Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a313a3a2f34382d3438203d3e20323639303730.roa
File:                     323830343a356630303a313a3a2f34382d3438203d3e20323639303730.roa (raw, json)
Hash identifier:          1aOUmLN0iPb2HWysc0fzZFxlSWjDuZZrv7YJAEp7y54=
Subject key identifier:   3B:21:FA:EC:48:68:A2:85:D8:A3:7B:01:70:1F:7C:5E:24:6F:A5:97
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       1503504B30CFB1C5B8A58E6CA9E3A419D2026B74
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a313a3a2f34382d3438203d3e20323639303730.roa
Signing time:             Tue 22 Nov 2022 15:00:00 +0000
ROA not before:           Tue 22 Nov 2022 14:55:00 +0000
ROA not after:            Tue 21 Nov 2023 15:00:00 +0000
asID:                     269070
IP address blocks:        2804:5f00:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:03:50:4b:30:cf:b1:c5:b8:a5:8e:6c:a9:e3:a4:19:d2:02:6b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Nov 22 14:55:00 2022 GMT
            Not After : Nov 21 15:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:d3:23:26:b6:37:e7:82:99:29:ca:fd:51:
                    38:77:db:ba:4b:2f:32:98:7e:3d:59:cc:71:42:ce:
                    cb:78:cb:32:18:24:16:4f:97:e3:71:9f:e9:04:43:
                    56:43:fc:bb:ac:6b:1a:24:21:f9:85:cb:e5:dd:cf:
                    ad:6c:ee:3f:b2:d7:ca:20:fc:eb:20:38:23:18:b8:
                    5f:f9:61:22:fc:e6:e0:37:b6:13:4e:ec:54:fa:dd:
                    10:6d:51:46:2f:77:eb:92:e7:61:09:b4:79:61:33:
                    37:f1:57:a9:2a:f1:6f:da:84:9b:ba:17:59:93:ac:
                    aa:cd:51:db:e0:33:5e:6f:a3:7c:e2:ff:1e:6f:fd:
                    9a:db:41:cb:e4:83:ce:2b:28:f7:a2:dc:89:c9:0a:
                    6a:0e:63:fd:07:b3:ed:22:62:ff:48:5d:17:ae:70:
                    e8:25:f8:71:57:e1:e3:53:bb:39:b2:52:4f:49:9d:
                    07:62:0a:2e:28:5e:81:5d:c0:fe:ed:a6:07:55:60:
                    e7:57:46:c1:d6:7b:a0:c7:a3:bd:9c:59:6c:27:53:
                    d7:5d:be:b6:4d:13:5d:e5:6e:1d:1b:4c:4a:cb:29:
                    b4:99:d5:dd:ee:6c:07:a4:0e:1b:0b:0e:a4:51:95:
                    8e:d2:68:84:6b:ed:f3:d4:e0:b1:c4:2c:0c:2c:68:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:FA:EC:48:68:A2:85:D8:A3:7B:01:70:1F:7C:5E:24:6F:A5:97
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a313a3a2f34382d3438203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f00:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:16:d4:7b:93:cd:ff:3a:c7:64:eb:80:11:98:94:c3:4f:
         e9:fb:60:04:4d:21:9f:b6:14:a1:78:ac:af:03:5a:24:10:24:
         70:a7:24:ec:33:0c:9e:4a:f5:22:18:d4:84:5f:41:b6:2b:32:
         90:33:29:36:16:10:74:e4:d0:08:84:d4:7f:6c:36:93:ad:fb:
         4e:06:1c:e0:d0:aa:21:2d:b0:4d:0f:6b:3a:26:64:4b:a2:a6:
         4f:f1:4b:fa:21:82:4f:cd:37:20:c5:db:1c:77:e7:4e:aa:4d:
         e9:28:ac:9f:f4:56:33:35:42:f5:09:22:79:59:20:be:55:82:
         e6:45:81:7f:d3:b4:71:04:e3:72:d5:d6:ea:d5:b5:25:15:c1:
         41:b3:37:d1:0d:f8:6c:92:52:3f:5d:dd:f8:9c:d4:e9:94:ab:
         b0:fd:4f:7b:43:39:3b:63:29:b4:67:1b:f4:53:62:83:54:e0:
         45:85:88:b4:3c:c1:82:4c:ce:6e:d7:4d:8b:54:76:18:85:5c:
         b4:1e:cf:23:ff:65:83:f5:6b:78:eb:1e:89:6b:9a:f4:92:09:
         2f:3b:ae:71:34:40:94:35:fc:87:6f:97:0d:3c:1f:f1:af:68:
         1e:52:ae:e4:ad:43:a1:b7:2d:68:01:66:e7:85:0a:c5:47:a0:
         95:65:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org