Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a653030303a3a2f33352d3335203d3e20323731353939.roa
File:                     323830343a376530633a653030303a3a2f33352d3335203d3e20323731353939.roa (raw, json)
Hash identifier:          074RW9uJ4AVXUKdrcmIgpb8i1n//hus3/Az2w6KM3O0=
Subject key identifier:   95:B6:55:45:18:AC:67:8C:A5:EB:D6:7E:F3:C8:6D:1A:D2:DD:7A:C7
Certificate issuer:       /CN=BEC1956E0160C92FCE70593490DE15F0A183223A
Certificate serial:       439AE795FE2FA575088F12777194C77322F9C6F6
Authority key identifier: BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a653030303a3a2f33352d3335203d3e20323731353939.roa
Signing time:             Mon 21 Aug 2023 21:47:19 +0000
ROA not before:           Mon 21 Aug 2023 21:42:19 +0000
ROA not after:            Mon 19 Aug 2024 21:47:19 +0000
asID:                     271599
IP address blocks:        2804:7e0c:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9a:e7:95:fe:2f:a5:75:08:8f:12:77:71:94:c7:73:22:f9:c6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEC1956E0160C92FCE70593490DE15F0A183223A
        Validity
            Not Before: Aug 21 21:42:19 2023 GMT
            Not After : Aug 19 21:47:19 2024 GMT
        Subject: CN=95B6554518AC678CA5EBD67EF3C86D1AD2DD7AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:66:af:8b:ca:31:73:d5:7f:a2:a8:fd:39:
                    c3:1b:bf:be:1c:17:94:78:3c:8f:5e:46:af:0e:cb:
                    5f:f4:2a:c3:48:89:12:07:0b:d1:24:b7:78:1e:07:
                    ce:d0:0e:6b:95:e6:44:37:fc:b1:ad:30:3e:d2:bc:
                    8c:8e:0f:6e:c0:ee:ff:39:72:a9:64:4f:61:f1:d8:
                    a1:50:47:0e:d4:7d:91:29:3d:28:d0:9c:ec:43:2e:
                    ff:cd:59:66:6a:8b:a8:78:38:e7:44:57:7b:e9:ea:
                    14:57:f4:d4:45:93:f2:03:9e:d0:ad:91:f4:25:95:
                    13:96:22:49:6b:8d:f2:26:8e:7a:64:28:e9:e8:45:
                    c4:eb:c8:52:fc:a3:7e:21:27:58:67:ed:10:a7:78:
                    84:a9:fb:69:14:d6:27:63:4e:cb:a3:62:d2:ee:fe:
                    7b:35:f5:79:f2:1c:6c:d9:9d:73:69:2c:ce:1c:c2:
                    1c:5d:95:59:10:c7:21:3f:2b:1f:d7:c5:28:b5:c3:
                    0d:30:37:60:37:ee:81:5d:3a:d5:c3:ed:fd:51:7c:
                    59:0d:e8:9b:a1:74:c8:3a:9d:40:48:36:5f:c9:ac:
                    7a:1f:9f:22:a7:ac:33:f4:0a:1c:17:55:fd:4b:57:
                    d3:f5:74:d9:96:56:82:a3:2c:f8:35:56:e9:c2:23:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B6:55:45:18:AC:67:8C:A5:EB:D6:7E:F3:C8:6D:1A:D2:DD:7A:C7
            X509v3 Authority Key Identifier:
                keyid:BE:C1:95:6E:01:60:C9:2F:CE:70:59:34:90:DE:15:F0:A1:83:22:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/BEC1956E0160C92FCE70593490DE15F0A183223A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEC1956E0160C92FCE70593490DE15F0A183223A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/323830343a376530633a653030303a3a2f33352d3335203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:af:d7:59:fa:e3:96:f2:80:b1:51:2e:54:d2:1e:79:8b:
