Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/323830343a346664303a3a2f33322d3338203d3e20323638333531.roa
File:                     323830343a346664303a3a2f33322d3338203d3e20323638333531.roa (raw, json)
Hash identifier:          c4SEWZ6vR0vdoX8d4AnCluxMryeQHuYX9Ey+fTs6H+Q=
Subject key identifier:   62:EA:23:41:3A:48:83:D7:B2:BD:46:71:A2:25:D4:87:71:56:29:5A
Certificate issuer:       /CN=BEB46512B8880AD36DFF21606FF23737C60D7704
Certificate serial:       59D2DBA7126A7A4260F81A92DA67136602FA1DA1
Authority key identifier: BE:B4:65:12:B8:88:0A:D3:6D:FF:21:60:6F:F2:37:37:C6:0D:77:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEB46512B8880AD36DFF21606FF23737C60D7704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/323830343a346664303a3a2f33322d3338203d3e20323638333531.roa
Signing time:             Mon 27 Mar 2023 17:10:49 +0000
ROA not before:           Mon 27 Mar 2023 17:05:49 +0000
ROA not after:            Mon 25 Mar 2024 17:10:49 +0000
asID:                     268351
IP address blocks:        2804:4fd0::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d2:db:a7:12:6a:7a:42:60:f8:1a:92:da:67:13:66:02:fa:1d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEB46512B8880AD36DFF21606FF23737C60D7704
        Validity
            Not Before: Mar 27 17:05:49 2023 GMT
            Not After : Mar 25 17:10:49 2024 GMT
        Subject: CN=62EA23413A4883D7B2BD4671A225D4877156295A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:63:50:8b:2d:4d:a2:19:95:30:21:e9:fb:
                    4b:32:e7:4f:50:f2:2e:d9:85:ba:3f:a8:f7:f7:af:
                    01:6a:b7:d5:1e:07:ee:8c:78:c9:7a:ec:fd:a0:3b:
                    ab:f5:87:62:eb:86:e0:1a:74:ea:08:0b:2c:21:f2:
                    04:d5:84:4f:a7:ce:8c:3c:7b:55:01:9b:f7:45:a8:
                    ce:d2:97:b6:ec:3a:26:8f:02:6b:7b:8a:7f:71:e5:
                    75:33:e6:bb:d0:5b:60:cf:87:46:11:6f:ef:5e:b8:
                    6b:55:ac:5e:2f:73:63:2c:12:be:7f:3e:dc:6e:3d:
                    aa:77:dd:22:c0:e5:d4:1f:bc:ca:66:ef:bb:69:5f:
                    a6:3b:f1:5b:0d:01:1e:4d:93:f6:e0:83:36:fc:f1:
                    77:1a:ca:51:62:7a:35:83:d7:a9:fc:ff:fe:b7:5e:
                    55:96:53:a0:a5:47:be:03:49:bb:a6:51:c8:66:be:
                    63:dd:f1:84:b3:70:4e:4f:35:ac:37:54:23:9e:85:
                    b3:93:98:f9:1d:61:7e:f7:55:14:60:0d:75:a8:ca:
                    77:7f:58:79:a7:f8:ce:27:47:89:6b:d9:79:01:df:
                    5e:f1:73:ef:5f:8f:3b:eb:a9:72:d0:b1:45:a7:f3:
                    e7:77:f3:b9:13:74:5c:bc:70:07:c5:2c:8e:1f:2d:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:23:41:3A:48:83:D7:B2:BD:46:71:A2:25:D4:87:71:56:29:5A
            X509v3 Authority Key Identifier:
                keyid:BE:B4:65:12:B8:88:0A:D3:6D:FF:21:60:6F:F2:37:37:C6:0D:77:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/BEB46512B8880AD36DFF21606FF23737C60D7704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BEB46512B8880AD36DFF21606FF23737C60D7704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/323830343a346664303a3a2f33322d3338203d3e20323638333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:f0:98:d1:21:e5:a0:95:1f:88:d5:4b:5f:96:3b:5c:a9:
         a3:6f:d4:bb:8e:30:84:8a:56:df:e6:4c:16:cb:13:25:01:05:
         16:47:03:77:da:95:b9:df:55:f7:fd:7a:78:8c:93:ce:f0:b0:
         97:0a:f6:58:ee:c9:57:e6:ff:e6:f2:8e:ad:55:41:89:f5:bb:
         b1:d4:32:f7:3e:5f:8f:f3:c7:df:ab:a8:b8:4a:e3:14:e8:3a:
         5c:42:58:8c:c1:57:9b:fd:ba:5c:c0:48:08:ab:0b:18:76:3d:
         77:34:88:e1:9d:6a:d8:68:aa:9d:f8:c7:c3:82:ec:b5:8b:2c:
         ed:37:ff:e2:fd:2e:fe:d9:99:25:e7:c1:5a:8d:24:db:a5:36:
         f6:a1:6f:2d:44:36:dc:6c:7d:65:c4:d0:0b:ab:71:d0:1e:88:
         98:5c:b7:62:6d:df:66:aa:15:95:c7:9e:0a:b7:00:ce:4a:04:
         cb:55:46:b1:b8:e7:8d:85:8d:7d:a3:9f:ab:89:4e:20:cd:96:
         cd:f3:75:7c:1c:11:89:8e:62:b2:dd:9d:c4:e8:fd:06:22:20:
         43:68:48:f4:0c:8e:96:32:5c:1c:b3:7a:a5:f7:92:af:48:eb:
         88:3c:08:8f:91:97:6b:30:ed:cd:8c:33:7b:d9:dd:b6:7e:59:
         2a:f8:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org