Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a383130303a3a2f34382d3438203d3e20323635343137.roa
File:                     323830343a333363383a383130303a3a2f34382d3438203d3e20323635343137.roa (raw, json)
Hash identifier:          Jsjsf/TiGniCW2bjp90TFUmCZkf0b4YWCq3DNPVNstA=
Subject key identifier:   41:AB:1C:53:35:9A:56:C9:C8:E6:37:41:B8:77:CC:CC:D4:F1:AD:7D
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       4003F02C4EBCA12312F56A857BD0BBD903E818EC
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a383130303a3a2f34382d3438203d3e20323635343137.roa
Signing time:             Fri 08 Sep 2023 00:24:54 +0000
ROA not before:           Fri 08 Sep 2023 00:19:54 +0000
ROA not after:            Fri 06 Sep 2024 00:24:54 +0000
asID:                     265417
IP address blocks:        2804:33c8:8100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:03:f0:2c:4e:bc:a1:23:12:f5:6a:85:7b:d0:bb:d9:03:e8:18:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Sep  8 00:19:54 2023 GMT
            Not After : Sep  6 00:24:54 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:4d:a6:fc:e6:db:53:b7:9e:a9:5e:d1:74:
                    66:6a:99:82:a9:e2:78:17:2b:b3:aa:7c:25:94:a2:
                    01:8e:12:6a:b9:1d:bc:47:59:2f:bc:21:26:1d:7a:
                    e2:bb:99:50:6f:84:d6:ff:e4:3e:c9:35:13:3e:2d:
                    c7:f4:33:86:15:eb:91:f1:3b:b2:24:b7:d7:b4:23:
                    b0:78:68:51:8e:9c:ab:ea:9c:a8:29:91:a7:4c:69:
                    af:fd:2e:59:bc:80:9b:92:3d:7b:41:da:33:e9:51:
                    fb:27:4d:fe:3a:95:a1:26:1e:fc:0c:c2:7f:79:ab:
                    2d:16:67:ff:63:73:b5:6c:5a:fd:7e:79:ae:74:3e:
                    10:83:91:da:f1:90:cf:6d:db:7c:68:f2:cd:72:3f:
                    99:2a:51:c5:05:9c:c3:78:14:1d:d9:23:af:e7:62:
                    1f:8c:fa:1f:5b:3d:f7:c9:8a:67:96:83:7d:7d:a8:
                    c8:9f:79:94:3a:d2:4d:09:53:bb:20:72:b4:53:2c:
                    dd:3b:ce:64:00:0d:fd:77:5d:3b:31:4d:26:ab:f7:
                    1f:57:a6:f2:e6:ca:10:fd:a9:ed:c7:52:1a:66:c9:
                    ab:10:29:4a:3a:6b:30:02:d5:83:80:25:92:b7:2a:
                    80:51:eb:e2:d5:31:b7:57:d6:cd:fe:43:5e:46:73:
                    af:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AB:1C:53:35:9A:56:C9:C8:E6:37:41:B8:77:CC:CC:D4:F1:AD:7D
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a383130303a3a2f34382d3438203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33c8:8100::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:97:64:23:70:4b:9e:96:bc:b1:2d:47:b1:49:37:46:c2:
         92:ff:5c:5b:a2:e4:a9:a2:e1:77:95:b1:78:f9:25:09:b1:33:
         b4:e5:6b:95:a8:8c:e3:60:e5:8f:5a:c4:13:d9:92:a7:50:5d:
         e2:be:36:50:62:6a:82:20:23:0d:b5:fb:f0:db:b2:02:6e:14:
         df:97:dd:e7:14:0e:d2:e8:9d:1c:c8:0c:10:46:68:bc:7e:38:
         b1:3b:fb:40:f6:34:32:bd:12:f1:06:73:e7:95:78:a6:41:8e:
         d6:c2:89:14:9c:eb:02:93:5c:d1:a7:a2:19:ea:30:2b:2c:dd:
