Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a3a2f33322d3336203d3e20323639303730.roa
File:                     323830343a356630303a3a2f33322d3336203d3e20323639303730.roa (raw, json)
Hash identifier:          RyRQRjAJcC/oyejDW0Qb3x6i2LL/FrRkru+lGUNs7MY=
Subject key identifier:   90:30:B6:1D:5C:5F:CF:A0:C9:57:09:64:95:E8:43:9B:9E:33:4A:BE
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       3B1022F78A101E73CD83B86C3D900A0B48452DE8
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a3a2f33322d3336203d3e20323639303730.roa
Signing time:             Sun 06 Nov 2022 13:00:00 +0000
ROA not before:           Sun 06 Nov 2022 12:55:00 +0000
ROA not after:            Sun 05 Nov 2023 13:00:00 +0000
asID:                     269070
IP address blocks:        2804:5f00::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:10:22:f7:8a:10:1e:73:cd:83:b8:6c:3d:90:0a:0b:48:45:2d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Nov  6 12:55:00 2022 GMT
            Not After : Nov  5 13:00:00 2023 GMT
        Subject: CN=3082010A0282010100BC4634FC5B8672EAA08DE874B480D11F89C44465C671AE3BF7D21982E23DCEC595F6E0EEE48D6C60E12C1FFB6FCAEBCF6C4CFEE094D7E943960DEB0A466E047992CC7AA0D30E51347D5628B64F97925B4F089C5B3306F4C87F43929E135C50FE8D2CB444F3ADBFA903E66A91FAD40F9CFA1165C9F7EEA656823F22033CB1E2912BEA4E86164E03FC93D4ABD534E2A4A317614AFF97D18268B0216A3372D54AB3FC9BF9BFC92F8287EB126769E76F6C0BD648D562800326037A2668D22C7132915DEB665CED2012F2EBC7EAFD550FF1CA8893C25047CA894453BFEDA99B784FEE5A147DA284C3306E4BB7E0FC794AD08665E51D08FC0BF89CA8A9751A1D6727710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:34:fc:5b:86:72:ea:a0:8d:e8:74:b4:80:
                    d1:1f:89:c4:44:65:c6:71:ae:3b:f7:d2:19:82:e2:
                    3d:ce:c5:95:f6:e0:ee:e4:8d:6c:60:e1:2c:1f:fb:
                    6f:ca:eb:cf:6c:4c:fe:e0:94:d7:e9:43:96:0d:eb:
                    0a:46:6e:04:79:92:cc:7a:a0:d3:0e:51:34:7d:56:
                    28:b6:4f:97:92:5b:4f:08:9c:5b:33:06:f4:c8:7f:
                    43:92:9e:13:5c:50:fe:8d:2c:b4:44:f3:ad:bf:a9:
                    03:e6:6a:91:fa:d4:0f:9c:fa:11:65:c9:f7:ee:a6:
                    56:82:3f:22:03:3c:b1:e2:91:2b:ea:4e:86:16:4e:
                    03:fc:93:d4:ab:d5:34:e2:a4:a3:17:61:4a:ff:97:
                    d1:82:68:b0:21:6a:33:72:d5:4a:b3:fc:9b:f9:bf:
                    c9:2f:82:87:eb:12:67:69:e7:6f:6c:0b:d6:48:d5:
                    62:80:03:26:03:7a:26:68:d2:2c:71:32:91:5d:eb:
                    66:5c:ed:20:12:f2:eb:c7:ea:fd:55:0f:f1:ca:88:
                    93:c2:50:47:ca:89:44:53:bf:ed:a9:9b:78:4f:ee:
                    5a:14:7d:a2:84:c3:30:6e:4b:b7:e0:fc:79:4a:d0:
                    86:65:e5:1d:08:fc:0b:f8:9c:a8:a9:75:1a:1d:67:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:30:B6:1D:5C:5F:CF:A0:C9:57:09:64:95:E8:43:9B:9E:33:4A:BE
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a3a2f33322d3336203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:9b:3d:a5:e6:9c:74:10:0f:55:7a:4e:03:51:fe:1f:75:
         33:b5:d2:5d:74:6e:b3:08:2d:fc:0e:ee:5f:03:4f:9e:21:a6:
         35:16:48:a1:e8:91:e7:ef:97:82:a9:3d:fd:bf:c6:c4:e6:6b:
         a2:30:ff:2d:f0:3e:ae:82:f1:8e:4b:c0:2d:03:90:99:98:af:
         33:39:7a:ad:fd:70:d0:c8:84:6e:ec:43:60:35:c3:8a:bf:d5:
         0f:a5:e9:aa:8a:4c:bc:43:b0:de:66:a4:b4:b5:d2:47:ce:41:
         ed:85:dc:06:52:27:7b:57:66:d6:50:eb:bd:8d:f8:fe:31:87:
         1e:d2:3c:f2:35:ef:90:7d:b8:26:78:a6:a5:49:ad:39:8e:2c:
         c2:7d:ab:ac:27:22:bd:7c:cc:7c:51:1a:97:37:14:7e:09:b8:
         d0:4d:ff:28:7d:62:12:5f:80:d3:62:47:a5:f1:f1:4f:c4:fb:
         4c:bc:8e:60:f9:8f:ec:0e:13:b5:50:35:97:22:e8:de:92:1c:
         dd:ab:3b:7f:42:db:19:79:7b:ee:df:19:e7:cd:90:22:5f:ad:
         d1:d1:33:e4:cb:10:61:fa:34:96:72:bd:9a:c8:04:ed:b0:f1:
         89:98:78:26:21:ea:b6:67:5a:bb:4d:85:4c:bd:d1:e7:f4:b8:
         36:c6:0c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org