Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33332d3333203d3e20323637313238.roa
File:                     323830343a343838633a3a2f33332d3333203d3e20323637313238.roa (raw, json)
Hash identifier:          OMz8fOvyf5ZtG2yy74VJ1xVhgIeppnniwM25NUP+wkQ=
Subject key identifier:   2C:08:D9:E4:0B:D1:60:F2:9B:92:4E:EF:F9:1F:38:38:A9:CD:53:0C
Certificate issuer:       /CN=F53D745990071B2CCEF5F48CBFA053605498A66A
Certificate serial:       54B7F9D81B2882B4982510742E98C4253DB932A0
Authority key identifier: F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33332d3333203d3e20323637313238.roa
Signing time:             Tue 05 Dec 2023 14:00:00 +0000
ROA not before:           Tue 05 Dec 2023 13:55:00 +0000
ROA not after:            Tue 03 Dec 2024 14:00:00 +0000
asID:                     267128
IP address blocks:        2804:488c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b7:f9:d8:1b:28:82:b4:98:25:10:74:2e:98:c4:25:3d:b9:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F53D745990071B2CCEF5F48CBFA053605498A66A
        Validity
            Not Before: Dec  5 13:55:00 2023 GMT
            Not After : Dec  3 14:00:00 2024 GMT
        Subject: CN=3082010A0282010100CC5E4ACD176E64B4F36279F8F49C58E74C69B3990FD454C48BE589F924F1D5861078E2750F4BFC98E604505CA91A23FFEA8E8E619D4C3C06C1843537746DD4D0FBB75336C989B0CF7C0704E53DC464ACDD2E7E3DF74DDD2D709859E0A3F3D4BCE1E055F7E1E68BC20FBFE82F57606604987804F9948E2C07C4CDFF14E3FDFBEEB91F94C3A2BA55949CF909F365F0A738F11D76D53944BC02E4CDC5A26FB580DC847B9C99433C6B9440345A2D07B56113BBDB44565807572916D0776CB83E8A9C1B1A723D84DB120869E7F3E5092290226F66B7A3BBDB9CB84A80308B21E71EE553C2FFD835695592E6C2AAAAEB37C8ACE938D9F36210414E7237328DAF06EA030203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:4a:cd:17:6e:64:b4:f3:62:79:f8:f4:9c:
                    58:e7:4c:69:b3:99:0f:d4:54:c4:8b:e5:89:f9:24:
                    f1:d5:86:10:78:e2:75:0f:4b:fc:98:e6:04:50:5c:
                    a9:1a:23:ff:ea:8e:8e:61:9d:4c:3c:06:c1:84:35:
                    37:74:6d:d4:d0:fb:b7:53:36:c9:89:b0:cf:7c:07:
                    04:e5:3d:c4:64:ac:dd:2e:7e:3d:f7:4d:dd:2d:70:
                    98:59:e0:a3:f3:d4:bc:e1:e0:55:f7:e1:e6:8b:c2:
                    0f:bf:e8:2f:57:60:66:04:98:78:04:f9:94:8e:2c:
                    07:c4:cd:ff:14:e3:fd:fb:ee:b9:1f:94:c3:a2:ba:
                    55:94:9c:f9:09:f3:65:f0:a7:38:f1:1d:76:d5:39:
                    44:bc:02:e4:cd:c5:a2:6f:b5:80:dc:84:7b:9c:99:
                    43:3c:6b:94:40:34:5a:2d:07:b5:61:13:bb:db:44:
                    56:58:07:57:29:16:d0:77:6c:b8:3e:8a:9c:1b:1a:
                    72:3d:84:db:12:08:69:e7:f3:e5:09:22:90:22:6f:
                    66:b7:a3:bb:db:9c:b8:4a:80:30:8b:21:e7:1e:e5:
                    53:c2:ff:d8:35:69:55:92:e6:c2:aa:aa:eb:37:c8:
                    ac:e9:38:d9:f3:62:10:41:4e:72:37:32:8d:af:06:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:08:D9:E4:0B:D1:60:F2:9B:92:4E:EF:F9:1F:38:38:A9:CD:53:0C
            X509v3 Authority Key Identifier:
                keyid:F5:3D:74:59:90:07:1B:2C:CE:F5:F4:8C:BF:A0:53:60:54:98:A6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/F53D745990071B2CCEF5F48CBFA053605498A66A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F53D745990071B2CCEF5F48CBFA053605498A66A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/323830343a343838633a3a2f33332d3333203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:488c::/33

