Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a383030303a3a2f34382d3438203d3e20323635343137.roa
File:                     323830343a333363383a383030303a3a2f34382d3438203d3e20323635343137.roa (raw, json)
Hash identifier:          Yut1PyxjQQhKjeBMHWwz31l71yIRDRkCfytAs2gc1Z0=
Subject key identifier:   35:10:E1:41:43:55:3D:D2:5A:8C:5B:F9:B6:4A:B7:16:38:7A:DB:B5
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       5E5A756273A8BCE4600AD11D0389AA970886958B
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a383030303a3a2f34382d3438203d3e20323635343137.roa
Signing time:             Fri 08 Sep 2023 00:24:53 +0000
ROA not before:           Fri 08 Sep 2023 00:19:53 +0000
ROA not after:            Fri 06 Sep 2024 00:24:53 +0000
asID:                     265417
IP address blocks:        2804:33c8:8000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:75:62:73:a8:bc:e4:60:0a:d1:1d:03:89:aa:97:08:86:95:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Sep  8 00:19:53 2023 GMT
            Not After : Sep  6 00:24:53 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:50:f7:98:01:bd:a4:b3:eb:62:e1:08:d7:
                    94:55:57:87:b7:37:74:12:7c:99:7f:0e:cf:19:ce:
                    b7:3c:90:92:d3:a2:1d:0d:5a:10:b3:2b:40:e7:f7:
                    42:27:91:46:a9:ae:c2:e9:72:da:51:20:e4:e7:97:
                    b7:7d:3f:b3:42:51:4a:db:f8:86:ae:58:00:ed:bc:
                    fe:62:0c:2d:ac:04:82:9a:4a:bb:6f:8b:d7:87:8c:
                    d4:a5:cd:83:56:a2:f2:25:a2:13:c8:e6:97:37:b2:
                    16:44:64:08:50:76:86:2c:8b:74:4b:f7:36:a5:cd:
                    15:63:db:7c:f1:0d:f8:17:25:51:47:f4:bc:01:12:
                    01:74:dd:35:35:03:85:59:e6:40:8a:c8:f2:5b:2d:
                    d5:6a:58:54:f0:3a:7f:8b:d7:de:87:9a:4d:84:d2:
                    a5:48:4f:b9:1b:96:e7:5e:2a:a5:97:2b:ca:a7:9f:
                    46:d5:b1:5e:1c:ff:47:e3:a4:19:6e:e9:aa:1b:58:
                    3b:2f:4f:3b:3d:82:8e:12:25:36:c2:7b:b4:4a:4d:
                    9b:04:a8:cb:f6:14:36:49:91:11:d4:39:c0:19:fd:
                    d7:c1:34:26:d8:3e:bd:28:dd:42:3d:0b:8f:8d:6e:
                    a2:38:47:56:31:79:14:5b:33:66:ff:37:69:72:31:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:10:E1:41:43:55:3D:D2:5A:8C:5B:F9:B6:4A:B7:16:38:7A:DB:B5
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a383030303a3a2f34382d3438203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33c8:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:ee:76:c1:69:63:ae:7f:71:b7:ad:f3:76:f3:ea:70:fd:2a:
         fc:55:03:ce:c8:41:b6:e1:26:60:58:62:72:c4:dc:0d:17:6e:
         54:aa:01:51:fe:e3:96:5c:78:f1:60:df:90:5f:19:62:5d:c8:
         3c:f5:4b:fd:ea:5c:73:c5:05:59:61:cb:89:d2:fe:8d:4a:8e:
         e3:91:d8:de:3a:2b:1e:a9:3a:95:32:a5:93:7c:40:41:e0:d8:
         09:8f:20:5f:82:1d:10:8e:51:69:ff:88:53:2f:60:85:4c:e7:
         0e:8a:67:8d:dc:39:8c:5e:08:74:11:12:89:73:19:ad:ef:74:
