Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a613030303a3a2f33352d3335203d3e20323731353939.roa
File:                     323830343a376530633a613030303a3a2f33352d3335203d3e20323731353939.roa (raw, json)
Hash identifier:          ET3BSsvqDYnxgog/Am3SGohDftGty9MACUmE/yTOUyk=
Subject key identifier:   07:BE:F9:CB:04:70:33:76:9E:46:C0:F9:EF:71:E4:7F:D3:29:2D:F4
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       098EED21FE24F56C51A9F4E3B680A668884C73B6
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a613030303a3a2f33352d3335203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:47:13 +0000
ROA not before:           Mon 21 Aug 2023 21:42:13 +0000
ROA not after:            Mon 19 Aug 2024 21:47:13 +0000
asID:                     271599
IP address blocks:        2804:7e0c:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8e:ed:21:fe:24:f5:6c:51:a9:f4:e3:b6:80:a6:68:88:4c:73:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:42:13 2023 GMT
            Not After : Aug 19 21:47:13 2024 GMT
        Subject: CN=07BEF9CB047033769E46C0F9EF71E47FD3292DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0c:70:46:bd:28:0b:4e:6a:ae:73:6f:89:02:
                    c8:c6:4b:10:2b:47:05:e2:30:01:32:da:44:e6:e1:
                    e1:6e:9e:6e:d5:f8:b5:83:c1:85:fb:b9:7f:27:fd:
                    86:52:93:a0:d1:a3:f5:e9:d2:7e:4d:74:f2:e1:c1:
                    be:48:5e:3b:71:7e:c1:c1:cc:13:78:95:eb:6e:89:
                    f3:0c:fe:b9:3c:5b:80:37:08:f4:9d:3b:a6:bc:7e:
                    25:c1:80:b1:5c:61:0b:a3:f8:8b:27:10:6b:c3:b6:
                    95:c3:7b:19:ff:3b:15:13:58:45:fe:33:e6:c2:98:
                    aa:52:36:11:4d:5f:76:9a:03:71:39:23:58:00:d7:
                    89:20:78:7b:07:82:26:00:69:c0:c2:13:af:0e:ed:
                    2d:77:24:d6:d3:03:1e:5d:b2:1b:30:b7:0b:30:a9:
                    36:03:b6:f5:65:b3:fa:76:ab:e5:d0:fc:45:a3:24:
                    05:71:2c:ec:cd:fb:1f:d9:53:77:10:91:e9:d4:ca:
                    34:ca:04:96:21:c3:96:02:a7:22:00:0d:11:64:45:
                    d1:69:69:b7:c3:3b:03:67:4a:b6:b0:49:80:ff:c6:
                    b6:83:46:fd:99:3f:e8:7b:1f:7d:9c:88:d8:85:c5:
                    27:a2:83:60:33:8d:9f:1e:c7:de:3c:5b:91:b7:ea:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BE:F9:CB:04:70:33:76:9E:46:C0:F9:EF:71:E4:7F:D3:29:2D:F4
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a613030303a3a2f33352d3335203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:63:eb:69:ae:80:1a:95:ef:a0:9a:1c:95:d7:2b:c3:cc:
         69:97:2a:0c:8b:37:40:cd:a4:32:89:fa:68:e4:f7:ca:5a:7a:
         b1:d3:a3:84:65:bf:f6:2d:79:fc:6d:f8:58:8d:89:8d:3a:44:
         22:ac:33:4a:15:63:52:3d:04:5a:63:ff:a7:8c:72:96:8a:fa:
         7b:6e:0c:f4:c4:3e:84:93:d8:c7:49:bf:87:d6:b0:27:41:7b:
         6a:b7:9d:e2:be:cf:85:76:4f:b7:e5:8f:3a:21:36:3d:14:0e:
         03:22:d8:b4:b9:c7:03:59:4f:1c:34:7a:b2:e5:89:3a:49:93:
         bb:93:9e:17:a9:56:c5:42:69:7e:a0:10:05:2e:f8:e7:aa:2b:
         13:03:74:ca:00:53:f5:ce:6d:7b:0f:04:5c:d3:cd:c2:52:df:
         a3:e3:a8:fc:57:85:aa:e7:85:eb:c1:50:08:87:f6:b8:81:44:
         d6:33:7a:26:5e:cf:c3:9e:9b:5d:e1:13:a3:bc:2d:a7:73:0d:
         d3:71:19:1f:97:32:7a:f7:1c:75:8c:a7:a1:86:71:3e:cf:0b:
         3c:93:63:09:13:f9:7f:80:e3:68:b1:cd:39:0f:42:02:96:b0:
         29:68:6f:4d:43:be:54:b2:3d:28:7c:5a:f4:51:56:16:7d:d8:
         f8:9a:2d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org