Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a623a3a2f34382d3438203d3e203533303438.roa
File:                     323830343a316230343a623a3a2f34382d3438203d3e203533303438.roa (raw, json)
Hash identifier:          A3MMksPeCTk4lQQmuCexly9Hex6NK/9j3+LNfd5EZh0=
Subject key identifier:   4C:E8:A6:07:F9:0D:6D:16:9D:AE:A2:A0:65:3E:29:B0:65:00:8E:5E
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       492F4F60574913F53375B821104D463643719631
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a623a3a2f34382d3438203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:13 +0000
ROA not before:           Wed 23 Nov 2022 18:34:13 +0000
ROA not after:            Wed 22 Nov 2023 18:39:13 +0000
asID:                     53048
IP address blocks:        2804:1b04:b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2f:4f:60:57:49:13:f5:33:75:b8:21:10:4d:46:36:43:71:96:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:13 2022 GMT
            Not After : Nov 22 18:39:13 2023 GMT
        Subject: CN=4CE8A607F90D6D169DAEA2A0653E29B065008E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:5b:66:fe:28:16:25:05:94:5d:34:38:12:
                    99:4d:53:c4:53:e6:de:a7:46:fc:62:3f:c6:b3:2d:
                    04:67:9d:b4:b7:77:2a:96:c0:fc:01:8b:21:ce:66:
                    7f:87:84:30:3b:fe:f8:c7:c6:cb:3a:37:ca:cd:a4:
                    f0:ff:31:82:68:2b:3d:7d:9c:a3:d0:80:8b:46:5b:
                    70:84:86:c3:c6:50:bf:5b:10:61:18:04:d9:e2:e8:
                    9d:4f:aa:1d:51:5b:7b:25:a4:d5:b8:4e:78:9e:31:
                    ae:ea:4a:6e:b2:5c:a9:d2:1a:05:05:3e:3a:03:85:
                    74:60:7a:bc:bf:ec:c3:25:2d:53:29:a1:96:eb:17:
                    d2:a8:f3:ac:0c:e6:ee:6b:0a:6c:d0:92:e4:87:39:
                    08:48:d3:94:93:16:4a:44:6f:ca:d2:71:84:2a:aa:
                    a6:d2:46:d7:6d:a2:1c:c5:8f:06:9e:fc:2d:ac:dc:
                    86:e9:38:23:63:d5:c6:46:d8:bf:d2:64:30:05:cd:
                    4e:97:05:9b:57:47:ae:8c:06:7b:67:46:ce:96:2c:
                    a5:86:62:89:63:41:0a:8e:1b:50:8b:ab:da:ca:d0:
                    27:34:d7:79:09:db:74:03:29:38:47:e7:8d:57:61:
                    d6:e5:44:04:eb:c2:4a:57:b1:36:49:58:1a:80:22:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E8:A6:07:F9:0D:6D:16:9D:AE:A2:A0:65:3E:29:B0:65:00:8E:5E
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/323830343a316230343a623a3a2f34382d3438203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b04:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:55:9f:2e:21:2c:31:cd:8d:f0:28:2c:65:df:2d:a0:27:
         59:cf:d3:ec:cc:6c:6d:ed:4b:d5:87:76:76:68:fe:41:f1:a8:
         3f:1f:3d:8f:09:50:3b:b2:de:d9:2a:ef:21:2d:00:bb:f7:ea:
         b6:90:3a:37:b4:b1:cb:fc:33:4f:92:ef:51:de:23:75:9e:b0:
         17:21:b9:19:42:60:9b:31:e4:30:3a:04:3d:fd:aa:d6:fd:25:
         53:f9:ef:5d:d6:26:35:8a:6f:f9:4e:b6:7c:f9:16:9d:99:9d:
         1f:df:d8:9a:cc:63:83:a6:7f:76:1a:d6:49:2b:ba:b7:21:db:
         e5:19:d7:09:71:ce:bb:aa:1d:5d:4f:ed:4f:58:8b:b6:dc:24:
         a7:bd:0b:d4:6a:9f:2d:4c:32:e7:05:24:ca:70:dd:ad:a2:a1:
         8f:b1:f8:34:a7:e7:a6:38:a6:01:14:24:74:8e:37:cb:c3:1b:
         f3:c3:c0:57:2c:41:c5:40:2a:2d:ae:e9:e7:b4:03:ce:9c:d5:
         a9:c3:e2:c8:f4:3b:fd:60:eb:12:32:5f:59:f4:14:e2:11:77:
         19:14:78:91:01:87:0f:90:4f:a9:3b:df:39:af:49:d5:c9:c0:
         97:ae:53:09:7a:5e:8a:06:3c:0a:e4:d8:ea:50:12:c0:1c:e4:
         26:0e:d7:a4
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUSS9PYFdJE/UzdbghEE1GNkNxljEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MTNaFw0yMzExMjIxODM5MTNaMDMxMTAvBgNV
BAMTKDRDRThBNjA3RjkwRDZEMTY5REFFQTJBMDY1M0UyOUIwNjUwMDhFNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcJVtm/igWJQWUXTQ4EplNU8RT
5t6nRvxiP8azLQRnnbS3dyqWwPwBiyHOZn+HhDA7/vjHxss6N8rNpPD/MYJoKz19
nKPQgItGW3CEhsPGUL9bEGEYBNni6J1Pqh1RW3slpNW4TnieMa7qSm6yXKnSGgUF
PjoDhXRgery/7MMlLVMpoZbrF9Ko86wM5u5rCmzQkuSHOQhI05STFkpEb8rScYQq
qqbSRtdtohzFjwae/C2s3IbpOCNj1cZG2L/SZDAFzU6XBZtXR66MBntnRs6WLKWG
YoljQQqOG1CLq9rK0Cc013kJ23QDKThH541XYdblRATrwkpXsTZJWBqAIlJZAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUTOimB/kNbRadrqKgZT4psGUAjl4wHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzIzODMwMzQzYTMxNjIzMDM0M2E2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1
MzMzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBBsEAAswDQYJKoZIhvcNAQELBQADggEBAISK
VZ8uISwxzY3wKCxl3y2gJ1nP0+zMbG3tS9WHdnZo/kHxqD8fPY8JUDuy3tkq7yEt
ALv36raQOje0scv8M0+S71HeI3WesBchuRlCYJsx5DA6BD39qtb9JVP5713WJjWK
b/lOtnz5Fp2ZnR/f2JrMY4Omf3Ya1kkrurch2+UZ1wlxzruqHV1P7U9Yi7bcJKe9
C9Rqny1MMucFJMpw3a2ioY+x+DSn56Y4pgEUJHSON8vDG/PDwFcsQcVAKi2u6ee0
A86c1anD4sj0O/1g6xIyX1n0FOIRdxkUeJEBhw+QT6k73zmvSdXJwJeuUwl6XooG
PArk2OpQEsAc5CYO16Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org