Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a633030303a3a2f33342d3334203d3e20323634393639.roa
File:                     323830343a333062303a633030303a3a2f33342d3334203d3e20323634393639.roa (raw, json)
Hash identifier:          T9CJ0qapPf73NUwNkTULaxIMj5bNGBUDmjZfpo0/A8c=
Subject key identifier:   7E:C8:65:BC:E3:18:13:1E:1B:EE:79:CD:D8:C0:3A:33:F9:F7:FF:E4
Certificate issuer:       /CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
Certificate serial:       11825BB8A9C62C7D2AF753531B01B2279B07EE80
Authority key identifier: 53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a633030303a3a2f33342d3334203d3e20323634393639.roa
Signing time:             Tue 31 Oct 2023 16:06:00 +0000
ROA not before:           Tue 31 Oct 2023 16:01:00 +0000
ROA not after:            Tue 29 Oct 2024 16:06:00 +0000
asID:                     264969
IP address blocks:        2804:30b0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:82:5b:b8:a9:c6:2c:7d:2a:f7:53:53:1b:01:b2:27:9b:07:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0
        Validity
            Not Before: Oct 31 16:01:00 2023 GMT
            Not After : Oct 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:1f:0d:de:b5:a2:ca:e7:3c:15:be:c9:ad:
                    dd:97:14:ae:b6:95:7e:23:46:66:af:21:64:5c:50:
                    c7:53:b6:18:44:64:fa:00:da:18:bc:cd:93:44:4b:
                    9a:a5:ab:c1:c3:82:75:71:d3:65:5a:c5:87:c5:ab:
                    31:57:49:fc:e2:f5:f3:e4:0b:a6:10:b2:69:e6:32:
                    72:b1:2e:d1:f4:47:03:71:64:74:95:ca:56:c1:85:
                    61:5c:7d:be:e9:e5:57:12:c5:6e:47:51:3d:6a:44:
                    55:52:30:76:33:21:15:a7:57:06:ac:ee:ed:e1:f0:
                    1c:3f:b3:66:c0:08:80:33:5b:ec:fa:6d:05:45:b8:
                    32:66:8d:39:45:80:a8:4d:81:5d:85:0b:47:63:1c:
                    78:de:7e:78:75:1f:17:74:2e:12:e2:4b:10:c4:e5:
                    96:03:03:3c:73:07:b0:b4:b0:9f:5f:5c:4f:11:90:
                    8f:65:bf:06:31:32:7b:f9:0e:84:b2:42:7d:89:21:
                    92:d9:71:c4:4e:40:d3:af:31:60:a7:2a:e1:39:7c:
                    3b:87:de:93:cb:8e:6a:f3:93:6b:5c:4a:a1:eb:fb:
                    4b:b8:54:a3:4b:bb:80:d7:ac:79:5c:c2:6c:59:5d:
                    01:9c:aa:0b:28:99:bc:43:82:4c:24:99:f9:5b:34:
                    d7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C8:65:BC:E3:18:13:1E:1B:EE:79:CD:D8:C0:3A:33:F9:F7:FF:E4
            X509v3 Authority Key Identifier:
                keyid:53:3B:B6:1C:76:F4:3E:E8:E0:6A:E3:8A:7D:86:8E:45:B5:E9:F3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/533BB61C76F43EE8E06AE38A7D868E45B5E9F3B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/814Q2urx9C4QJAXKEnsXvddjhrkTSDr1AMvJZMLCBgTm/0/323830343a333062303a633030303a3a2f33342d3334203d3e20323634393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30b0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cc:b2:f3:8d:f6:01:13:15:ca:07:5d:e6:77:52:c9:d5:09:aa:
         d3:83:dd:1e:de:ba:90:00:f2:56:94:0f:fe:9e:fd:6a:76:96:
         b4:da:e6:d0:22:df:84:ef:81:63:01:65:98:2a:60:87:cc:23:
         71:92:2a:4d:f2:eb:39:39:3a:30:1b:e2:da:ca:42:f6:70:c8:
