Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31303a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31303a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          SVPIAofZoWdo1M/Rz7x8Hxz7kIsTzyGlVPD57uYy4GM=
Subject key identifier:   87:CB:DF:F2:6C:E3:B5:35:AB:61:3B:74:B2:10:AD:2C:56:21:9D:D9
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       1BC0530F1D32B2FFDDCBAB8B6CE01DF00D491C17
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31303a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:12 +0000
ROA not before:           Wed 23 Nov 2022 18:34:12 +0000
ROA not after:            Wed 22 Nov 2023 18:39:12 +0000
asID:                     53048
IP address blocks:        2804:1b04:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c0:53:0f:1d:32:b2:ff:dd:cb:ab:8b:6c:e0:1d:f0:0d:49:1c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:12 2022 GMT
            Not After : Nov 22 18:39:12 2023 GMT
        Subject: CN=87CBDFF26CE3B535AB613B74B210AD2C56219DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:15:94:b5:1f:49:fe:64:1a:8c:97:65:18:
                    54:3a:0b:f3:79:c4:5d:0d:34:36:74:56:6d:5e:5d:
                    23:ab:a8:29:49:7d:29:2a:94:4e:fe:4f:5a:dd:17:
                    f1:0b:ad:8d:c1:23:5e:76:97:c9:6b:ea:ef:50:7a:
                    77:29:69:8c:76:52:bb:de:1a:95:86:4c:b6:5c:74:
                    8f:a1:2a:c6:bb:43:c3:79:3b:9e:99:75:cc:f2:ce:
                    de:18:84:cc:3d:10:6d:25:bf:e1:51:f9:b5:fa:ab:
                    7f:30:59:a4:88:62:c3:13:0a:67:aa:23:98:ab:62:
                    28:56:f7:8d:01:06:df:83:eb:91:b1:85:3e:4f:c3:
                    5f:ea:5b:fc:80:9c:c1:3b:16:15:a1:42:6a:46:44:
                    73:e9:f0:9d:96:44:1e:f0:f0:f8:3e:51:4f:cd:61:
                    fe:9c:1a:ed:06:52:9a:9e:37:ed:35:51:10:a9:b3:
                    db:a5:09:71:55:c2:6f:7b:e4:d5:1c:22:62:9b:ae:
                    71:96:15:ee:c2:5b:6e:e9:90:c2:3c:df:17:3f:4b:
                    47:ef:c6:89:43:7a:f1:fa:e0:b2:b7:7c:02:b7:74:
                    e8:25:0e:76:85:c0:1e:28:d5:3b:f4:5c:73:cf:ca:
                    2d:ad:89:90:6a:d1:10:02:10:42:cf:64:f3:be:67:
                    b9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CB:DF:F2:6C:E3:B5:35:AB:61:3B:74:B2:10:AD:2C:56:21:9D:D9
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31303a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:8e:05:5e:4d:7e:98:f5:fd:da:88:ff:d6:23:85:c3:52:
         03:e8:f5:ef:18:b4:4c:38:af:5c:25:fc:d9:ad:64:e5:ff:13:
         de:5e:12:70:f3:14:de:ae:76:2d:dd:2b:c2:a1:9a:18:d8:7d:
         b1:3d:b9:aa:19:f3:ca:0d:b3:b0:5b:a8:4e:ca:23:44:16:fc:
         dd:17:21:26:4d:40:78:a3:9b:dd:5a:05:c9:f0:af:a5:0e:37:
         44:dc:09:57:0b:72:52:71:a6:62:03:02:a2:d3:47:87:7e:76:
         41:ae:78:52:5c:0a:35:9c:83:4a:7f:bb:43:a6:d7:6b:1d:16:
         e6:e8:eb:48:9b:c3:80:0a:3a:ce:56:b3:e1:3d:9d:06:01:00:
         bb:ee:54:2a:3d:60:52:b6:de:55:ab:2b:ea:c7:21:48:ec:0c:
         7c:0b:39:5c:f9:4f:2c:6f:86:ad:08:69:3b:18:cc:49:86:61:
         d4:15:95:76:05:c7:4f:65:02:f8:53:55:d0:44:7f:3c:36:ad:
         42:74:48:bf:9f:1c:85:5f:38:7d:4e:86:b0:72:50:78:ce:41:
         75:d8:5d:81:c2:a4:af:71:46:ec:1c:fa:93:59:4c:c6:f1:85:
         90:ea:ee:33:a0:7f:74:5c:07:f2:f4:63:f2:a6:2d:b7:03:9c:
         8d:92:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org