Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a3a2f33322d3332203d3e20323635343137.roa
File:                     323830343a333363383a3a2f33322d3332203d3e20323635343137.roa (raw, json)
Hash identifier:          +XR7LBd8AcPWfD4d1e5IaWOpSnzD89RW7OOUEJMgPis=
Subject key identifier:   AD:3E:18:B2:C6:5C:63:8D:8E:1F:FF:72:D6:7F:55:75:5F:DB:13:AC
Certificate issuer:       /CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
Certificate serial:       1719D4A09842A49A4484AD3B576E3863C3881C59
Authority key identifier: 56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a3a2f33322d3332203d3e20323635343137.roa
Signing time:             Fri 08 Sep 2023 00:24:54 +0000
ROA not before:           Fri 08 Sep 2023 00:19:54 +0000
ROA not after:            Fri 06 Sep 2024 00:24:54 +0000
asID:                     265417
IP address blocks:        2804:33c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:19:d4:a0:98:42:a4:9a:44:84:ad:3b:57:6e:38:63:c3:88:1c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0
        Validity
            Not Before: Sep  8 00:19:54 2023 GMT
            Not After : Sep  6 00:24:54 2024 GMT
        Subject: CN=3082010A0282010100D4B3950359D579B9335095935D248FF8A8FBF7A1ED779228CED5A9DD18436B0C8A09325FE5DD07E43DF6C7551E2C7FD7F1D853F0EFA2C351B96C139B0BCDD4B772F0408F3901CE92CD3140B4497B690684ACB7642B8A3759C65014D6B676B7F318187905752AC9CEF6B9503FA0E3F246F51E379B263F7C0A6A0354B021AA5FDAA83E283DBF26847D2470347544EDF43C54DF637770E1623FDC02996EFFE224948557A99EE170ADBAE970BFE421CBC78C663114AB86CE35BF09E6BE37E80C970E1F42D2D59F2601B6441B60A86A64A37A28BDED8BF013F59A3133C25452660CDE58AC3D4B2FCE39740F94D0A43C110E30C648BA3BF9D2C493CF48E12905F58C590203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:95:03:59:d5:79:b9:33:50:95:93:5d:24:
                    8f:f8:a8:fb:f7:a1:ed:77:92:28:ce:d5:a9:dd:18:
                    43:6b:0c:8a:09:32:5f:e5:dd:07:e4:3d:f6:c7:55:
                    1e:2c:7f:d7:f1:d8:53:f0:ef:a2:c3:51:b9:6c:13:
                    9b:0b:cd:d4:b7:72:f0:40:8f:39:01:ce:92:cd:31:
                    40:b4:49:7b:69:06:84:ac:b7:64:2b:8a:37:59:c6:
                    50:14:d6:b6:76:b7:f3:18:18:79:05:75:2a:c9:ce:
                    f6:b9:50:3f:a0:e3:f2:46:f5:1e:37:9b:26:3f:7c:
                    0a:6a:03:54:b0:21:aa:5f:da:a8:3e:28:3d:bf:26:
                    84:7d:24:70:34:75:44:ed:f4:3c:54:df:63:77:70:
                    e1:62:3f:dc:02:99:6e:ff:e2:24:94:85:57:a9:9e:
                    e1:70:ad:ba:e9:70:bf:e4:21:cb:c7:8c:66:31:14:
                    ab:86:ce:35:bf:09:e6:be:37:e8:0c:97:0e:1f:42:
                    d2:d5:9f:26:01:b6:44:1b:60:a8:6a:64:a3:7a:28:
                    bd:ed:8b:f0:13:f5:9a:31:33:c2:54:52:66:0c:de:
                    58:ac:3d:4b:2f:ce:39:74:0f:94:d0:a4:3c:11:0e:
                    30:c6:48:ba:3b:f9:d2:c4:93:cf:48:e1:29:05:f5:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3E:18:B2:C6:5C:63:8D:8E:1F:FF:72:D6:7F:55:75:5F:DB:13:AC
            X509v3 Authority Key Identifier:
                keyid:56:C2:AD:0D:C1:39:21:E3:10:E1:DD:1B:F3:3A:22:DA:9B:A7:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56C2AD0DC13921E310E1DD1BF33A22DA9BA74DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJDXqV71b7HsTZBtcETZVrX12mfZryuTxx5tdAY5td4b/0/323830343a333363383a3a2f33322d3332203d3e20323635343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:54:81:6f:67:02:3d:5b:09:2c:ee:4b:4c:80:ea:5c:a8:
