Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a633030303a3a2f33352d3335203d3e20323731353939.roa
File:                     323830343a376530633a633030303a3a2f33352d3335203d3e20323731353939.roa (raw, json)
Hash identifier:          B8H+GFJ8pAidRKXYzF5D23S/bC2+GAQx1S2TLyI/gQM=
Subject key identifier:   41:22:B6:8B:FB:83:2D:51:0F:39:1F:B3:ED:74:B5:54:BB:75:9D:A9
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       08043816724DEB37AF205964D26AB72288231B7D
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a633030303a3a2f33352d3335203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:47:16 +0000
ROA not before:           Mon 21 Aug 2023 21:42:16 +0000
ROA not after:            Mon 19 Aug 2024 21:47:16 +0000
asID:                     271599
IP address blocks:        2804:7e0c:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:38:16:72:4d:eb:37:af:20:59:64:d2:6a:b7:22:88:23:1b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:42:16 2023 GMT
            Not After : Aug 19 21:47:16 2024 GMT
        Subject: CN=4122B68BFB832D510F391FB3ED74B554BB759DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:df:fa:67:6d:bf:51:a5:06:58:5e:c5:96:
                    74:04:f2:99:70:46:4b:49:f9:75:f9:30:ba:9c:4d:
                    84:86:0e:ca:b4:d2:54:ae:05:6e:f4:8d:da:9b:f0:
                    5f:fa:12:f6:d1:1e:dc:77:c5:0f:48:db:ce:d0:67:
                    7e:3e:e0:76:94:f6:6a:c9:09:2b:c6:fe:a6:a8:a3:
                    d6:03:8e:dd:10:2d:71:7b:d0:69:9a:e2:a4:9e:ca:
                    8f:48:95:a8:ba:5a:c8:cf:34:b9:82:c2:b0:96:17:
                    5f:c3:4c:bd:1e:66:15:d4:c3:9d:f2:9b:27:0c:a4:
                    c3:8b:6b:74:c0:17:26:4d:86:e3:89:77:2b:73:57:
                    00:55:95:44:dc:77:fa:08:09:4b:a1:de:a7:f0:3d:
                    43:45:5e:cc:bb:ce:f1:a5:13:12:f9:6d:d5:5a:0e:
                    c5:e7:b4:5a:a3:03:ef:7b:17:8d:19:ae:ab:1c:b7:
                    a0:81:0f:d4:34:60:3f:4e:69:58:35:59:63:d4:28:
                    d4:d6:d7:c0:fb:2c:40:9b:13:dc:e3:d2:46:e5:83:
                    15:22:68:82:d3:7b:2a:f7:f6:e6:73:02:57:31:28:
                    cb:f3:35:8c:94:fd:e7:dc:6d:3a:5c:9a:c9:fe:70:
                    30:a7:ff:50:a1:56:0b:50:26:9e:e7:0f:68:85:af:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:22:B6:8B:FB:83:2D:51:0F:39:1F:B3:ED:74:B5:54:BB:75:9D:A9
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a633030303a3a2f33352d3335203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         76:c9:88:fc:0e:57:f5:b9:73:41:28:c3:4d:d8:71:e1:ca:02:
         94:4f:49:9c:27:39:30:5b:c0:09:32:c7:f8:0e:0a:a7:6f:11:
