a:6a:1c:92:67:fd:9c:1d:2a:aa:d7:69:f5:59:
                    7c:22:d1:60:91:7c:c2:e2:b5:89:8a:78:83:c6:0c:
                    0b:f1:f1:7c:e2:04:91:7d:a4:62:3c:67:0d:80:51:
                    fb:80:8c:e7:6e:82:3b:77:7d:af:6b:56:7f:e4:ed:
                    35:ee:24:6e:ea:9d:5e:1a:1e:20:29:e6:6f:06:60:
                    5d:ee:c4:19:97:85:b3:e1:a3:7e:70:9f:66:33:2a:
                    93:e6:4c:e5:5e:12:5c:53:d8:9f:44:13:1a:bb:b2:
                    2b:31:24:70:31:70:0e:4a:52:85:82:5c:7a:a7:9e:
                    c3:ad:d6:ed:62:ab:c7:86:f3:db:d1:41:cd:aa:fa:
                    96:88:0e:86:dd:27:0a:2b:09:71:01:af:0f:79:9c:
                    f3:1f:0b:bd:60:20:2b:4d:00:0a:3b:c7:17:ae:0a:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:24:A5:DC:79:27:CE:13:3D:B8:CE:BE:31:FF:D7:F1:C6:FE:50
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a31303a3a2f34382d3438203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f00:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:42:2c:32:74:b6:22:08:db:4c:34:ae:02:12:98:1e:0e:94:
         31:78:64:92:de:3f:89:63:87:af:ba:80:ae:20:fe:63:75:31:
         54:b6:a4:70:2f:a9:99:f7:3e:dc:8a:95:13:91:ca:65:e8:46:
         fe:16:42:d3:37:89:56:66:ce:f5:a2:79:94:7f:20:15:51:71:
         da:1d:d9:fc:1a:a2:b1:89:80:f1:c4:07:e9:68:2e:c4:01:31:
         00:d2:5f:8e:04:eb:25:1f:bc:10:fa:05:4c:c5:e8:c8:98:4c:
         9b:df:c3:c3:e2:8e:c6:fd:81:a7:1d:d5:b6:e0:dc:d1:c1:46:
         a6:c7:71:46:9b:15:89:b9:d8:cf:81:0f:20:e6:c8:81:d2:7b:
         a4:77:52:79:8f:ed:c0:b2:f8:aa:58:3d:63:21:58:c3:be:43:
         2f:5f:e5:b0:e3:0e:dd:1b:71:2f:7a:bd:2c:5f:89:9a:74:cb:
         2f:99:4e:44:dd:04:68:4e:86:eb:c4:dd:a4:2a:d7:06:7b:74:
         78:22:12:c2:d4:b2:16:ee:33:cc:18:95:e7:37:c2:fc:59:2b:
         60:60:ce:b2:73:00:d8:ec:51:14:90:c6:28:f0:e8:9f:c8:90:
         82:54:ba:4e:01:2c:d9:bd:46:98:ff:a6:a5:f1:e8:7c:61:31:
         05:ac:5e:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org