Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a323a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a323a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          ZH7nmjZVFmCxFZVZgy/QYVVl/Kcs91HCWba/Xz3KQYU=
Subject key identifier:   C6:43:A3:98:09:8F:BF:D9:58:0F:CE:68:BC:BE:87:53:18:9E:B0:C5
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       33712D498FA51B8061386B23BC449C51D62889D2
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a323a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:18 +0000
ROA not before:           Wed 23 Nov 2022 18:34:18 +0000
ROA not after:            Wed 22 Nov 2023 18:39:18 +0000
asID:                     53048
IP address blocks:        2804:1b04:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:71:2d:49:8f:a5:1b:80:61:38:6b:23:bc:44:9c:51:d6:28:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:18 2022 GMT
            Not After : Nov 22 18:39:18 2023 GMT
        Subject: CN=C643A398098FBFD9580FCE68BCBE8753189EB0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:55:33:01:33:6e:3c:c7:42:93:a8:44:09:
                    61:62:05:e7:80:4b:ff:38:47:b0:91:20:82:37:a8:
                    d0:67:19:66:f4:e0:ff:8b:a9:80:3d:ce:06:5f:2a:
                    57:a9:2c:41:1c:4e:3c:be:63:1f:4b:67:f9:0e:d6:
                    db:58:d3:a8:b1:65:34:93:e2:58:b4:4d:24:20:3a:
                    6d:c2:92:d9:30:6f:96:b5:36:56:15:82:55:3c:b8:
                    f0:fa:b9:d8:81:ee:34:ae:c9:0d:76:5b:9d:ac:91:
                    ab:48:d5:fe:16:da:7b:57:5b:87:41:55:d6:4c:3e:
                    21:5f:eb:bc:ab:71:f8:7b:49:e8:58:7f:ca:bb:dd:
                    1a:d8:58:a9:51:16:9b:2c:63:2a:37:3c:5a:78:de:
                    ba:21:06:14:2a:ae:23:5a:36:7e:e2:f0:05:17:c9:
                    60:df:94:91:07:3e:3b:12:fb:55:dd:6f:d0:1c:6c:
                    e0:ee:9f:b3:ed:9b:44:6c:1a:7e:af:65:48:78:91:
                    b4:99:b6:78:34:e2:30:c6:be:c7:ad:8a:2e:e8:52:
                    25:14:e4:b7:ae:d0:d8:92:0a:64:53:39:54:6e:66:
                    c0:4e:24:df:fe:90:60:4c:92:1b:95:e2:8c:fa:f4:
                    45:b3:77:54:70:0b:e5:68:b5:1d:15:c5:57:2a:72:
                    76:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:43:A3:98:09:8F:BF:D9:58:0F:CE:68:BC:BE:87:53:18:9E:B0:C5
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a323a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:48:aa:ca:5e:78:18:a6:8b:f8:1b:b7:96:d0:a9:db:a0:61:
         b8:4e:1f:4c:63:31:c2:8b:bb:c2:64:ae:81:1f:27:e6:5e:e4:
         e8:4d:62:8b:6b:ed:0c:22:88:a8:25:87:ed:03:4c:ac:7d:63:
         2c:16:1a:97:fd:46:26:e2:88:53:61:00:78:a1:d6:6e:fb:26:
         c1:8b:9e:87:a7:c6:35:21:44:8a:1c:4d:77:56:de:8e:b8:51:
         61:15:eb:eb:38:35:10:e0:75:78:ed:a4:49:da:43:1e:6d:93:
         cf:f3:9b:6d:aa:1d:73:c5:8c:2d:9c:92:f7:d6:37:e3:b5:47:
         78:ac:d6:3b:29:ed:a7:78:74:78:6a:ec:99:6c:7d:1d:e7:80:
         4a:79:a9:02:4e:72:0b:bd:3d:26:a7:dc:b7:e7:e5:26:14:72:
         69:6f:b5:f4:ea:1e:7c:a0:3b:78:0c:13:1c:88:c3:23:28:99:
         38:83:b6:0a:fc:46:9e:2f:70:5a:fd:7f:90:4e:07:13:ff:32:
         de:a5:66:61:a1:34:c2:74:45:65:b8:71:be:d2:ab:3e:bf:08:
         10:41:d8:1a:3b:17:c6:b4:b3:4b:db:04:4c:85:60:69:bc:46:
         98:9f:f4:66:34:9a:3b:42:31:92:80:df:43:9f:c4:a2:98:b1:
         72:5a:65:2c
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUM3EtSY+lG4BhOGsjvEScUdYoidIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MThaFw0yMzExMjIxODM5MThaMDMxMTAvBgNV
BAMTKEM2NDNBMzk4MDk4RkJGRDk1ODBGQ0U2OEJDQkU4NzUzMTg5RUIwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJb1UzATNuPMdCk6hECWFiBeeA
S/84R7CRIII3qNBnGWb04P+LqYA9zgZfKlepLEEcTjy+Yx9LZ/kO1ttY06ixZTST
4li0TSQgOm3Cktkwb5a1NlYVglU8uPD6udiB7jSuyQ12W52skatI1f4W2ntXW4dB
VdZMPiFf67yrcfh7SehYf8q73RrYWKlRFpssYyo3PFp43rohBhQqriNaNn7i8AUX
yWDflJEHPjsS+1Xdb9AcbODun7Ptm0RsGn6vZUh4kbSZtng04jDGvsetii7oUiUU
5Leu0NiSCmRTOVRuZsBOJN/+kGBMkhuV4oz69EWzd1RwC+VotR0VxVcqcnbPAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUxkOjmAmPv9lYD85ovL6HUxiesMUwHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzIzODMwMzQzYTMxNjIzMDM0M2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1
MzMzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBBsEAAIwDQYJKoZIhvcNAQELBQADggEBAAZI
qspeeBimi/gbt5bQqdugYbhOH0xjMcKLu8JkroEfJ+Ze5OhNYotr7QwiiKglh+0D
TKx9YywWGpf9RibiiFNhAHih1m77JsGLnoenxjUhRIocTXdW3o64UWEV6+s4NRDg
dXjtpEnaQx5tk8/zm22qHXPFjC2ckvfWN+O1R3is1jsp7ad4dHhq7JlsfR3ngEp5
qQJOcgu9PSan3Lfn5SYUcmlvtfTqHnygO3gMExyIwyMomTiDtgr8Rp4vcFr9f5BO
BxP/Mt6lZmGhNMJ0RWW4cb7Sqz6/CBBB2Bo7F8a0s0vbBEyFYGm8Rpif9GY0mjtC
MZKA30OfxKKYsXJaZSw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org