Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31393a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a31393a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          yElWeFIatYc6ZO9g05e1rNXXxE+TQWSRrYmV1mPhrwY=
Subject key identifier:   39:B8:DA:34:35:27:DA:46:57:2F:7A:AC:00:70:8D:CE:EA:ED:99:38
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       70C5F121688F2D825DDBCE44606285884337AF32
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31393a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:18 +0000
ROA not before:           Wed 23 Nov 2022 18:34:18 +0000
ROA not after:            Wed 22 Nov 2023 18:39:18 +0000
asID:                     53048
IP address blocks:        2804:1b04:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c5:f1:21:68:8f:2d:82:5d:db:ce:44:60:62:85:88:43:37:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:18 2022 GMT
            Not After : Nov 22 18:39:18 2023 GMT
        Subject: CN=39B8DA343527DA46572F7AAC00708DCEEAED9938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:e2:e1:40:42:7e:48:ea:17:45:4a:ac:6b:
                    53:a9:c6:92:e9:f4:ed:e2:25:8f:03:98:5e:f7:26:
                    ea:83:8a:e8:f0:3e:96:3f:4f:9d:4e:6b:79:66:ac:
                    df:3f:90:e8:e2:14:c7:55:65:5c:a3:21:d6:f8:ee:
                    e9:87:8a:cb:4d:dc:c0:57:e4:2c:af:e8:31:6f:ad:
                    9d:36:98:20:e2:8d:00:3f:b3:a1:f2:de:f4:e0:91:
                    37:c0:9c:9c:f7:ea:2b:b0:ab:f0:56:d6:c9:f9:d7:
                    b7:24:90:ee:5a:54:5c:61:84:83:ac:bb:9d:11:ca:
                    59:74:a5:05:3f:bd:40:6c:3d:0e:0a:83:44:1b:32:
                    eb:23:ef:31:fb:4b:bf:e3:94:68:c1:3f:c8:f6:3f:
                    08:94:0e:a6:2a:7c:81:ef:76:75:a9:9a:02:f1:85:
                    67:1c:bf:a9:50:c5:68:5a:d8:5a:a3:62:31:37:86:
                    10:c7:4c:a5:b5:81:86:b9:b7:c7:99:69:65:5f:8d:
                    18:fa:76:d7:a7:11:c5:0c:9e:9f:1c:00:fa:2c:f3:
                    3a:24:00:9a:bc:e3:1b:82:71:07:a1:a9:42:09:94:
                    28:92:de:69:43:e4:19:28:f4:cf:16:d7:7f:41:00:
                    1c:94:fd:67:0c:ba:e8:1f:1b:21:96:33:46:18:e2:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:DA:34:35:27:DA:46:57:2F:7A:AC:00:70:8D:CE:EA:ED:99:38
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a31393a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:a6:51:40:b5:70:e3:1e:98:28:61:00:df:ba:79:c0:5e:c8:
         42:b8:4c:11:ab:0c:dd:98:fe:84:00:91:26:81:9f:c0:45:f5:
         32:0c:93:7d:90:72:5a:5c:1d:8c:2c:e0:c9:7c:b9:81:5e:23:
         0a:f7:7a:ae:f3:e7:42:7c:74:51:a0:61:d8:14:44:65:e6:70:
         1b:bc:72:54:4a:f3:d8:29:d3:b6:11:15:93:e4:b0:2b:e8:83:
         94:be:f6:47:89:60:14:68:ba:83:a4:53:ff:42:b5:79:ea:02:
         2d:67:bf:ef:ca:81:7f:6a:04:86:af:6f:ef:4f:ea:8a:83:e4:
         f9:2f:f2:a3:ec:c3:a0:7d:d8:d3:4a:64:50:7d:6c:25:f2:ba:
         90:fe:e6:61:97:6d:0c:3f:17:80:e9:55:b6:dc:a9:49:76:85:
         72:b8:82:f4:9e:3b:c4:37:c5:18:65:1a:2c:9e:5e:3c:42:fc:
         6c:45:d8:58:44:65:8c:ae:10:c4:0d:dc:68:6e:5a:f3:0f:36:
         83:fa:aa:55:98:31:ea:ef:43:ef:77:2b:49:50:a5:32:6e:c0:
         5d:21:2f:31:54:91:b3:34:28:db:e4:a3:08:40:48:1b:85:d6:
         5f:10:09:05:3d:df:29:e4:81:ef:3c:1e:a0:25:7c:dc:d2:a3:
         44:29:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org