Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31373a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31373a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          rwE9ktFquiY0N+AvOUWMDFxruGhifk94fxYKRXOcFBA=
Subject key identifier:   8D:EA:4B:15:83:06:37:62:C7:B6:95:28:BC:D2:61:AB:6E:8E:2A:97
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       759F83D94684FA15D4DDF4BEC0CEE79E6BA26DE3
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31373a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:13 +0000
ROA not before:           Wed 23 Nov 2022 18:34:13 +0000
ROA not after:            Wed 22 Nov 2023 18:39:13 +0000
asID:                     53048
IP address blocks:        2804:1b04:17::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9f:83:d9:46:84:fa:15:d4:dd:f4:be:c0:ce:e7:9e:6b:a2:6d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:13 2022 GMT
            Not After : Nov 22 18:39:13 2023 GMT
        Subject: CN=8DEA4B1583063762C7B69528BCD261AB6E8E2A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:f5:90:94:45:15:76:97:71:88:9d:3a:0e:
                    d9:6f:98:19:47:f4:4f:15:94:ba:a4:45:26:65:ab:
                    70:78:43:1d:89:b6:b0:5a:8a:c0:16:f1:1d:a2:87:
                    47:6b:f8:d3:9f:99:b3:38:99:e5:0c:c9:fa:16:0f:
                    d0:51:d1:dc:66:a2:75:92:1f:b2:5c:da:77:f6:8c:
                    37:49:9a:21:40:1e:16:6a:44:b9:dd:ab:f8:c9:32:
                    01:17:d5:be:36:3d:84:a9:b0:20:51:8c:fe:d6:51:
                    c2:ba:0c:c6:de:62:b6:2d:28:d7:c8:73:f2:2d:df:
                    f1:91:f9:3f:62:7c:e4:f7:76:d8:8b:d7:fd:ef:d2:
                    27:7c:ac:44:49:8f:a1:e9:17:0d:ae:8b:30:bc:05:
                    37:63:7f:d2:9b:64:88:05:1c:cc:05:33:7f:f1:8f:
                    65:fe:10:88:aa:9c:c7:a8:69:9e:c1:19:14:8a:83:
                    5a:b0:86:2d:7b:7d:6e:60:80:62:00:1e:ce:3d:97:
                    99:1f:13:1e:d2:ad:72:dc:1d:de:36:f0:94:6c:18:
                    70:89:4c:a1:ca:44:99:6a:1d:31:54:e1:47:1f:23:
                    57:e7:46:bf:c9:ae:ae:a3:bd:dd:58:44:69:32:b8:
                    5f:e8:17:bf:4f:91:0f:62:5f:10:d8:80:4e:7e:bf:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:4B:15:83:06:37:62:C7:B6:95:28:BC:D2:61:AB:6E:8E:2A:97
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31373a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:03:da:80:55:90:8c:d4:c4:b1:5a:28:0e:5c:09:f6:ad:
         16:60:c4:56:0e:67:58:1f:bc:66:58:63:39:d0:a8:dd:ea:ea:
         c3:3f:38:fb:eb:ab:61:87:31:ed:64:ef:39:10:ff:14:5a:94:
         9d:ba:c9:0f:d9:37:51:0b:63:f3:00:46:0a:6f:43:7f:e1:bc:
         24:b3:29:ce:36:17:66:3f:a8:84:3d:27:17:0f:9a:0c:cd:4c:
         33:14:a7:d9:15:55:a0:0c:34:81:f6:09:0a:9e:f6:cc:05:fb:
         7d:a2:df:5e:c0:f3:74:3e:d4:f8:b8:68:f8:05:e5:f9:e4:d5:
         fb:55:bf:05:84:12:7b:00:0f:2e:ad:3d:78:14:4c:e5:6a:b5:
         06:95:cb:a5:9c:62:b5:3d:69:b1:22:af:fc:b8:48:f1:6d:0a:
         13:50:49:70:bb:fe:ce:64:e9:47:6d:9b:75:19:4a:f0:b9:08:
         33:d2:75:57:f7:96:c0:dc:a7:95:dc:53:19:21:cc:96:00:15:
         0e:b8:06:30:a9:06:b0:9d:65:61:57:a2:81:49:9b:19:c3:cc:
         63:41:47:bc:f7:88:68:d1:e7:78:3a:3b:54:7b:b6:67:d4:5e:
         f8:23:8e:87:14:3f:01:6e:da:3e:4e:0b:16:69:9f:35:a3:c6:
         c9:2b:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org