Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a323030303a3a2f33352d3335203d3e20323731353939.roa
File:                     323830343a376530633a323030303a3a2f33352d3335203d3e20323731353939.roa (raw, json)
Hash identifier:          mE/RBXQ0W6HhFY+47R2Xtk9KP5qUWbhi0V1gJQG74WM=
Subject key identifier:   30:B4:0B:BB:5C:4F:FA:BC:42:CE:6A:C5:44:D4:4C:EE:0D:8F:39:B4
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       4EE21CF4E235FD8D170E21935B0E5B4BFC848FC9
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a323030303a3a2f33352d3335203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:47:02 +0000
ROA not before:           Mon 21 Aug 2023 21:42:02 +0000
ROA not after:            Mon 19 Aug 2024 21:47:02 +0000
asID:                     271599
IP address blocks:        2804:7e0c:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e2:1c:f4:e2:35:fd:8d:17:0e:21:93:5b:0e:5b:4b:fc:84:8f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:42:02 2023 GMT
            Not After : Aug 19 21:47:02 2024 GMT
        Subject: CN=30B40BBB5C4FFABC42CE6AC544D44CEE0D8F39B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:45:37:61:f2:5e:91:29:b8:79:0a:ba:50:
                    7b:13:80:15:dc:ea:30:62:4e:ef:2b:f1:e5:e5:07:
                    ca:8a:2e:61:0a:d1:f4:e6:5e:db:df:de:21:f6:f8:
                    82:94:b0:95:32:df:33:fb:f7:56:36:9b:4e:1d:eb:
                    2c:6c:c1:ce:89:ff:58:5c:18:9f:82:38:15:ec:20:
                    27:3b:82:10:5b:01:b4:e5:9f:8f:46:49:d6:85:b0:
                    45:6b:a9:2e:0f:f5:98:ea:c3:77:94:cc:68:92:70:
                    78:4f:e0:01:a5:f9:5c:0c:6d:ac:86:d2:ac:71:a3:
                    6c:03:fa:c1:e9:6c:a2:86:de:a0:71:68:78:33:72:
                    6f:79:dd:86:fa:30:05:2c:20:6e:9c:ad:96:a9:b4:
                    01:8b:4c:ea:e0:34:a7:5a:c1:3a:da:db:6f:b3:17:
                    bb:5a:81:90:ba:7f:ed:50:b5:e2:86:ec:25:c3:8d:
                    fa:43:c4:0e:63:46:4f:d5:23:86:c4:08:de:d4:ec:
                    a4:a8:c3:bd:27:b2:70:0f:5c:54:a6:72:1b:e2:cc:
                    be:1c:e2:77:f2:56:f6:31:ca:99:97:18:17:3b:f0:
                    7a:ea:a0:df:1a:d8:9d:81:3d:9e:be:95:aa:a0:99:
                    11:54:29:d9:ee:b0:31:24:3e:df:38:fa:de:9f:f6:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B4:0B:BB:5C:4F:FA:BC:42:CE:6A:C5:44:D4:4C:EE:0D:8F:39:B4
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a323030303a3a2f33352d3335203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         68:e2:5f:e7:e6:ec:97:81:3c:ae:bb:1a:05:21:68:0b:82:e5:
         62:92:ad:cb:96:20:d4:0e:5c:73:26:02:45:6e:68:08:b0:24:
         ab:bb:f3:71:13:52:e4:57:c4:e8:c7:8e:40:96:d1:e4:aa:5d:
         3a:6f:e6:73:5a:db:1e:40:e7:5f:46:69:aa:31:4b:27:00:4a:
         6e:58:50:20:d0:55:46:0c:73:dc:41:fa:22:50:43:df:32:cc:
         d7:f8:27:f8:fd:c6:9d:d2:df:ee:56:20:b4:7a:bd:68:b2:b2:
         fa:e3:6a:87:08:59:17:52:76:94:73:8d:d0:73:a3:6e:13:df:
         06:9a:05:11:6a:f7:b9:b4:72:8a:e8:f8:4b:5b:dd:9b:63:0e:
         45:e1:9a:2e:7a:87:69:98:d0:bc:37:f8:6c:b2:95:36:bc:06:
         a3:8f:45:d9:7c:9c:6a:c6:3b:9c:48:73:04:a7:5d:b6:42:5d:
         b8:a5:02:36:a0:4c:91:ab:44:3d:59:0d:f3:0e:c6:65:79:47:
         a9:dc:88:dc:d1:20:0e:c5:83:38:e8:68:63:07:34:65:a5:8a:
         c1:71:1b:57:bb:09:5c:c6:e4:75:7f:c8:41:b8:b4:73:72:23:
         f1:81:e1:f2:59:42:fa:6b:fc:fd:57:e0:87:6b:16:3b:e4:1c:
         08:e9:7d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org