Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31313a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31313a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          XB0lqMUNhaTiRrh09l9L9wFmnGBtsCajL45nr5zBV+o=
Subject key identifier:   48:7A:24:BB:C2:39:91:CF:3D:91:E6:48:B4:DB:9F:A2:68:58:C4:F8
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       6839D345BB6B4C99F14A42F71F3B04680AC89ED5
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31313a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:20 +0000
ROA not before:           Wed 23 Nov 2022 18:34:20 +0000
ROA not after:            Wed 22 Nov 2023 18:39:20 +0000
asID:                     53048
IP address blocks:        2804:1b04:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:39:d3:45:bb:6b:4c:99:f1:4a:42:f7:1f:3b:04:68:0a:c8:9e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:20 2022 GMT
            Not After : Nov 22 18:39:20 2023 GMT
        Subject: CN=487A24BBC23991CF3D91E648B4DB9FA26858C4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d3:74:84:f1:b5:a4:f7:e1:fa:f5:ed:4b:24:
                    bd:05:a7:52:f5:53:40:65:77:4e:d2:63:60:43:f5:
                    3a:5b:82:b3:1b:60:34:ae:c0:7b:a1:d5:26:dd:a0:
                    96:43:89:d3:5a:f5:a6:b8:43:c6:49:e1:36:dd:69:
                    55:3a:1c:b1:07:31:6b:a0:aa:f6:8d:c7:c3:99:f0:
                    13:af:d2:77:d5:29:38:db:aa:dc:7a:91:40:1b:89:
                    9a:69:83:6b:be:10:80:1b:95:87:43:ae:62:39:c5:
                    49:05:f8:f0:6e:c5:58:13:e4:9f:c8:56:6a:f2:40:
                    16:04:45:16:1e:03:9b:ba:64:df:13:cd:8e:71:3e:
                    2f:1a:d3:ad:e0:86:8c:19:b2:2f:a0:93:21:20:dd:
                    d1:76:59:52:63:14:96:3f:78:90:75:8f:4f:b2:b1:
                    af:68:d5:7d:9a:70:ed:22:ee:5c:1b:64:14:bb:35:
                    6a:cd:c5:a8:8b:35:dd:16:38:f6:c1:3b:c6:f6:09:
                    1b:1f:6d:9b:78:eb:89:52:2b:c1:3b:8a:2c:f5:1d:
                    46:ac:5b:1d:c9:f0:9b:0e:3a:33:7e:9e:a8:17:b3:
                    cf:38:0f:ae:90:28:a7:72:a7:23:7c:fd:d8:1e:b9:
                    92:37:be:b1:fd:61:4e:24:40:90:44:f4:e6:2d:d4:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7A:24:BB:C2:39:91:CF:3D:91:E6:48:B4:DB:9F:A2:68:58:C4:F8
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31313a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:27:a0:88:51:30:26:de:b3:dd:65:c6:30:fa:54:3a:c4:b3:
         9c:b8:8f:53:9a:13:79:20:14:93:3c:c1:28:a8:6b:25:f2:51:
         c0:02:74:69:87:d1:e7:40:6d:54:1c:60:32:93:5b:8f:b4:d7:
         a9:13:50:6e:c7:b4:f1:2e:2c:2d:ac:5d:2d:22:74:60:61:46:
         73:a5:8f:ae:82:7e:36:91:fb:3a:29:01:ee:a3:c5:bc:57:44:
         af:ae:9f:b4:d6:4f:d0:bc:b4:57:38:8e:9a:67:ad:2c:79:b1:
         0f:c4:3f:08:7c:01:91:9d:a0:43:8c:b4:85:80:65:6f:aa:fb:
         c4:bf:cc:5e:12:6e:8e:f5:d8:25:a3:ef:10:19:82:6c:49:08:
         75:29:3e:51:46:c4:91:eb:46:20:48:75:d9:ed:59:a1:ec:c5:
         19:8a:ca:a5:8b:b0:47:b8:b7:06:84:5b:5d:55:7a:04:1c:93:
         a4:02:5f:f5:3e:21:0c:56:37:d5:a8:85:3b:e4:1e:9a:6d:6a:
         8d:ee:78:23:a0:dd:80:fb:4a:56:a8:e7:8d:37:1e:c0:13:53:
         6e:51:f4:5a:5d:fb:b8:bf:ec:6d:f6:e5:74:4b:4c:ba:bf:98:
         b8:15:17:6b:bd:9c:ba:53:5c:be:9b:ac:7e:d8:ba:70:93:0a:
         31:00:a7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org