Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/323830343a356331343a3a2f33322d313238203d3e20323638383836.roa
File:                     323830343a356331343a3a2f33322d313238203d3e20323638383836.roa (raw, json)
Hash identifier:          /TzR8FVGkzCHQASn3Avd6mBF8NlD1XDMyYpvamYL6g0=
Subject key identifier:   77:31:DA:8A:A7:46:07:C8:93:9D:83:8F:D2:CE:D7:BE:B4:9E:1F:FA
Certificate issuer:       /CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
Certificate serial:       7D5AC57262600F8D6BCEDA1EC31F2E753E61193E
Authority key identifier: BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/323830343a356331343a3a2f33322d313238203d3e20323638383836.roa
Signing time:             Mon 24 Jul 2023 13:05:03 +0000
ROA not before:           Mon 24 Jul 2023 13:00:03 +0000
ROA not after:            Mon 22 Jul 2024 13:05:03 +0000
asID:                     268886
IP address blocks:        2804:5c14::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5a:c5:72:62:60:0f:8d:6b:ce:da:1e:c3:1f:2e:75:3e:61:19:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE253B1D2A29537AA15E656F80DD5C74AB78B69D
        Validity
            Not Before: Jul 24 13:00:03 2023 GMT
            Not After : Jul 22 13:05:03 2024 GMT
        Subject: CN=7731DA8AA74607C8939D838FD2CED7BEB49E1FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:02:c2:d0:a6:70:b0:13:40:40:45:5a:1e:
                    0b:63:7b:f4:6d:c9:2a:6c:5b:95:69:b4:28:28:7e:
                    4d:f1:20:a4:68:91:48:e5:e2:0c:0c:b0:f3:d3:5c:
                    13:5d:10:58:ed:93:52:56:e9:64:40:3b:f8:8b:f6:
                    b9:a0:46:02:44:a0:34:8c:15:75:eb:47:0e:a9:31:
                    cb:e6:b1:4d:c4:32:a0:fe:f7:50:66:b1:b0:9b:1d:
                    d5:3a:58:40:9d:22:bf:0b:cd:45:86:ef:54:49:7a:
                    df:b7:a6:78:b4:30:f0:7b:04:f1:4b:9f:f6:61:d8:
                    2d:a9:26:bf:4c:0a:18:44:1e:8d:c9:c5:98:73:76:
                    8b:2e:38:c7:56:2d:2a:2a:47:94:3e:9f:eb:f5:78:
                    2d:82:a8:88:fa:0f:d8:b7:c7:e5:ef:0f:3c:00:57:
                    91:c3:fd:e3:b6:24:dd:d2:69:d4:a5:24:7b:1c:83:
                    83:95:7d:dc:11:e3:2c:a7:8b:8d:f7:54:8f:43:b1:
                    71:fd:be:79:45:ff:e6:2d:c2:c5:e0:54:f9:a3:df:
                    20:80:c6:20:21:5f:4f:d7:0c:6f:d3:48:c0:5a:49:
                    db:ea:5d:3a:b4:7b:b8:16:6a:8d:1d:8a:e0:ae:05:
                    bb:00:26:c5:2f:ab:84:31:4f:bb:d1:ae:1c:29:aa:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:DA:8A:A7:46:07:C8:93:9D:83:8F:D2:CE:D7:BE:B4:9E:1F:FA
            X509v3 Authority Key Identifier:
                keyid:BE:25:3B:1D:2A:29:53:7A:A1:5E:65:6F:80:DD:5C:74:AB:78:B6:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE253B1D2A29537AA15E656F80DD5C74AB78B69D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6rb7TVnSmTptfYfnyfb7dHrc5NP7NCvPVsdhotxzaSwv/0/323830343a356331343a3a2f33322d313238203d3e20323638383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c14::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:92:e8:4f:00:af:ae:d0:b3:60:b4:0b:de:76:59:66:8f:0d:
         c9:31:8a:b1:4d:eb:1d:0e:d8:44:34:8a:c8:c9:5f:f7:c8:f2:
         4c:d4:11:98:be:46:35:2f:c8:7f:51:f5:e4:c8:7f:d9:e0:f5:
         da:96:91:04:89:ae:74:d3:7b:f0:a7:2f:1e:c2:1f:da:d5:b7:
         f3:bb:13:5c:c2:8e:15:4c:85:d8:3b:a5:c6:a6:3c:14:37:c5:
         45:f8:58:be:5e:e3:3a:6c:4f:69:9c:41:93:15:97:2b:1f:76:
         d7:b0:ab:f3:c7:4f:9f:3c:e1:a3:ca:fb:06:80:54:16:a1:d3:
         80:6a:59:a0:33:54:8b:ea:8d:fa:78:d5:84:ab:64:42:76:70:
         49:8e:77:05:4b:ec:8b:27:3e:c0:eb:02:e7:10:9f:5b:5d:32:
         ad:d2:71:f8:3c:9b:0b:02:6e:f4:9c:dd:66:02:20:a1:71:84:
         26:0d:34:3d:34:97:87:4c:2c:aa:bc:e4:4e:b1:1b:79:3a:ad:
         b1:40:41:cd:7d:f0:c9:eb:d1:c5:e4:67:c7:5a:17:ce:08:56:
         14:11:f5:96:12:44:49:7a:ce:79:25:0b:e7:1a:2f:90:f1:d2:
         7c:ce:68:cf:4b:2b:6b:ca:09:fe:86:96:9a:90:97:d5:d2:1e:
         17:da:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org