Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33342d3334203d3e20323731353939.roa
File:                     323830343a376530633a383030303a3a2f33342d3334203d3e20323731353939.roa (raw, json)
Hash identifier:          mDblUJyS7TctdgPHK/ZgItO8+YqxugiLcezp4tIsjSQ=
Subject key identifier:   BD:14:6F:EB:A7:35:F9:11:D9:3E:4D:3F:FD:93:F9:BA:00:82:61:CC
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       0482272028D04DE6DAADD05C65E29C7670BCFAC0
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33342d3334203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:47:09 +0000
ROA not before:           Mon 21 Aug 2023 21:42:09 +0000
ROA not after:            Mon 19 Aug 2024 21:47:09 +0000
asID:                     271599
IP address blocks:        2804:7e0c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:82:27:20:28:d0:4d:e6:da:ad:d0:5c:65:e2:9c:76:70:bc:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:42:09 2023 GMT
            Not After : Aug 19 21:47:09 2024 GMT
        Subject: CN=BD146FEBA735F911D93E4D3FFD93F9BA008261CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:dc:2a:02:4d:ab:1b:c2:49:44:e8:b0:2d:
                    17:c6:20:78:5d:20:ac:ed:a6:24:64:c4:bc:41:73:
                    28:a2:06:12:eb:be:1f:40:04:b9:54:06:d0:dc:b3:
                    c3:8e:18:b0:75:27:f7:f9:19:b8:42:84:ad:c2:cf:
                    9c:96:38:d5:d8:77:90:53:61:27:e9:42:2a:60:41:
                    cf:e5:a1:80:79:46:32:6d:4a:c5:4b:15:95:e7:39:
                    d3:2a:86:47:ea:07:70:38:71:ca:dd:da:55:fe:78:
                    0e:59:95:6d:9d:9d:50:21:1a:ee:ab:d7:78:6f:56:
                    9e:88:b7:25:7d:a5:da:69:b6:a3:5e:ab:c1:4e:fb:
                    ec:7c:6b:91:71:1c:83:0a:aa:78:3e:4e:ff:1e:67:
                    69:9c:dc:b0:cf:e2:bb:0b:17:09:e1:d4:ca:72:b1:
                    6b:84:b7:50:fc:8c:70:a7:36:6f:92:94:d0:26:85:
                    ac:a2:42:b3:ee:21:9e:22:8a:e7:16:9c:c3:f6:37:
                    89:a5:29:59:1a:b2:4c:ae:e1:fc:ed:bf:4c:ec:73:
                    03:04:2e:33:a8:49:9b:0e:d2:54:77:f0:4b:db:91:
                    cb:ff:c1:a4:e8:72:6e:be:64:ec:de:40:1f:f8:f0:
                    a8:7d:34:79:e0:63:b7:79:5e:3d:e7:55:80:88:d9:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:14:6F:EB:A7:35:F9:11:D9:3E:4D:3F:FD:93:F9:BA:00:82:61:CC
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a383030303a3a2f33342d3334203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         96:4c:af:6e:45:a1:cc:65:c7:c5:77:3f:5c:49:2c:8f:62:5d:
         8f:74:79:79:21:0e:11:05:60:26:b6:47:4a:c5:8c:86:bb:b3:
         ed:6a:53:ca:e3:e3:a5:0c:1a:06:a7:1f:e4:80:46:a0:6f:f6:
         ca:3a:f1:7d:83:41:5e:62:92:df:57:23:57:66:89:71:eb:51:
         44:f3:85:1f:42:5e:59:83:f7:fb:d4:dc:ba:e0:c7:7d:61:01:
         cd:ff:1b:97:6c:db:ac:89:4d:f0:a6:2e:77:43:bd:e1:03:9a:
         9f:9f:33:75:f9:16:a3:cf:39:f6:11:87:df:b8:da:9c:9b:63:
         19:ba:22:87:5c:ee:f1:d7:c0:74:dd:a5:aa:a4:b1:b2:8f:5a:
         46:16:13:a4:34:fc:23:bc:37:ef:eb:22:23:a8:24:04:c3:a5:
         11:b6:24:a0:f2:81:1c:12:ae:42:b3:95:a8:a5:33:a1:3b:1d:
         06:be:5a:91:f4:45:4e:80:c1:df:ff:74:8a:0e:82:b6:04:5e:
         e1:15:10:07:66:ee:53:c1:3c:10:f2:26:40:a8:cb:99:0c:1f:
         21:30:96:52:4e:d1:46:ac:7a:69:65:be:b4:17:f6:f7:af:be:
         ba:dd:36:d3:59:14:90:1f:94:60:23:75:43:f9:a3:6b:cb:f1:
         49:06:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org