Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa
File:                     323830343a383533633a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier:          wUe0kX9vYzr4xyLKg6MQ+p7Tj8G78mks/Sk7jqltGVY=
Subject key identifier:   56:C5:ED:46:FC:BA:BF:99:BF:D2:38:DD:48:C9:2C:51:F7:CB:44:AF
Certificate issuer:       /CN=883688265763EC4B7AD8148EC2953C24728E63D5
Certificate serial:       02ED8A35FF7FBA08455436CFCE1E6495D2738BF6
Authority key identifier: 88:36:88:26:57:63:EC:4B:7A:D8:14:8E:C2:95:3C:24:72:8E:63:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/883688265763EC4B7AD8148EC2953C24728E63D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa
Signing time:             Wed 01 Nov 2023 17:00:00 +0000
ROA not before:           Wed 01 Nov 2023 16:55:00 +0000
ROA not after:            Wed 30 Oct 2024 17:00:00 +0000
asID:                     272566
IP address blocks:        2804:853c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:8a:35:ff:7f:ba:08:45:54:36:cf:ce:1e:64:95:d2:73:8b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883688265763EC4B7AD8148EC2953C24728E63D5
        Validity
            Not Before: Nov  1 16:55:00 2023 GMT
            Not After : Oct 30 17:00:00 2024 GMT
        Subject: CN=3082010A0282010100CC7E63E5D66E3CA21D56386563330C8BDDA59E8E31A59644B85FAFC746D3BE6B73AED6C904A8977FAC737864D066CAAC2A91CD9D272600C56D6E20BFF3BFB139CE727065F64079303B6F2424F2AB1C7E3DAEE360C7A60BEA5B574343E3BA397F3521440B93874F53E5F8F58F418C46610F662EDF56CCE5830E80D5412FD5900F4E435BA6DFB4473C03139D795AD7FBEA86F3E90C0ED0CDC309C3A5A08007EC99832EB9612062652532E47213F144ACE73BF43D39AAA2F1944BCDAD44F6CC3E7C5519858A9B9A22A8F2A6FD6D01920F28B0BBDD99A16E9BEDC017F2DAF74525936A17DF9467B6945CBED57FC985886B2755717A8D6D9611BBA0B0D90ECF78D7EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:63:e5:d6:6e:3c:a2:1d:56:38:65:63:33:
                    0c:8b:dd:a5:9e:8e:31:a5:96:44:b8:5f:af:c7:46:
                    d3:be:6b:73:ae:d6:c9:04:a8:97:7f:ac:73:78:64:
                    d0:66:ca:ac:2a:91:cd:9d:27:26:00:c5:6d:6e:20:
                    bf:f3:bf:b1:39:ce:72:70:65:f6:40:79:30:3b:6f:
                    24:24:f2:ab:1c:7e:3d:ae:e3:60:c7:a6:0b:ea:5b:
                    57:43:43:e3:ba:39:7f:35:21:44:0b:93:87:4f:53:
                    e5:f8:f5:8f:41:8c:46:61:0f:66:2e:df:56:cc:e5:
                    83:0e:80:d5:41:2f:d5:90:0f:4e:43:5b:a6:df:b4:
                    47:3c:03:13:9d:79:5a:d7:fb:ea:86:f3:e9:0c:0e:
                    d0:cd:c3:09:c3:a5:a0:80:07:ec:99:83:2e:b9:61:
                    20:62:65:25:32:e4:72:13:f1:44:ac:e7:3b:f4:3d:
                    39:aa:a2:f1:94:4b:cd:ad:44:f6:cc:3e:7c:55:19:
                    85:8a:9b:9a:22:a8:f2:a6:fd:6d:01:92:0f:28:b0:
                    bb:dd:99:a1:6e:9b:ed:c0:17:f2:da:f7:45:25:93:
                    6a:17:df:94:67:b6:94:5c:be:d5:7f:c9:85:88:6b:
                    27:55:71:7a:8d:6d:96:11:bb:a0:b0:d9:0e:cf:78:
                    d7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:ED:46:FC:BA:BF:99:BF:D2:38:DD:48:C9:2C:51:F7:CB:44:AF
            X509v3 Authority Key Identifier:
                keyid:88:36:88:26:57:63:EC:4B:7A:D8:14:8E:C2:95:3C:24:72:8E:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/883688265763EC4B7AD8148EC2953C24728E63D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/883688265763EC4B7AD8148EC2953C24728E63D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a3a2f33342d3334203d3e20323732353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:853c::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:18:85:57:62:63:47:93:8c:1f:7c:a6:86:20:cc:b0:37:9b:
