Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/323830343a313663383a663030303a3a2f33372d3337203d3e203631393136.roa
File:                     323830343a313663383a663030303a3a2f33372d3337203d3e203631393136.roa (raw, json)
Hash identifier:          UGbkf8i/fLZtUXGTDQ/235f/ORqQdFHyn4Y3STsB7hQ=
Subject key identifier:   9D:F4:64:0D:13:FB:0F:F5:F9:F2:F7:2E:34:BA:12:C2:43:35:8B:4B
Certificate issuer:       /CN=122B90E351D359AA3A0E466742B2EC4D30CBA115
Certificate serial:       66A9D088F8E002B8D48FFB41C7877FCC56725D06
Authority key identifier: 12:2B:90:E3:51:D3:59:AA:3A:0E:46:67:42:B2:EC:4D:30:CB:A1:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122B90E351D359AA3A0E466742B2EC4D30CBA115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/323830343a313663383a663030303a3a2f33372d3337203d3e203631393136.roa
Signing time:             Thu 06 Jul 2023 17:20:06 +0000
ROA not before:           Thu 06 Jul 2023 17:15:06 +0000
ROA not after:            Thu 04 Jul 2024 17:20:06 +0000
asID:                     61916
IP address blocks:        2804:16c8:f000::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a9:d0:88:f8:e0:02:b8:d4:8f:fb:41:c7:87:7f:cc:56:72:5d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122B90E351D359AA3A0E466742B2EC4D30CBA115
        Validity
            Not Before: Jul  6 17:15:06 2023 GMT
            Not After : Jul  4 17:20:06 2024 GMT
        Subject: CN=9DF4640D13FB0FF5F9F2F72E34BA12C243358B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:b3:13:2c:b0:41:b7:36:65:22:ea:62:a6:
                    67:7d:3f:93:be:3f:50:59:15:02:29:d1:63:fb:1e:
                    a7:4b:b6:2d:1e:f4:b7:a7:06:b7:2b:de:7a:3c:44:
                    36:c9:f5:2b:36:4a:18:fc:0e:e4:39:97:06:18:d9:
                    71:dc:db:00:e9:49:43:5e:29:a8:c0:90:4e:9d:e0:
                    68:8d:bd:1e:fd:85:aa:38:06:fc:fa:aa:a6:d4:94:
                    ae:c0:6b:ae:d4:a3:55:11:e5:91:86:38:3c:5b:38:
                    b4:a6:b3:ea:8c:06:70:9f:b0:3a:88:cb:d6:88:9e:
                    41:94:9d:ee:32:81:eb:41:27:bd:02:24:65:24:87:
                    fd:5f:f3:39:33:e5:c5:29:d6:15:4b:34:62:e4:04:
                    13:07:46:6b:32:6f:bf:af:fd:62:10:b5:76:58:1a:
                    ee:4f:3f:13:d9:e6:32:eb:a8:a0:28:ef:8e:c5:f0:
                    6c:fd:3f:74:af:49:10:74:35:4e:3e:30:fc:dc:d8:
                    15:25:31:51:0c:a1:07:65:71:9b:fd:15:01:1b:3a:
                    da:30:fe:47:27:0d:64:e9:93:8e:cb:84:ce:a7:e1:
                    a6:76:2c:32:50:ed:05:f6:6a:65:16:91:82:86:11:
                    b8:6f:b5:b2:4b:74:63:ca:7f:87:94:06:2d:e2:45:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F4:64:0D:13:FB:0F:F5:F9:F2:F7:2E:34:BA:12:C2:43:35:8B:4B
            X509v3 Authority Key Identifier:
                keyid:12:2B:90:E3:51:D3:59:AA:3A:0E:46:67:42:B2:EC:4D:30:CB:A1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/122B90E351D359AA3A0E466742B2EC4D30CBA115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122B90E351D359AA3A0E466742B2EC4D30CBA115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8afsKL3mWbXQMDqHRAv2gyQCYuKoRNJtW6RpZ6RWm9gb/0/323830343a313663383a663030303a3a2f33372d3337203d3e203631393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16c8:f000::/37

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:fd:6b:05:18:2f:af:b1:6b:a8:00:67:c0:40:e7:c4:4f:
         ae:89:f9:fb:70:1f:0d:8a:ea:13:66:75:06:92:05:a1:20:8d:
         36:3f:f2:6c:26:e2:59:f3:e5:14:64:f2:4d:19:58:59:73:cf:
         c2:b4:63:41:06:75:ca:90:ab:70:54:61:65:23:56:fc:80:52:
         f2:85:c9:d4:ee:7d:96:5a:8e:38:61:72:c6:0b:f1:22:34:80:
         c4:72:9f:e9:26:eb:7c:ac:c9:67:e0:ec:81:0d:30:05:58:5f:
         f2:b2:da:18:33:7d:d7:ca:b7:f1:74:b7:bb:db:08:4e:e1:cc:
         a3:94:ed:35:8c:7d:75:ce:14:5e:dd:04:db:d5:c4:53:99:66:
         b4:bb:1c:ea:4f:bb:37:19:6a:fe:a4:d5:7c:35:f5:5b:8c:19:
         ff:c1:ba:a8:a9:76:d6:87:0b:71:b6:eb:cb:eb:73:19:aa:09:
         42:5d:d9:76:d7:01:39:1a:ce:41:cb:c1:09:fb:1b:12:91:78:
         5e:7d:34:6f:73:0a:c9:22:c6:27:47:bf:6a:08:ec:b5:f6:cd:
         5b:b3:b8:14:a8:b7:6a:4a:ad:56:ff:83:37:54:20:bc:e1:1f:
         12:e7:f5:5c:81:be:9e:24:77:a3:82:7a:50:9a:b9:b8:f2:5f:
         50:3c:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org