         17:6f:26:c4:ec:0a:0a:92:54:98:d6:52:af:f6:10:a8:18:4e:
         b6:3d:24:54:4f:ca:e0:38:24:c1:6c:3a:ad:11:50:37:c7:fe:
         5a:27:de:66:d2:cc:02:cd:ad:2c:af:b3:3c:a1:11:cf:1d:0d:
         38:56:9c:b2:cf:d6:72:50:db:20:c4:91:c0:97:20:e9:04:db:
         af:80:ae:25:a3:75:f4:6b:95:13:57:76:dd:16:ce:de:c7:5c:
         66:13:ff:26:25:3d:28:6c:36:d8:d0:76:93:34:d1:48:ed:25:
         14:21:2a:f1:1c:4e:cf:7e:22:c4:54:6b:d8:6f:36:63:22:55:
         72:d2:4b:4a
-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIUQAPwLE68oSMS9WqFe9C72QPoGOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDMkFEMERDMTM5MjFFMzEwRTFERDFCRjMzQTIyREE5
QkE3NERFMDAeFw0yMzA5MDgwMDE5NTRaFw0yNDA5MDYwMDI0NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTUxNjREQTZGQ0U2REI1M0I3
OUVBOTVFRDE3NDY2NkE5OTgyQTlFMjc4MTcyQkIzQUE3QzI1OTRBMjAxOEUxMjZB
QjkxREJDNDc1OTJGQkMyMTI2MUQ3QUUyQkI5OTUwNkY4NEQ2RkZFNDNFQzkzNTEz
M0UyREM3RjQzMzg2MTVFQjkxRjEzQkIyMjRCN0Q3QjQyM0IwNzg2ODUxOEU5Q0FC
RUE5Q0E4Mjk5MUE3NEM2OUFGRkQyRTU5QkM4MDlCOTIzRDdCNDFEQTMzRTk1MUZC
Mjc0REZFM0E5NUExMjYxRUZDMENDMjdGNzlBQjJEMTY2N0ZGNjM3M0I1NkM1QUZE
N0U3OUFFNzQzRTEwODM5MURBRjE5MENGNkREQjdDNjhGMkNENzIzRjk5MkE1MUM1
MDU5Q0MzNzgxNDFERDkyM0FGRTc2MjFGOENGQTFGNUIzREY3Qzk4QTY3OTY4MzdE
N0RBOEM4OUY3OTk0M0FEMjREMDk1M0JCMjA3MkI0NTMyQ0REM0JDRTY0MDAwREZE
Nzc1RDNCMzE0RDI2QUJGNzFGNTdBNkYyRTZDQTEwRkRBOUVEQzc1MjFBNjZDOUFC
MTAyOTRBM0E2QjMwMDJENTgzODAyNTkyQjcyQTgwNTFFQkUyRDUzMUI3NTdENkNE
RkU0MzVFNDY3M0FGMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5RZNpvzm21O3nqle0XRmapmCqeJ4FyuzqnwllKIBjhJquR28R1kv
vCEmHXriu5lQb4TW/+Q+yTUTPi3H9DOGFeuR8TuyJLfXtCOweGhRjpyr6pyoKZGn
TGmv/S5ZvICbkj17Qdoz6VH7J03+OpWhJh78DMJ/eastFmf/Y3O1bFr9fnmudD4Q
g5Ha8ZDPbdt8aPLNcj+ZKlHFBZzDeBQd2SOv52IfjPofWz33yYpnloN9fajIn3mU
OtJNCVO7IHK0UyzdO85kAA39d107MU0mq/cfV6by5soQ/antx1IaZsmrEClKOmsw
AtWDgCWStyqAUevi1TG3V9bN/kNeRnOvDQIDAQABo4ICXDCCAlgwHQYDVR0OBBYE
FEGrHFM1mlbJyOY3Qbh3zMzU8a19MB8GA1UdIwQYMBaAFFbCrQ3BOSHjEOHdG/M6
Itqbp03gMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKRFhxVjcxYjdIc1Ra
QnRjRVRaVnJYMTJtZlpyeXVUeHg1dGRBWTV0ZDRiLzAvNTZDMkFEMERDMTM5MjFF
MzEwRTFERDFCRjMzQTIyREE5QkE3NERFMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81NkMyQUQwREMxMzkyMUUzMTBFMUREMUJGMzNBMjJEQTlCQTc0
REUwLmNlcjCBtgYIKwYBBQUHAQsEgakwgaYwgaMGCCsGAQUFBzALhoGWcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSkRYcVY3MWI3SHNUWkJ0Y0VU
WlZyWDEybWZacnl1VHh4NXRkQVk1dGQ0Yi8wLzMyMzgzMDM0M2EzMzMzNjMzODNh
MzgzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzUzNDMxMzcucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAoBDPIgQAwDQYJKoZIhvcNAQELBQADggEBAEDQl2QjcEuelryxLUex
STdGwpL/XFui5Kmi4XeVsXj5JQmxM7Tla5WojONg5Y9axBPZkqdQXeK+NlBiaoIg
Iw21+/DbsgJuFN+X3ecUDtLonRzIDBBGaLx+OLE7+0D2NDK9EvEGc+eVeKZBjtbC
iRSc6wKTXNGnohnqMCss3RdvJsTsCgqSVJjWUq/2EKgYTrY9JFRPyuA4JMFsOq0R
UDfH/lon3mbSzALNrSyvszyhEc8dDThWnLLP1nJQ2yDEkcCXIOkE26+AriWjdfRr
lRNXdt0Wzt7HXGYT/yYlPShsNtjQdpM00UjtJRQhKvEcTs9+IsRUa9hvNmMiVXLS
S0o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org