Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a333a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a333a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          uKYH7VQ9xmnO0atMAa6GRPIDwTH9PhjbOfRGSa47raI=
Subject key identifier:   D5:E9:D6:29:BD:7C:C0:4F:D5:23:85:37:E9:E3:42:E9:87:E2:19:8D
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       0C2D06498440CC3487C7B3DC4A098D679502C63D
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a333a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:17 +0000
ROA not before:           Wed 23 Nov 2022 18:34:17 +0000
ROA not after:            Wed 22 Nov 2023 18:39:17 +0000
asID:                     53048
IP address blocks:        2804:1b04:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:06:49:84:40:cc:34:87:c7:b3:dc:4a:09:8d:67:95:02:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:17 2022 GMT
            Not After : Nov 22 18:39:17 2023 GMT
        Subject: CN=D5E9D629BD7CC04FD5238537E9E342E987E2198D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:8f:43:a2:22:71:88:ab:cd:fc:e4:7f:96:
                    f6:b7:fe:03:66:84:22:59:73:5f:40:e6:ec:ea:22:
                    14:85:d4:24:1f:9b:43:43:c6:87:3c:b0:50:cf:d7:
                    3f:bf:1f:75:f6:82:7a:0c:7c:6f:61:6d:1d:bf:6d:
                    db:a2:30:63:52:1d:c5:15:59:07:e7:0c:d5:64:27:
                    a0:11:5a:3e:6f:a7:f9:c9:c8:5d:12:a1:34:48:c8:
                    01:f1:8a:ef:62:82:39:64:d2:c0:57:29:ed:a6:f7:
                    55:7d:46:ad:75:95:80:d8:ec:6a:32:7b:bb:9f:d1:
                    72:57:d8:b2:90:10:fe:05:fc:6e:64:d3:6f:ff:99:
                    09:7d:c5:16:aa:08:9f:ad:ec:07:ce:46:d3:32:49:
                    3e:2a:c7:18:d7:7b:56:b0:ed:83:d3:43:18:76:a2:
                    57:9c:ee:8f:32:99:dc:f5:cf:86:d4:49:8e:d4:f6:
                    c0:0b:03:32:c3:d2:07:2f:22:38:11:0d:08:af:15:
                    48:0a:cf:dd:81:a8:74:43:7e:25:06:82:c3:32:81:
                    33:3d:ea:48:ca:d2:97:af:92:b7:4e:01:46:5d:41:
                    78:5f:2a:57:3f:f0:f5:ee:fc:68:75:77:a0:91:c2:
                    96:e5:17:32:e9:57:3d:a7:81:a8:a7:2f:e3:ef:d8:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E9:D6:29:BD:7C:C0:4F:D5:23:85:37:E9:E3:42:E9:87:E2:19:8D
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a333a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:57:1e:af:3d:7a:74:18:ad:d5:19:ef:9b:5f:77:61:3f:d0:
         34:0d:af:ff:f5:2b:88:bf:27:1b:bf:f2:47:1a:92:e5:ea:38:
         63:c3:d8:43:e3:6a:da:be:0c:b7:fe:83:6b:c5:e0:ab:3f:58:
         de:08:5e:fc:79:84:cd:d3:ee:e4:95:b1:c0:24:0b:36:dd:71:
         c3:19:6e:e3:48:dd:e0:1b:f1:8e:a8:d8:25:33:8c:b7:b2:72:
         55:a8:b0:81:61:93:e2:8e:d4:97:ad:7e:e3:28:99:47:6e:ef:
         78:fd:a0:1c:55:12:01:9b:be:6c:39:d1:e2:88:68:9a:a9:60:
         88:1e:38:78:a3:a4:3b:2d:a5:69:b9:9e:9f:c2:44:81:68:da:
         76:72:aa:2a:f7:48:03:70:05:0d:7e:63:cf:69:84:e7:ac:71:
         86:8b:41:0c:69:8f:c3:95:51:5f:c5:07:b0:ac:56:42:62:d7:
         56:2c:20:f7:a4:79:6a:56:14:58:f8:d6:5d:1a:2b:e3:33:e1:
         fa:a9:7d:d3:a5:9b:56:e4:09:92:76:2a:b7:3e:98:4e:cd:23:
         e9:4c:0c:31:ba:28:eb:fa:08:6d:5f:6e:33:b9:83:31:b1:47:
         c8:fa:7e:fe:07:cf:d1:33:55:29:43:4e:88:c2:fb:35:84:72:
         a9:4d:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org