         f6:f6:1d:69:44:d4:37:53:f6:eb:57:5a:1a:1f:6b:80:10:f7:
         25:86:2f:1b:13:8b:0a:af:00:e8:b9:37:c9:df:8f:77:37:0d:
         a1:48:a3:4f:65:c3:a0:0a:32:f3:21:ef:c0:2a:c6:c1:69:0d:
         2b:74:4a:e3:29:f9:ab:df:a4:a6:e2:b6:c1:c5:cb:d9:3a:ed:
         19:0f:1e:55:84:23:fc:bf:3f:dd:1b:b2:2c:e6:7d:fb:2e:3e:
         93:09:d8:ec:0a:a6:6a:b3:7b:a4:b4:f1:6d:e9:2c:9b:9e:c1:
         ab:11:90:f0:85:20:f0:bf:2e:30:2c:1b:ea:83:60:35:d7:7f:
         6c:3e:80:3a:91:7e:f5:32:e7:50:1a:e5:fd:4b:f3:f0:ad:6d:
         4a:d2:80:0f:75:8c:e2:fe:f5:84:08:04:3c:c1:29:f4:70:40:
         11:8a:ce:22:71:a9:2b:b8:34:2c:c5:bc:18:9c:36:26:77:fe:
         3e:19:a6:6d:86:c4:33:87:6c:07:cf:00:ef:9f:e9:55:4e:b6:
         c5:01:88:9e:ae:3a:38:20:c3:94:8c:d5:c4:b9:09:02:e9:93:
         b1:87:fb:4e:49:00:85:ae:a2:8e:c1:23:99:7e:3a:a0:1e:04:
         5f:23:b0:24
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUAu2KNf9/ughFVDbPzh5kldJzi/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgzNjg4MjY1NzYzRUM0QjdBRDgxNDhFQzI5NTNDMjQ3
MjhFNjNENTAeFw0yMzExMDExNjU1MDBaFw0yNDEwMzAxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M3RTYzRTVENjZFM0NBMjFE
NTYzODY1NjMzMzBDOEJEREE1OUU4RTMxQTU5NjQ0Qjg1RkFGQzc0NkQzQkU2Qjcz
QUVENkM5MDRBODk3N0ZBQzczNzg2NEQwNjZDQUFDMkE5MUNEOUQyNzI2MDBDNTZE
NkUyMEJGRjNCRkIxMzlDRTcyNzA2NUY2NDA3OTMwM0I2RjI0MjRGMkFCMUM3RTNE
QUVFMzYwQzdBNjBCRUE1QjU3NDM0M0UzQkEzOTdGMzUyMTQ0MEI5Mzg3NEY1M0U1
RjhGNThGNDE4QzQ2NjEwRjY2MkVERjU2Q0NFNTgzMEU4MEQ1NDEyRkQ1OTAwRjRF
NDM1QkE2REZCNDQ3M0MwMzEzOUQ3OTVBRDdGQkVBODZGM0U5MEMwRUQwQ0RDMzA5
QzNBNUEwODAwN0VDOTk4MzJFQjk2MTIwNjI2NTI1MzJFNDcyMTNGMTQ0QUNFNzNC
RjQzRDM5QUFBMkYxOTQ0QkNEQUQ0NEY2Q0MzRTdDNTUxOTg1OEE5QjlBMjJBOEYy
QTZGRDZEMDE5MjBGMjhCMEJCREQ5OUExNkU5QkVEQzAxN0YyREFGNzQ1MjU5MzZB
MTdERjk0NjdCNjk0NUNCRUQ1N0ZDOTg1ODg2QjI3NTU3MTdBOEQ2RDk2MTFCQkEw
QjBEOTBFQ0Y3OEQ3RUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzH5j5dZuPKIdVjhlYzMMi92lno4xpZZEuF+vx0bTvmtzrtbJBKiX
f6xzeGTQZsqsKpHNnScmAMVtbiC/87+xOc5ycGX2QHkwO28kJPKrHH49ruNgx6YL
6ltXQ0Pjujl/NSFEC5OHT1Pl+PWPQYxGYQ9mLt9WzOWDDoDVQS/VkA9OQ1um37RH
PAMTnXla1/vqhvPpDA7QzcMJw6WggAfsmYMuuWEgYmUlMuRyE/FErOc79D05qqLx
lEvNrUT2zD58VRmFipuaIqjypv1tAZIPKLC73ZmhbpvtwBfy2vdFJZNqF9+UZ7aU
XL7Vf8mFiGsnVXF6jW2WEbugsNkOz3jX6wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFbF7Ub8ur+Zv9I43UjJLFH3y0SvMB8GA1UdIwQYMBaAFIg2iCZXY+xLetgUjsKV
PCRyjmPVMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N1ZXpXcGE4N1ZUYTl2
cmJCYjFmNmRSbkRWYUpnM3ZNVkRLN3BhS2hqa2FULzAvODgzNjg4MjY1NzYzRUM0
QjdBRDgxNDhFQzI5NTNDMjQ3MjhFNjNENS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84ODM2ODgyNjU3NjNFQzRCN0FEODE0OEVDMjk1M0MyNDcyOEU2
M0Q1LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DdWV6V3BhODdWVGE5dnJiQmIx
ZjZkUm5EVmFKZzN2TVZESzdwYUtoamthVC8wLzMyMzgzMDM0M2EzODM1MzM2MzNh
M2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzczMjM1MzYzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigE
hTwAMA0GCSqGSIb3DQEBCwUAA4IBAQCBGIVXYmNHk4wffKaGIMywN5v29h1pRNQ3
U/brV1oaH2uAEPclhi8bE4sKrwDouTfJ3493Nw2hSKNPZcOgCjLzIe/AKsbBaQ0r
dErjKfmr36Sm4rbBxcvZOu0ZDx5VhCP8vz/dG7Is5n37Lj6TCdjsCqZqs3uktPFt
6SybnsGrEZDwhSDwvy4wLBvqg2A1139sPoA6kX71MudQGuX9S/PwrW1K0oAPdYzi
/vWECAQ8wSn0cEARis4icakruDQsxbwYnDYmd/4+GaZthsQzh2wHzwDvn+lVTrbF
AYierjo4IMOUjNXEuQkC6ZOxh/tOSQCFrqKOwSOZfjqgHgRfI7Ak
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org