         0f:6a:b2:c2:53:ad:aa:61:64:7f:d7:ae:77:a9:7d:80:bb:a2:
         1f:10:1d:e2:47:9c:8c:7a:4c:1b:5d:1a:c4:2f:1d:a8:9a:72:
         f6:95:46:8d:9f:f5:69:c7:02:c5:c9:9b:b5:ef:b2:d1:cf:d6:
         48:99:59:72:1d:dd:8d:1d:ca:24:77:a2:49:32:0c:7c:3d:cd:
         e0:34:96:ed:e5:24:1b:57:57:75:30:3c:80:7a:a5:b8:19:49:
         70:4b:f5:a2:d9:15:cb:2f:74:58:69:de:f5:47:91:62:30:32:
         98:39:b1:90:3d:c0:5a:82:ea:af:5d:7c:d5:b7:d1:79:3c:94:
         b2:69:eb:61
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUXlp1YnOovORgCtEdA4mqlwiGlYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDMkFEMERDMTM5MjFFMzEwRTFERDFCRjMzQTIyREE5
QkE3NERFMDAeFw0yMzA5MDgwMDE5NTNaFw0yNDA5MDYwMDI0NTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTM2NTUwRjc5ODAxQkRBNEIz
RUI2MkUxMDhENzk0NTU1Nzg3QjczNzc0MTI3Qzk5N0YwRUNGMTlDRUI3M0M5MDky
RDNBMjFEMEQ1QTEwQjMyQjQwRTdGNzQyMjc5MTQ2QTlBRUMyRTk3MkRBNTEyMEU0
RTc5N0I3N0QzRkIzNDI1MTRBREJGODg2QUU1ODAwRURCQ0ZFNjIwQzJEQUMwNDgy
OUE0QUJCNkY4QkQ3ODc4Q0Q0QTVDRDgzNTZBMkYyMjVBMjEzQzhFNjk3MzdCMjE2
NDQ2NDA4NTA3Njg2MkM4Qjc0NEJGNzM2QTVDRDE1NjNEQjdDRjEwREY4MTcyNTUx
NDdGNEJDMDExMjAxNzRERDM1MzUwMzg1NTlFNjQwOEFDOEYyNUIyREQ1NkE1ODU0
RjAzQTdGOEJEN0RFODc5QTREODREMkE1NDg0RkI5MUI5NkU3NUUyQUE1OTcyQkNB
QTc5RjQ2RDVCMTVFMUNGRjQ3RTNBNDE5NkVFOUFBMUI1ODNCMkY0RjNCM0Q4MjhF
MTIyNTM2QzI3QkI0NEE0RDlCMDRBOENCRjYxNDM2NDk5MTExRDQzOUMwMTlGREQ3
QzEzNDI2RDgzRUJEMjhERDQyM0QwQjhGOEQ2RUEyMzg0NzU2MzE3OTE0NUIzMzY2
RkYzNzY5NzIzMUYyRUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA42VQ95gBvaSz62LhCNeUVVeHtzd0EnyZfw7PGc63PJCS06IdDVoQ
sytA5/dCJ5FGqa7C6XLaUSDk55e3fT+zQlFK2/iGrlgA7bz+YgwtrASCmkq7b4vX
h4zUpc2DVqLyJaITyOaXN7IWRGQIUHaGLIt0S/c2pc0VY9t88Q34FyVRR/S8ARIB
dN01NQOFWeZAisjyWy3ValhU8Dp/i9feh5pNhNKlSE+5G5bnXiqllyvKp59G1bFe
HP9H46QZbumqG1g7L087PYKOEiU2wnu0Sk2bBKjL9hQ2SZER1DnAGf3XwTQm2D69
KN1CPQuPjW6iOEdWMXkUWzNm/zdpcjHy7QIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FDUQ4UFDVT3SWoxb+bZKtxY4etu1MB8GA1UdIwQYMBaAFFbCrQ3BOSHjEOHdG/M6
Itqbp03gMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKRFhxVjcxYjdIc1Ra
QnRjRVRaVnJYMTJtZlpyeXVUeHg1dGRBWTV0ZDRiLzAvNTZDMkFEMERDMTM5MjFF
MzEwRTFERDFCRjMzQTIyREE5QkE3NERFMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81NkMyQUQwREMxMzkyMUUzMTBFMUREMUJGMzNBMjJEQTlCQTc0
REUwLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSkRYcVY3MWI3SHNUWkJ0Y0VU
WlZyWDEybWZacnl1VHh4NXRkQVk1dGQ0Yi8wLzMyMzgzMDM0M2EzMzMzNjMzODNh
MzgzMDMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzNDMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAoBDPIgAAwDQYJKoZIhvcNAQELBQADggEBAGnudsFpY65/cbet83bz
6nD9KvxVA87IQbbhJmBYYnLE3A0XblSqAVH+45ZcePFg35BfGWJdyDz1S/3qXHPF
BVlhy4nS/o1KjuOR2N46Kx6pOpUypZN8QEHg2AmPIF+CHRCOUWn/iFMvYIVM5w6K
Z43cOYxeCHQREolzGa3vdA9qssJTraphZH/XrnepfYC7oh8QHeJHnIx6TBtdGsQv
HaiacvaVRo2f9WnHAsXJm7XvstHP1kiZWXId3Y0dyiR3okkyDHw9zeA0lu3lJBtX
V3UwPIB6pbgZSXBL9aLZFcsvdFhp3vVHkWIwMpg5sZA9wFqC6q9dfNW30Xk8lLJp
62E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org