         37:0c:a5:59:99:6f:9e:c0:e9:92:b8:57:96:0a:fd:89:df:13:
         58:93:5c:c9:e1:8f:38:16:b2:6a:17:56:07:4d:34:65:0d:56:
         94:aa:5d:32:8f:6b:b9:a0:bb:00:bd:39:69:75:89:78:a4:c2:
         3e:33:ce:de:73:f4:f7:b4:1d:6a:7b:eb:5f:44:ae:38:ff:aa:
         bf:23:cd:35:48:d3:92:0f:dc:a8:18:43:11:92:aa:e7:c7:ff:
         18:3a:9a:77:ac:6a:13:34:73:d9:2c:b6:c1:b1:2f:d0:a9:a0:
         b5:00:ed:5e:d9:b4:af:ef:38:f0:72:2c:50:fd:b0:fd:80:f9:
         2a:06:42:fc:01:aa:cf:72:8b:aa:2f:5d:e3:fd:2d:35:30:8f:
         70:8d:97:ac:66:c9:3a:61:76:87:d5:28:ed:12:e7:13:2f:bb:
         5f:bf:ee:a9:df:9c:57:43:d4:29:16:57:ae:9c:d6:97:f8:c0:
         e0:55:1f:7c
-----BEGIN CERTIFICATE-----
MIIHTTCCBjWgAwIBAgIUEYJbuKnGLH0q91NTGwGyJ5sH7oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzQkI2MUM3NkY0M0VFOEUwNkFFMzhBN0Q4NjhFNDVC
NUU5RjNCMDAeFw0yMzEwMzExNjAxMDBaFw0yNDEwMjkxNjA2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDQ1RjFGMERERUI1QTJDQUU3
M0MxNUJFQzlBREREOTcxNEFFQjY5NTdFMjM0NjY2QUYyMTY0NUM1MEM3NTNCNjE4
NDQ2NEZBMDBEQTE4QkNDRDkzNDQ0QjlBQTVBQkMxQzM4Mjc1NzFEMzY1NUFDNTg3
QzVBQjMxNTc0OUZDRTJGNUYzRTQwQkE2MTBCMjY5RTYzMjcyQjEyRUQxRjQ0NzAz
NzE2NDc0OTVDQTU2QzE4NTYxNUM3REJFRTlFNTU3MTJDNTZFNDc1MTNENkE0NDU1
NTIzMDc2MzMyMTE1QTc1NzA2QUNFRUVERTFGMDFDM0ZCMzY2QzAwODgwMzM1QkVD
RkE2RDA1NDVCODMyNjY4RDM5NDU4MEE4NEQ4MTVEODUwQjQ3NjMxQzc4REU3RTc4
NzUxRjE3NzQyRTEyRTI0QjEwQzRFNTk2MDMwMzNDNzMwN0IwQjRCMDlGNUY1QzRG
MTE5MDhGNjVCRjA2MzEzMjdCRjkwRTg0QjI0MjdEODkyMTkyRDk3MUM0NEU0MEQz
QUYzMTYwQTcyQUUxMzk3QzNCODdERTkzQ0I4RTZBRjM5MzZCNUM0QUExRUJGQjRC
Qjg1NEEzNEJCQjgwRDdBQzc5NUNDMjZDNTk1RDAxOUNBQTBCMjg5OUJDNDM4MjRD
MjQ5OUY5NUIzNEQ3MkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1F8fDd61osrnPBW+ya3dlxSutpV+I0ZmryFkXFDHU7YYRGT6ANoY
vM2TREuapavBw4J1cdNlWsWHxasxV0n84vXz5AumELJp5jJysS7R9EcDcWR0lcpW
wYVhXH2+6eVXEsVuR1E9akRVUjB2MyEVp1cGrO7t4fAcP7NmwAiAM1vs+m0FRbgy
Zo05RYCoTYFdhQtHYxx43n54dR8XdC4S4ksQxOWWAwM8cwewtLCfX1xPEZCPZb8G
MTJ7+Q6EskJ9iSGS2XHETkDTrzFgpyrhOXw7h96Ty45q85NrXEqh6/tLuFSjS7uA
16x5XMJsWV0BnKoLKJm8Q4JMJJn5WzTXLQIDAQABo4ICWzCCAlcwHQYDVR0OBBYE
FH7IZbzjGBMeG+55zdjAOjP59//kMB8GA1UdIwQYMBaAFFM7thx29D7o4Grjin2G
jkW16fOwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzgxNFEydXJ4OUM0UUpB
WEtFbnNYdmRkamhya1RTRHIxQU12SlpNTENCZ1RtLzAvNTMzQkI2MUM3NkY0M0VF
OEUwNkFFMzhBN0Q4NjhFNDVCNUU5RjNCMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81MzNCQjYxQzc2RjQzRUU4RTA2QUUzOEE3RDg2OEU0NUI1RTlG
M0IwLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84MTRRMnVyeDlDNFFKQVhLRW5z
WHZkZGpocmtUU0RyMUFNdkpaTUxDQmdUbS8wLzMyMzgzMDM0M2EzMzMwNjIzMDNh
NjMzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjM2MzQzOTM2Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgYoBDCwwDANBgkqhkiG9w0BAQsFAAOCAQEAzLLzjfYBExXKB13md1LJ
1Qmq04PdHt66kADyVpQP/p79anaWtNrm0CLfhO+BYwFlmCpgh8wjcZIqTfLrOTk6
MBvi2spC9nDINwylWZlvnsDpkrhXlgr9id8TWJNcyeGPOBayahdWB000ZQ1WlKpd
Mo9ruaC7AL05aXWJeKTCPjPO3nP097QdanvrX0SuOP+qvyPNNUjTkg/cqBhDEZKq
58f/GDqad6xqEzRz2Sy2wbEv0KmgtQDtXtm0r+848HIsUP2w/YD5KgZC/AGqz3KL
qi9d4/0tNTCPcI2XrGbJOmF2h9Uo7RLnEy+7X7/uqd+cV0PUKRZXrpzWl/jA4FUf
fA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org