Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/323830343a313663383a653030303a3a2f33372d3337203d3e203631393136.roa
File:                     323830343a313663383a653030303a3a2f33372d3337203d3e203631393136.roa (raw, json)
Hash identifier:          Kpmv3DxvvldpknA58kIsX6SNvoTilXrfX1lvn2S7+iI=
Subject key identifier:   28:7F:A8:21:22:62:E2:F3:72:C3:90:FD:DB:AC:FF:C3:B3:B1:DA:3D
Certificate issuer:       /CN=122B90E351D359AA3A0E466742B2EC4D30CBA115
Certificate serial:       687783B8BB8570059AAB1E7B9F1513310A8317B1
Authority key identifier: 12:2B:90:E3:51:D3:59:AA:3A:0E:46:67:42:B2:EC:4D:30:CB:A1:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122B90E351D359AA3A0E466742B2EC4D30CBA115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/323830343a313663383a653030303a3a2f33372d3337203d3e203631393136.roa
Signing time:             Thu 06 Jul 2023 17:20:09 +0000
ROA not before:           Thu 06 Jul 2023 17:15:09 +0000
ROA not after:            Thu 04 Jul 2024 17:20:09 +0000
asID:                     61916
IP address blocks:        2804:16c8:e000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:77:83:b8:bb:85:70:05:9a:ab:1e:7b:9f:15:13:31:0a:83:17:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122B90E351D359AA3A0E466742B2EC4D30CBA115
        Validity
            Not Before: Jul  6 17:15:09 2023 GMT
            Not After : Jul  4 17:20:09 2024 GMT
        Subject: CN=287FA8212262E2F372C390FDDBACFFC3B3B1DA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:0f:ec:26:b8:65:8e:ee:72:7d:dd:8b:0c:
                    f0:d7:35:ca:58:38:db:26:69:24:c5:95:09:70:f3:
                    1d:f7:8c:d2:d1:3c:c5:e6:16:76:08:b3:66:ea:44:
                    54:55:e3:55:60:f0:2c:e4:f0:34:11:cd:0d:d8:6a:
                    20:ff:c4:c3:58:33:33:8d:4b:13:84:ce:bb:12:ed:
                    b2:db:eb:f7:43:d2:a9:65:f5:06:e1:ad:00:3c:93:
                    bf:2c:bf:59:cd:1a:70:3f:d0:f5:73:21:f6:46:04:
                    48:ab:de:a1:fa:da:31:84:8d:d6:54:e6:1f:e2:ad:
                    4d:63:2c:09:27:d1:bc:e0:6d:dc:0b:77:06:d9:60:
                    dd:02:69:09:99:bf:66:9e:75:81:2f:1a:c5:03:a2:
                    e7:56:db:89:e6:98:d9:bd:e0:a1:c4:3d:ff:6c:5b:
                    62:b7:94:cd:92:63:5b:f8:65:96:af:3b:34:ed:60:
                    3b:04:b9:8d:f4:6e:75:30:a8:85:03:fc:56:51:39:
                    26:bf:12:44:f9:2e:5b:64:b2:52:21:ff:77:81:e9:
                    d5:89:c9:9b:b5:01:e4:61:50:a2:75:d4:73:98:f2:
                    cf:d2:79:93:bf:26:3e:51:b7:55:f4:29:6c:8c:f8:
                    e2:e1:62:d3:15:73:9d:d1:1b:47:ae:c3:74:4b:9b:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7F:A8:21:22:62:E2:F3:72:C3:90:FD:DB:AC:FF:C3:B3:B1:DA:3D
            X509v3 Authority Key Identifier:
                keyid:12:2B:90:E3:51:D3:59:AA:3A:0E:46:67:42:B2:EC:4D:30:CB:A1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/122B90E351D359AA3A0E466742B2EC4D30CBA115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122B90E351D359AA3A0E466742B2EC4D30CBA115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/323830343a313663383a653030303a3a2f33372d3337203d3e203631393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c8:e000::/37

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:b1:8d:5e:3f:77:9f:d0:2d:59:17:21:3e:f2:47:aa:ba:
         dc:22:79:45:e5:eb:88:5e:cf:13:eb:c7:63:d8:fd:a7:ae:99:
         e1:9d:32:14:89:b8:16:67:c0:9f:9d:b8:0e:7d:cd:39:93:d6:
         61:6e:6d:98:64:18:ef:e1:52:02:31:d5:cb:5b:2d:1d:a2:6f:
         4c:f0:50:a4:0a:15:8f:32:0d:20:9f:68:1b:b2:c0:f1:d4:bb:
         0a:c2:8a:b1:9f:08:69:0b:51:72:bf:08:63:45:b8:99:68:bd:
         3b:37:ae:58:d7:37:f9:07:fe:ba:d0:cf:46:ac:dc:4f:d3:ce:
         ee:4e:60:26:3e:12:63:eb:bf:fa:42:4a:1b:ca:71:89:fd:94:
         f2:72:9c:29:23:ee:66:65:84:4b:9d:26:d8:c0:81:cd:c4:d8:
         f5:a1:d5:9f:c6:22:2d:2e:43:81:65:70:30:24:64:e3:88:03:
         d7:81:42:df:a5:4f:ff:ef:e5:f6:3e:06:fe:a9:fa:b0:5c:c3:
         16:68:a9:af:bf:ca:85:5b:b6:73:67:07:cc:43:e5:e6:dd:ea:
         00:56:3b:9a:4d:fd:2b:10:da:05:01:b3:64:e1:92:b6:83:ec:
         6c:03:d0:50:11:1f:97:53:20:06:63:53:5d:d1:2c:ae:7b:e6:
         d4:3d:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org