Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a343030303a3a2f33342d3334203d3e20323731353939.roa
File:                     323830343a376530633a343030303a3a2f33342d3334203d3e20323731353939.roa (raw, json)
Hash identifier:          fEczewOH7/nHezOvYBE2SmKyhLg7+3XZyC8MtUiCkxY=
Subject key identifier:   7B:A2:9A:D5:71:51:E4:49:ED:40:D9:07:17:CD:65:37:3B:7D:CA:22
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       69D56382D803553D1CDE4E2E911D093CE708F2A7
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a343030303a3a2f33342d3334203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:47:04 +0000
ROA not before:           Mon 21 Aug 2023 21:42:04 +0000
ROA not after:            Mon 19 Aug 2024 21:47:04 +0000
asID:                     271599
IP address blocks:        2804:7e0c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d5:63:82:d8:03:55:3d:1c:de:4e:2e:91:1d:09:3c:e7:08:f2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:42:04 2023 GMT
            Not After : Aug 19 21:47:04 2024 GMT
        Subject: CN=7BA29AD57151E449ED40D90717CD65373B7DCA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:50:b3:3b:98:05:64:cc:ec:08:02:50:3a:
                    50:ca:0c:78:c2:de:b9:72:5e:bf:29:ae:cf:66:85:
                    a4:e4:b3:ec:53:ac:c1:ec:e6:04:c2:9c:55:e7:4e:
                    83:51:f4:70:c2:33:fc:d9:83:cd:f1:a3:65:9b:28:
                    22:c5:a7:6b:e1:e2:cb:49:1c:37:e4:e3:4f:05:cd:
                    07:df:8e:ce:58:14:0b:61:65:d3:80:82:f8:90:c7:
                    5b:d3:d6:17:9b:98:30:15:a8:62:4c:52:50:c2:a0:
                    de:71:2c:99:38:73:ce:56:29:ce:21:ad:d5:88:e0:
                    61:74:2b:2b:eb:7f:2d:94:78:66:dd:2d:61:5b:02:
                    bc:3c:6d:8b:ae:37:12:e8:c7:ad:f1:ea:8a:93:60:
                    04:f1:69:20:87:67:84:54:48:e1:5f:a7:de:85:5f:
                    c8:d8:23:fe:29:0e:94:13:b9:90:e0:ab:d6:55:61:
                    e2:3b:ef:4a:db:98:aa:01:cd:3f:7f:4c:24:e9:b6:
                    11:99:68:ca:d2:33:56:bf:ed:4d:b6:ce:0a:9c:b6:
                    d5:0f:9e:3d:20:19:61:5c:1e:fe:a1:0e:86:71:45:
                    34:e8:fe:31:ed:c8:b4:3e:31:a7:b8:34:38:36:b8:
                    f2:ff:85:17:20:29:0f:9f:ba:69:15:79:42:63:5e:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:9A:D5:71:51:E4:49:ED:40:D9:07:17:CD:65:37:3B:7D:CA:22
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a343030303a3a2f33342d3334203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:4b:61:ad:3f:47:8b:06:71:13:ef:53:79:e6:fc:ce:c5:
         d9:61:e8:32:8f:de:5b:f9:5b:b5:52:0a:97:ed:8c:0e:97:4c:
         0b:32:06:6c:fd:33:88:95:96:bb:2a:7f:25:69:6f:83:6b:b4:
         3c:4d:62:23:f8:ba:26:ce:28:b7:77:5c:d5:6f:8a:fb:21:12:
         13:f0:1b:6e:83:a8:07:10:8f:82:71:7b:8c:15:89:73:90:46:
         cb:b1:0e:93:f5:15:e7:6c:c8:21:ae:dc:5d:4f:f9:7f:e4:3b:
         ae:fb:5a:9c:52:5a:14:08:ad:9f:7c:84:99:06:1f:a6:e8:be:
         92:52:48:e9:fd:38:92:e6:a8:fa:7e:5c:5d:48:63:49:a8:04:
         38:9c:77:ba:25:a4:aa:af:af:4a:75:72:2f:1e:df:a1:22:d4:
         c3:a9:68:aa:fe:b5:22:bb:dc:78:30:19:d2:8e:39:f6:e5:86:
         62:6e:b5:1b:0a:7b:e5:88:2d:30:85:d4:95:a7:e3:14:c1:11:
         97:b1:45:47:43:37:3b:c0:62:39:c1:13:ff:0e:4c:5d:60:b6:
         3a:5a:62:65:c7:73:b5:df:1b:59:5d:d5:4c:a4:c4:7e:38:17:
         a5:a4:2f:35:bb:55:70:e0:74:6c:1b:47:24:8f:cc:af:34:ca:
         f6:0e:74:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org