         9a:6f:08:06:75:16:ea:fd:18:cd:b4:95:28:b5:05:2e:3e:74:
         83:7d:f9:d5:f7:c4:9c:b5:e6:1a:d4:23:c1:25:d1:ad:6f:cf:
         2d:42:27:4a:ce:13:9a:9c:59:6d:94:7b:af:15:b3:dd:0d:a1:
         23:be:80:e4:6a:c0:1e:5a:f5:f5:5a:b2:22:bd:a1:a7:d0:fc:
         7f:0c:a7:46:f5:dc:a0:0e:2d:cb:be:87:fd:39:99:72:b9:1e:
         a7:1f:64:54:28:5b:1b:3d:6a:5d:af:4b:e6:08:58:58:12:c6:
         ce:f2:b7:06:b9:5a:e6:d5:dd:47:10:0a:36:cd:51:4c:cf:4d:
         58:3d:ef:72:a8:61:b7:c3:0f:50:50:68:9f:fe:ca:e1:a9:69:
         4a:5f:46:9d:11:eb:19:b4:a1:c5:e3:2a:95:c7:0b:16:be:d1:
         85:62:2c:d9:98:7e:5e:54:6f:15:e9:ab:34:93:26:12:1a:b0:
         38:cc:38:cd:a8:b3:03:43:69:b5:26:02:1c:7c:a6:0c:d8:b8:
         67:22:2c:e1:e3:da:35:4c:a2:eb:b7:f2:57:e3:ff:39:34:77:
         5c:70:9c:f3:85:6a:f2:5e:a3:66:42:c0:09:8d:23:9f:d5:80:
         1b:4d:86:8b
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUQ5rnlf4vpXUIjxJ3cZTHcyL5xvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkVDMTk1NkUwMTYwQzkyRkNFNzA1OTM0OTBERTE1RjBB
MTgzMjIzQTAeFw0yMzA4MjEyMTQyMTlaFw0yNDA4MTkyMTQ3MTlaMDMxMTAvBgNV
BAMTKDk1QjY1NTQ1MThBQzY3OENBNUVCRDY3RUYzQzg2RDFBRDJERDdBQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXGavi8oxc9V/oqj9OcMbv74c
F5R4PI9eRq8Oy1/0KsNIiRIHC9Ekt3geB87QDmuV5kQ3/LGtMD7SvIyOD27A7v85
cqlkT2Hx2KFQRw7UfZEpPSjQnOxDLv/NWWZqi6h4OOdEV3vp6hRX9NRFk/IDntCt
kfQllROWIklrjfImjnpkKOnoRcTryFL8o34hJ1hn7RCneISp+2kU1idjTsujYtLu
/ns19XnyHGzZnXNpLM4cwhxdlVkQxyE/Kx/XxSi1ww0wN2A37oFdOtXD7f1RfFkN
6JuhdMg6nUBINl/JrHofnyKnrDP0ChwXVf1LV9P1dNmWVoKjLPg1VunCIwZFAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUlbZVRRisZ4yl69Z+88htGtLdescwHwYDVR0j
BBgwFoAUvsGVbgFgyS/OcFk0kN4V8KGDIjowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFhtVThxMVVVZGlt
R2IvMC9CRUMxOTU2RTAxNjBDOTJGQ0U3MDU5MzQ5MERFMTVGMEExODMyMjNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JFQzE5NTZFMDE2MEM5MkZD
RTcwNTkzNDkwREUxNUYwQTE4MzIyM0EuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2UEtnb1hob1ZOQk5mWDRIMlJFRUZaMVBWbUY4UjhYbVU4cTFVVWRpbUdiLzAv
MzIzODMwMzQzYTM3NjUzMDYzM2E2NTMwMzAzMDNhM2EyZjMzMzUyZDMzMzUyMDNk
M2UyMDMyMzczMTM1MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSgEfgzgMA0GCSqGSIb3DQEBCwUA
A4IBAQB+na/XWfrjlvKAsVEuVNIeeYuabwgGdRbq/RjNtJUotQUuPnSDffnV98Sc
teYa1CPBJdGtb88tQidKzhOanFltlHuvFbPdDaEjvoDkasAeWvX1WrIivaGn0Px/
DKdG9dygDi3Lvof9OZlyuR6nH2RUKFsbPWpdr0vmCFhYEsbO8rcGuVrm1d1HEAo2
zVFMz01YPe9yqGG3ww9QUGif/srhqWlKX0adEesZtKHF4yqVxwsWvtGFYizZmH5e
VG8V6as0kyYSGrA4zDjNqLMDQ2m1JgIcfKYM2LhnIizh49o1TKLrt/JX4/85NHdc
cJzzhWryXqNmQsAJjSOf1YAbTYaL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org