Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a313a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a313a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          mK3yBomPaalqe5XkFLUZUtW+dLqxYc+75juckYqFa04=
Subject key identifier:   19:BD:59:42:AC:C8:D4:A9:D2:5F:44:B7:4D:96:BB:E2:36:2C:71:E1
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       776F71E3C21FE20570DBC68B59C1D7FE89CDCF41
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a313a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:18 +0000
ROA not before:           Wed 23 Nov 2022 18:34:18 +0000
ROA not after:            Wed 22 Nov 2023 18:39:18 +0000
asID:                     53048
IP address blocks:        2804:1b04:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6f:71:e3:c2:1f:e2:05:70:db:c6:8b:59:c1:d7:fe:89:cd:cf:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:18 2022 GMT
            Not After : Nov 22 18:39:18 2023 GMT
        Subject: CN=19BD5942ACC8D4A9D25F44B74D96BBE2362C71E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:ff:62:16:77:b9:14:64:08:cc:a4:72:23:
                    93:85:c0:a2:30:7f:1d:b6:9a:e8:14:77:8a:65:5e:
                    4a:3c:50:d0:9b:2f:42:a8:7b:5f:26:31:db:1b:18:
                    66:2e:05:21:86:1e:41:30:92:2d:7c:f3:bf:25:92:
                    57:94:f8:92:93:4d:0d:58:50:1a:ed:7a:a6:b0:08:
                    4e:e9:e7:a2:f9:67:76:b1:da:ce:ee:4a:7e:fa:e1:
                    4d:17:e1:a5:3c:40:41:89:2f:a4:6d:55:d4:00:62:
                    e4:c3:ff:d8:b3:7d:0b:f9:ce:a5:cb:2c:e8:6e:19:
                    45:bb:0e:36:1b:90:ab:2d:fb:08:16:5f:77:1e:fe:
                    6d:a2:21:be:50:45:bb:37:47:27:b1:31:66:14:19:
                    14:d7:4d:57:92:c9:99:7a:f4:e6:c9:9a:59:68:86:
                    ec:0c:9a:48:96:bb:55:ec:ff:fc:1d:0b:9f:fa:3c:
                    5c:f0:47:a4:61:d7:5d:d2:67:ed:00:24:3d:09:54:
                    4c:43:0c:56:58:f8:66:ae:0e:b3:29:95:0e:fc:22:
                    df:d5:85:9f:b1:49:16:ee:9c:b5:ac:96:bc:d5:cd:
                    97:f0:10:ba:5c:a0:15:cc:1d:4a:cd:18:4d:db:80:
                    68:e5:76:e2:ec:90:6b:50:a1:78:23:ca:e6:6b:ce:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:59:42:AC:C8:D4:A9:D2:5F:44:B7:4D:96:BB:E2:36:2C:71:E1
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a313a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:30:43:7e:61:35:9e:a7:28:c6:94:10:ac:fb:43:fe:a3:37:
         5a:be:d8:ab:07:ac:dc:28:0f:23:10:86:bf:e6:d1:fb:8b:1c:
         e9:91:6b:d1:e5:7b:53:c3:60:8c:4e:54:f9:91:d5:a0:18:57:
         38:1e:01:e4:32:e5:0f:a8:e9:c7:54:50:05:aa:a0:71:7f:88:
         90:00:37:c6:9d:94:ff:8f:2b:b0:59:58:e2:c0:99:83:bd:fa:
         89:cf:6e:a3:a5:cc:69:9a:7b:9e:9e:a8:70:ff:ee:a8:9f:ba:
         2b:98:95:2e:90:af:1a:40:86:89:b4:a9:f2:97:f6:19:1a:84:
         bb:63:f2:6a:64:69:57:08:ec:44:ab:52:a8:d8:cf:a0:4e:47:
         82:08:85:1f:7d:c9:3d:ba:b7:bf:80:24:cb:fe:c1:18:22:5b:
         67:c8:7f:23:52:03:77:4d:0c:67:3c:24:bd:35:ff:c1:00:a5:
         82:29:d9:84:60:3c:ab:53:15:c9:1f:37:f9:2a:a3:8b:52:ec:
         a3:a8:f2:39:0b:74:ca:24:c7:14:11:d5:9c:03:c7:8a:c2:b4:
         69:4b:89:d5:c4:0d:cf:33:39:1e:cb:62:c0:e1:9e:4e:43:bb:
         df:3f:3e:53:b4:68:a3:3e:71:5e:87:8b:21:29:5f:39:8f:33:
         bb:79:f7:fa
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUd29x48If4gVw28aLWcHX/onNz0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MThaFw0yMzExMjIxODM5MThaMDMxMTAvBgNV
BAMTKDE5QkQ1OTQyQUNDOEQ0QTlEMjVGNDRCNzREOTZCQkUyMzYyQzcxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpv9iFne5FGQIzKRyI5OFwKIw
fx22mugUd4plXko8UNCbL0Koe18mMdsbGGYuBSGGHkEwki18878lkleU+JKTTQ1Y
UBrteqawCE7p56L5Z3ax2s7uSn764U0X4aU8QEGJL6RtVdQAYuTD/9izfQv5zqXL
LOhuGUW7DjYbkKst+wgWX3ce/m2iIb5QRbs3RyexMWYUGRTXTVeSyZl69ObJmllo
huwMmkiWu1Xs//wdC5/6PFzwR6Rh113SZ+0AJD0JVExDDFZY+GauDrMplQ78It/V
hZ+xSRbunLWslrzVzZfwELpcoBXMHUrNGE3bgGjlduLskGtQoXgjyuZrzsU5AgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUGb1ZQqzI1KnSX0S3TZa74jYsceEwHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzIzODMwMzQzYTMxNjIzMDM0M2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1
MzMzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBBsEAAEwDQYJKoZIhvcNAQELBQADggEBADUw
Q35hNZ6nKMaUEKz7Q/6jN1q+2KsHrNwoDyMQhr/m0fuLHOmRa9Hle1PDYIxOVPmR
1aAYVzgeAeQy5Q+o6cdUUAWqoHF/iJAAN8adlP+PK7BZWOLAmYO9+onPbqOlzGma
e56eqHD/7qifuiuYlS6QrxpAhom0qfKX9hkahLtj8mpkaVcI7ESrUqjYz6BOR4II
hR99yT26t7+AJMv+wRgiW2fIfyNSA3dNDGc8JL01/8EApYIp2YRgPKtTFckfN/kq
o4tS7KOo8jkLdMokxxQR1ZwDx4rCtGlLidXEDc8zOR7LYsDhnk5Du98/PlO0aKM+
cV6HiyEpXzmPM7t59/o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org