Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31383a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31383a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          66hQeqtqVCjAWMYNGObnQxREaXO72uH/8P9FPc3ilGo=
Subject key identifier:   87:55:72:FB:83:4E:5C:97:D1:B8:97:FE:3A:E4:7C:8E:7C:B3:3C:6A
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       3A23B8E12B89A98A122ECF21F8FE0D58D6BA547D
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31383a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:14 +0000
ROA not before:           Wed 23 Nov 2022 18:34:14 +0000
ROA not after:            Wed 22 Nov 2023 18:39:14 +0000
asID:                     53048
IP address blocks:        2804:1b04:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:23:b8:e1:2b:89:a9:8a:12:2e:cf:21:f8:fe:0d:58:d6:ba:54:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:14 2022 GMT
            Not After : Nov 22 18:39:14 2023 GMT
        Subject: CN=875572FB834E5C97D1B897FE3AE47C8E7CB33C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:0d:fa:49:95:5d:0a:79:fa:94:1d:82:e8:
                    e2:e5:57:7d:8e:a8:2c:bb:10:3c:19:64:9e:db:2d:
                    e2:1f:aa:7f:27:d9:c3:2f:a8:ca:d7:4d:62:fa:82:
                    2b:4b:45:8e:6c:e2:00:4f:71:77:36:fe:a1:18:ab:
                    78:c8:99:58:63:3e:af:b3:74:63:c1:5d:b4:ef:1f:
                    27:b2:f2:c0:05:fb:57:b0:ea:a7:d7:41:29:55:36:
                    2d:39:5f:e4:ad:bb:6f:09:2a:71:85:e2:d7:ca:be:
                    2d:8f:1c:f1:0f:d6:a2:8f:d2:1e:5b:87:bd:72:4a:
                    d0:cf:41:d5:22:60:f0:af:00:f9:42:01:a8:90:6b:
                    8e:ca:f9:06:53:54:b8:7f:6a:5c:54:3b:24:fe:2b:
                    7f:3c:13:e9:e5:59:0a:23:e0:97:92:6b:2c:02:d9:
                    9d:54:0b:42:09:1a:36:22:2e:f5:0d:a6:c5:9a:96:
                    53:d3:3b:ff:82:08:e6:5c:8f:76:02:11:3e:ed:53:
                    b3:21:52:46:ea:50:81:fd:2a:e3:87:96:d6:2f:94:
                    a6:90:97:bb:b9:70:de:c2:31:5b:62:f0:92:63:e6:
                    ef:8b:43:8c:1c:e4:87:53:f2:89:c6:bf:8d:13:e7:
                    ec:06:83:a9:74:3b:04:8f:7a:3c:2a:6b:8a:58:b5:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:55:72:FB:83:4E:5C:97:D1:B8:97:FE:3A:E4:7C:8E:7C:B3:3C:6A
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31383a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:b5:ec:72:41:6d:64:9c:e1:22:6a:2a:f8:1a:b1:4e:fd:91:
         a8:8b:9d:d9:33:85:07:01:41:ff:cb:09:5c:2a:1a:35:97:f2:
         32:18:ed:fb:d1:be:87:42:ca:db:b4:1f:5d:e3:be:1c:d6:3c:
         b1:41:e2:ad:4f:55:3b:0c:f4:cd:7b:0d:61:a8:ac:7b:87:a5:
         10:be:95:6a:c9:87:4d:5c:4b:c6:5b:5e:12:b1:20:39:70:b3:
         f4:4e:d9:12:bd:b5:23:98:46:6d:b6:a7:8f:dc:2f:a4:d4:02:
         7c:79:e5:2a:dc:43:82:2a:f3:ad:7d:bb:dc:f8:30:a2:2b:52:
         ec:47:2f:1a:79:a2:60:1b:83:45:94:4b:ec:d3:2c:02:0d:9e:
         0a:3a:97:6f:cb:94:a9:9e:26:66:31:e9:2c:b6:29:d5:62:25:
         04:ad:3a:80:d1:d5:43:1b:c1:95:03:c9:f6:9a:7b:de:63:c1:
         0f:d4:5f:12:aa:37:ab:6c:c8:92:fa:74:90:5c:0d:18:07:17:
         16:1a:15:20:62:0e:32:39:e5:fc:86:4d:bb:f1:1e:e7:3d:09:
         8e:0b:3e:33:2e:d5:26:64:e5:34:71:7d:f5:a1:da:50:b9:9e:
         69:22:2b:6c:0b:f5:a7:d8:08:dd:da:f8:4f:4c:11:ce:ad:fa:
         40:05:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org