Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a613a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a613a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          JxC7/gqOMd+973xkQ8R5EKwQbURU9ma3e1yLgd+sO2E=
Subject key identifier:   AF:57:B7:5D:23:33:4A:F2:86:37:46:26:48:D1:F4:2F:D8:43:3D:17
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       6B9C35F90E5F6BDF10F9CD676A060AD715EDA667
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a613a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:20 +0000
ROA not before:           Wed 23 Nov 2022 18:34:20 +0000
ROA not after:            Wed 22 Nov 2023 18:39:20 +0000
asID:                     53048
IP address blocks:        2804:1b04:a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:9c:35:f9:0e:5f:6b:df:10:f9:cd:67:6a:06:0a:d7:15:ed:a6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:20 2022 GMT
            Not After : Nov 22 18:39:20 2023 GMT
        Subject: CN=AF57B75D23334AF28637462648D1F42FD8433D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:13:97:88:05:d2:67:f6:43:04:8a:74:24:
                    74:3f:51:d8:19:ee:34:6c:6d:37:50:9f:8b:06:47:
                    12:5a:a0:44:c6:80:a8:13:4c:91:a1:5d:0e:42:ee:
                    27:d6:ce:99:13:c3:b3:73:32:1f:25:b4:cd:25:a9:
                    ca:61:b7:66:fc:55:7d:e4:7f:db:87:5f:fd:76:e3:
                    24:cf:ea:e8:86:64:64:b1:0f:e7:8c:ab:41:5b:f2:
                    41:d8:a4:27:36:72:0e:24:cb:2b:a6:10:8f:d8:e8:
                    2d:1b:02:df:ad:9c:e4:c4:bc:c4:b7:02:80:5f:e6:
                    a5:f4:c8:16:56:cd:6b:bc:a6:e3:d7:97:1d:24:9e:
                    35:43:f1:a1:be:af:58:94:f8:0c:ae:a5:4b:4c:da:
                    13:de:86:88:51:69:88:0d:48:03:7f:9f:5d:81:0e:
                    2d:76:33:58:da:42:2b:4d:08:7f:57:9b:5d:44:c6:
                    dc:f7:e3:33:5c:85:09:e6:66:dd:27:41:10:9c:93:
                    1c:3e:8d:cd:37:d5:7b:9f:bd:46:73:a4:6d:bd:a8:
                    02:1c:f9:b9:3d:82:d2:7a:00:31:c8:5e:90:23:70:
                    48:50:9a:f1:7a:ac:a0:d7:26:de:df:ca:89:f1:c0:
                    6e:26:9f:44:ee:07:8f:76:02:d9:49:a7:b5:1e:bc:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:57:B7:5D:23:33:4A:F2:86:37:46:26:48:D1:F4:2F:D8:43:3D:17
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a613a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:37:53:1d:b4:4d:f3:02:5d:e8:1d:f4:91:67:53:e6:0b:b6:
         d0:f8:38:04:7c:33:d4:bb:bb:5c:69:4f:96:61:16:53:6d:f6:
         05:81:39:12:99:32:ad:8b:ab:3b:10:8e:ff:6c:0a:d3:ab:65:
         fb:af:7b:69:11:c3:4f:2c:e5:28:84:f8:c3:8d:f8:72:10:8e:
         36:c1:03:03:eb:59:d2:68:3b:38:de:d7:8c:85:ff:a2:e2:89:
         7b:1b:70:a1:68:78:25:6a:7b:61:d2:aa:64:66:43:34:1a:00:
         8f:46:60:b5:20:c7:c3:88:7d:7b:1e:4d:58:8a:03:33:37:cb:
         30:43:b7:0c:ca:af:f0:d4:76:08:81:4f:9f:b0:31:6e:6a:d8:
         12:23:dd:7b:b6:5e:04:0d:91:96:e8:be:6b:2d:30:f5:16:6d:
         72:06:91:85:5d:16:ae:38:b2:92:a2:0f:13:a5:77:29:e6:a2:
         e9:57:da:96:14:5e:38:c5:3b:38:c2:cd:10:42:6c:d6:15:7d:
         81:75:b4:11:c0:22:a3:72:1f:3e:ba:e1:b2:d0:23:b4:16:f8:
         b2:a0:b0:af:f2:86:e0:a4:2e:b8:76:24:65:3f:3e:10:2a:f1:
         3e:3f:ef:d5:4a:b6:33:94:97:fc:2b:0e:8a:3f:d6:65:41:5f:
         ef:dc:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org