         c5:59:32:ab:cb:51:be:c6:17:6c:5d:67:e3:f1:f3:f0:42:d5:
         67:ae:e4:67:6d:65:fd:e3:a5:d3:f7:58:3f:15:76:df:69:4b:
         13:f3:8e:e2:8f:81:34:6c:18:cc:86:1b:4f:1e:ba:e7:2c:f3:
         d2:72:ae:bb:74:fe:19:bd:4f:ca:90:b9:99:55:e3:80:cb:09:
         cc:cf:af:3b:6e:be:4e:a5:ca:08:2a:da:1d:c4:75:fe:51:5c:
         3f:ab:d1:bd:11:af:cc:f1:03:94:da:35:d1:d7:4b:37:79:f2:
         c0:20:d1:40:f8:c7:c4:51:1d:ea:b1:2a:35:3c:53:d0:ad:b2:
         ae:48:f7:83:6d:0b:57:e0:1e:3c:25:a7:ef:98:bc:dd:cc:ff:
         3a:89:d0:4e:10:0d:92:99:e3:16:42:98:4a:3f:69:41:22:0c:
         be:20:2d:4e:3b:95:0d:8d:85:b3:0e:d9:9e:3d:31:c1:b9:83:
         e4:78:80:ee:2f:97:bb:17:ec:e2:7b:04:0f:d3:94:0f:d6:f0:
         f2:38:4c:37:44:64:c7:32:2f:8c:80:37:e2:96:22:e8:ca:1f:
         fd:1a:2a:fc:91:23:f7:c3:d2:75:eb:6c:41:fb:f5:d5:e3:53:
         85:c6:85:84
-----BEGIN CERTIFICATE-----
MIIHQjCCBiqgAwIBAgIUFxnUoJhCpJpEhK07V244Y8OIHFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDMkFEMERDMTM5MjFFMzEwRTFERDFCRjMzQTIyREE5
QkE3NERFMDAeFw0yMzA5MDgwMDE5NTRaFw0yNDA5MDYwMDI0NTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDRCMzk1MDM1OUQ1NzlCOTMz
NTA5NTkzNUQyNDhGRjhBOEZCRjdBMUVENzc5MjI4Q0VENUE5REQxODQzNkIwQzhB
MDkzMjVGRTVERDA3RTQzREY2Qzc1NTFFMkM3RkQ3RjFEODUzRjBFRkEyQzM1MUI5
NkMxMzlCMEJDREQ0Qjc3MkYwNDA4RjM5MDFDRTkyQ0QzMTQwQjQ0OTdCNjkwNjg0
QUNCNzY0MkI4QTM3NTlDNjUwMTRENkI2NzZCN0YzMTgxODc5MDU3NTJBQzlDRUY2
Qjk1MDNGQTBFM0YyNDZGNTFFMzc5QjI2M0Y3QzBBNkEwMzU0QjAyMUFBNUZEQUE4
M0UyODNEQkYyNjg0N0QyNDcwMzQ3NTQ0RURGNDNDNTRERjYzNzc3MEUxNjIzRkRD
MDI5OTZFRkZFMjI0OTQ4NTU3QTk5RUUxNzBBREJBRTk3MEJGRTQyMUNCQzc4QzY2
MzExNEFCODZDRTM1QkYwOUU2QkUzN0U4MEM5NzBFMUY0MkQyRDU5RjI2MDFCNjQ0
MUI2MEE4NkE2NEEzN0EyOEJERUQ4QkYwMTNGNTlBMzEzM0MyNTQ1MjY2MENERTU4
QUMzRDRCMkZDRTM5NzQwRjk0RDBBNDNDMTEwRTMwQzY0OEJBM0JGOUQyQzQ5M0NG
NDhFMTI5MDVGNThDNTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1LOVA1nVebkzUJWTXSSP+Kj796Htd5IoztWp3RhDawyKCTJf5d0H
5D32x1UeLH/X8dhT8O+iw1G5bBObC83Ut3LwQI85Ac6SzTFAtEl7aQaErLdkK4o3
WcZQFNa2drfzGBh5BXUqyc72uVA/oOPyRvUeN5smP3wKagNUsCGqX9qoPig9vyaE
fSRwNHVE7fQ8VN9jd3DhYj/cAplu/+IklIVXqZ7hcK266XC/5CHLx4xmMRSrhs41
vwnmvjfoDJcOH0LS1Z8mAbZEG2CoamSjeii97YvwE/WaMTPCVFJmDN5YrD1LL845
dA+U0KQ8EQ4wxki6O/nSxJPPSOEpBfWMWQIDAQABo4ICUDCCAkwwHQYDVR0OBBYE
FK0+GLLGXGONjh//ctZ/VXVf2xOsMB8GA1UdIwQYMBaAFFbCrQ3BOSHjEOHdG/M6
Itqbp03gMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NKRFhxVjcxYjdIc1Ra
QnRjRVRaVnJYMTJtZlpyeXVUeHg1dGRBWTV0ZDRiLzAvNTZDMkFEMERDMTM5MjFF
MzEwRTFERDFCRjMzQTIyREE5QkE3NERFMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81NkMyQUQwREMxMzkyMUUzMTBFMUREMUJGMzNBMjJEQTlCQTc0
REUwLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DSkRYcVY3MWI3SHNUWkJ0Y0VU
WlZyWDEybWZacnl1VHh4NXRkQVk1dGQ0Yi8wLzMyMzgzMDM0M2EzMzMzNjMzODNh
M2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMyMzYzNTM0MzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgE
M8gwDQYJKoZIhvcNAQELBQADggEBAEfSVIFvZwI9Wwks7ktMgOpcqMVZMqvLUb7G
F2xdZ+Px8/BC1Weu5GdtZf3jpdP3WD8Vdt9pSxPzjuKPgTRsGMyGG08euucs89Jy
rrt0/hm9T8qQuZlV44DLCczPrztuvk6lyggq2h3Edf5RXD+r0b0Rr8zxA5TaNdHX
Szd58sAg0UD4x8RRHeqxKjU8U9Ctsq5I94NtC1fgHjwlp++YvN3M/zqJ0E4QDZKZ
4xZCmEo/aUEiDL4gLU47lQ2NhbMO2Z49McG5g+R4gO4vl7sX7OJ7BA/TlA/W8PI4
TDdEZMcyL4yAN+KWIujKH/0aKvyRI/fD0nXrbEH79dXjU4XGhYQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org