         ec:91:b4:26:20:bc:d0:e2:af:3c:76:e3:56:9e:9d:04:3d:73:
         48:08:c1:0e:3a:e0:43:9d:7f:3c:10:11:a9:bc:3b:56:6d:7e:
         94:b5:43:65:d7:90:31:10:4d:76:4a:11:80:33:d0:1d:af:d9:
         8a:a5:84:88:bc:af:55:b4:ea:b5:f6:f5:1a:df:67:c5:e4:b8:
         a6:b9:1f:88:ae:fd:2c:90:53:26:ee:fc:29:16:a5:9b:9e:a2:
         fc:b0:da:3a:31:b5:13:08:f1:1d:51:27:ff:57:42:cf:1a:ed:
         87:2f:7a:23:94:ca:40:00:0d:f1:d4:88:75:a8:11:ca:5c:22:
         f7:78:66:ea:b0:1f:c7:87:7e:28:22:68:6f:2a:81:64:43:fa:
         85:f3:06:93:66:36:ea:92:1c:e2:60:45:ba:ff:9e:e3:0e:1c:
         fe:1e:c0:2c:55:22:e0:ee:06:2b:87:8e:47:94:15:21:20:e7:
         f5:ab:b5:5a:cd:36:3f:98:43:1e:f9:34:76:8e:2d:e8:c6:2e:
         0c:9a:b9:f0:83:67:84:88:35:6a:17:08:93:77:81:0c:a5:3b:
         29:cd:60:15
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUCAQ4FnJN6zevIFlk0mq3IogjG30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVDMTk1NkUwMTYwQzkyRkNFNzA1OTM0OTBERTE1RjBB
MTgzMjIzQTAeFw0yMzA4MjEyMTQyMTZaFw0yNDA4MTkyMTQ3MTZaMDMxMTAvBgNV
BAMTKDQxMjJCNjhCRkI4MzJENTEwRjM5MUZCM0VENzRCNTU0QkI3NTlEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtt9/6Z22/UaUGWF7FlnQE8plw
RktJ+XX5MLqcTYSGDsq00lSuBW70jdqb8F/6EvbRHtx3xQ9I287QZ34+4HaU9mrJ
CSvG/qaoo9YDjt0QLXF70Gma4qSeyo9Ilai6WsjPNLmCwrCWF1/DTL0eZhXUw53y
mycMpMOLa3TAFyZNhuOJdytzVwBVlUTcd/oICUuh3qfwPUNFXsy7zvGlExL5bdVa
DsXntFqjA+97F40Zrqsct6CBD9Q0YD9OaVg1WWPUKNTW18D7LECbE9zj0kblgxUi
aILTeyr39uZzAlcxKMvzNYyU/efcbTpcmsn+cDCn/1ChVgtQJp7nD2iFr0IbAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUQSK2i/uDLVEPOR+z7XS1VLt1nakwHwYDVR0j
BBgwFoAUvsGVbgFgyS/OcFk0kN4V8KGDIjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFhtVThxMVVVZGlt
R2IvMC9CRUMxOTU2RTAxNjBDOTJGQ0U3MDU5MzQ5MERFMTVGMEExODMyMjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFQzE5NTZFMDE2MEM5MkZD
RTcwNTkzNDkwREUxNUYwQTE4MzIyM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2UEtnb1hob1ZOQk5mWDRIMlJFRUZaMVBWbUY4UjhYbVU4cTFVVWRpbUdiLzAv
MzIzODMwMzQzYTM3NjUzMDYzM2E2MzMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMTM1MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEfgzAMA0GCSqGSIb3DQEBCwUA
A4IBAQB2yYj8Dlf1uXNBKMNN2HHhygKUT0mcJzkwW8AJMsf4DgqnbxHskbQmILzQ
4q88duNWnp0EPXNICMEOOuBDnX88EBGpvDtWbX6UtUNl15AxEE12ShGAM9Adr9mK
pYSIvK9VtOq19vUa32fF5LimuR+Irv0skFMm7vwpFqWbnqL8sNo6MbUTCPEdUSf/
V0LPGu2HL3ojlMpAAA3x1Ih1qBHKXCL3eGbqsB/Hh34oImhvKoFkQ/qF8waTZjbq
khziYEW6/57jDhz+HsAsVSLg7gYrh45HlBUhIOf1q7VazTY/mEMe+TR2ji3oxi4M
mrnwg2eEiDVqFwiTd4EMpTspzWAV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org