    Signature Algorithm: sha256WithRSAEncryption
         ab:2b:e3:7c:09:9b:60:5b:65:ac:49:22:95:12:5d:9c:b7:54:
         d5:ee:3b:c4:5d:75:0e:cc:f9:4a:d7:93:d6:1a:04:89:46:ae:
         b9:25:8d:e2:67:f5:27:3e:27:69:11:59:b8:43:64:a1:57:c4:
         22:3f:dd:5d:cc:19:a7:5c:22:e7:40:12:59:8a:23:1e:27:1d:
         c5:ed:c5:c5:9c:15:cd:7e:b5:ff:07:7e:ad:95:cc:13:f2:fd:
         d3:4c:28:8b:8a:86:3c:06:97:11:10:5a:fa:c4:e3:46:3c:9c:
         de:c7:c3:f3:b0:e4:de:52:ab:80:e9:f1:47:81:3f:b8:a5:6e:
         4c:83:75:28:bd:59:b4:cd:ff:8d:71:d4:dc:1f:16:7a:a1:89:
         ab:9f:18:49:97:37:71:27:bb:f0:75:d6:ca:63:b2:a8:10:d8:
         ca:49:f6:4c:1f:27:20:4f:c2:2d:d7:86:c6:fb:a6:85:2f:eb:
         d4:73:ef:df:48:e8:8a:6d:99:04:7d:26:0e:e2:d3:2a:f1:e9:
         74:d0:4b:0d:14:dd:7e:2c:52:02:b2:32:9b:81:95:5c:30:5c:
         7f:6e:56:d8:d0:c1:cc:e3:f0:06:b2:21:24:2f:ab:82:a7:11:
         2e:3c:56:76:cc:93:9f:7a:12:19:a3:5c:84:89:39:89:f1:32:
         a9:16:01:82
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUVLf52BsogrSYJRB0LpjEJT25MqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUzRDc0NTk5MDA3MUIyQ0NFRjVGNDhDQkZBMDUzNjA1
NDk4QTY2QTAeFw0yMzEyMDUxMzU1MDBaFw0yNDEyMDMxNDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M1RTRBQ0QxNzZFNjRCNEYz
NjI3OUY4RjQ5QzU4RTc0QzY5QjM5OTBGRDQ1NEM0OEJFNTg5RjkyNEYxRDU4NjEw
NzhFMjc1MEY0QkZDOThFNjA0NTA1Q0E5MUEyM0ZGRUE4RThFNjE5RDRDM0MwNkMx
ODQzNTM3NzQ2REQ0RDBGQkI3NTMzNkM5ODlCMENGN0MwNzA0RTUzREM0NjRBQ0RE
MkU3RTNERjc0REREMkQ3MDk4NTlFMEEzRjNENEJDRTFFMDU1RjdFMUU2OEJDMjBG
QkZFODJGNTc2MDY2MDQ5ODc4MDRGOTk0OEUyQzA3QzRDREZGMTRFM0ZERkJFRUI5
MUY5NEMzQTJCQTU1OTQ5Q0Y5MDlGMzY1RjBBNzM4RjExRDc2RDUzOTQ0QkMwMkU0
Q0RDNUEyNkZCNTgwREM4NDdCOUM5OTQzM0M2Qjk0NDAzNDVBMkQwN0I1NjExM0JC
REI0NDU2NTgwNzU3MjkxNkQwNzc2Q0I4M0U4QTlDMUIxQTcyM0Q4NERCMTIwODY5
RTdGM0U1MDkyMjkwMjI2RjY2QjdBM0JCREI5Q0I4NEE4MDMwOEIyMUU3MUVFNTUz
QzJGRkQ4MzU2OTU1OTJFNkMyQUFBQUVCMzdDOEFDRTkzOEQ5RjM2MjEwNDE0RTcy
MzczMjhEQUYwNkVBMDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzF5KzRduZLTzYnn49JxY50xps5kP1FTEi+WJ+STx1YYQeOJ1D0v8
mOYEUFypGiP/6o6OYZ1MPAbBhDU3dG3U0Pu3UzbJibDPfAcE5T3EZKzdLn49903d
LXCYWeCj89S84eBV9+Hmi8IPv+gvV2BmBJh4BPmUjiwHxM3/FOP9++65H5TDorpV
lJz5CfNl8Kc48R121TlEvALkzcWib7WA3IR7nJlDPGuUQDRaLQe1YRO720RWWAdX
KRbQd2y4PoqcGxpyPYTbEghp5/PlCSKQIm9mt6O725y4SoAwiyHnHuVTwv/YNWlV
kubCqqrrN8is6TjZ82IQQU5yNzKNrwbqAwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCwI2eQL0WDym5JO7/kfODipzVMMMB8GA1UdIwQYMBaAFPU9dFmQBxsszvX0jL+g
U2BUmKZqMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0N6Rm1nWUsyWlZ0c1do
NHdOWVA1ZEpLdm9YQnh6RDlOcm5OdnhIMm9UWmZrLzAvRjUzRDc0NTk5MDA3MUIy
Q0NFRjVGNDhDQkZBMDUzNjA1NDk4QTY2QS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GNTNENzQ1OTkwMDcxQjJDQ0VGNUY0OENCRkEwNTM2MDU0OThB
NjZBLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DekZtZ1lLMlpWdHNXaDR3TllQ
NWRKS3ZvWEJ4ekQ5TnJuTnZ4SDJvVFpmay8wLzMyMzgzMDM0M2EzNDM4Mzg2MzNh
M2EyZjMzMzMyZDMzMzMyMDNkM2UyMDMyMzYzNzMxMzIzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygE
SIwAMA0GCSqGSIb3DQEBCwUAA4IBAQCrK+N8CZtgW2WsSSKVEl2ct1TV7jvEXXUO
zPlK15PWGgSJRq65JY3iZ/UnPidpEVm4Q2ShV8QiP91dzBmnXCLnQBJZiiMeJx3F
7cXFnBXNfrX/B36tlcwT8v3TTCiLioY8BpcREFr6xONGPJzex8PzsOTeUquA6fFH
gT+4pW5Mg3UovVm0zf+NcdTcHxZ6oYmrnxhJlzdxJ7vwddbKY7KoENjKSfZMHycg
T8It14bG+6aFL+vUc+/fSOiKbZkEfSYO4tMq8el00EsNFN1+LFICsjKbgZVcMFx/
blbY0MHM4/AGsiEkL6uCpxEuPFZ2zJOfehIZo1yEiTmJ8TKpFgGC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org