Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a653030303a3a2f33352d3335203d3e20323639333033.roa
File:                     323830343a363238633a653030303a3a2f33352d3335203d3e20323639333033.roa (raw, json)
Hash identifier:          FJj820KKdBIyA7iREu7PdGXFR1Ky4a2UOqfQMzynHHs=
Subject key identifier:   BE:FE:11:AD:84:83:21:E6:F0:9E:9B:81:48:68:F4:FB:5F:0D:A1:5D
Certificate issuer:       /CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
Certificate serial:       01C6E6CAA95E212849DC7C686EE36E8DE91B3DBE
Authority key identifier: A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a653030303a3a2f33352d3335203d3e20323639333033.roa
Signing time:             Sat 16 Mar 2024 20:31:52 +0000
ROA not before:           Sat 16 Mar 2024 20:26:52 +0000
ROA not after:            Sat 15 Mar 2025 20:31:52 +0000
asID:                     269303
IP address blocks:        2804:628c:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c6:e6:ca:a9:5e:21:28:49:dc:7c:68:6e:e3:6e:8d:e9:1b:3d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E946376BB1FE633E13DF92BEF60BBDF8A6438
        Validity
            Not Before: Mar 16 20:26:52 2024 GMT
            Not After : Mar 15 20:31:52 2025 GMT
        Subject: CN=BEFE11AD848321E6F09E9B814868F4FB5F0DA15D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:91:e4:4a:c5:37:4c:c6:82:60:fd:68:41:
                    7d:1b:1e:9b:8a:96:b8:a3:b9:83:a3:c1:61:73:d7:
                    88:2d:f5:62:32:04:80:38:df:a9:db:45:96:15:81:
                    9f:88:30:f0:71:48:79:98:36:27:4c:9b:fb:49:71:
                    e3:5e:98:c3:c9:64:b6:80:ac:0f:fd:9f:93:ab:ff:
                    0c:12:51:d5:25:f0:97:34:ec:82:6e:e9:f8:78:1b:
                    f4:19:d6:d4:ef:e5:27:c9:d9:93:6a:bd:ce:7f:29:
                    a8:28:04:38:b5:26:d7:fe:93:be:74:eb:02:a7:fa:
                    a3:8d:42:50:44:b1:e2:40:3a:7c:54:56:46:1f:fd:
                    49:4a:a6:89:94:17:0d:51:b0:17:f4:0a:56:ea:b0:
                    39:47:19:17:a4:51:8c:02:f5:fe:e3:f8:ba:5a:41:
                    41:c3:aa:d7:90:74:81:0e:31:7e:09:42:9e:b9:d3:
                    c3:c5:b5:7d:bf:e3:e9:7d:72:8f:2d:13:76:e9:c7:
                    9d:26:67:21:1c:8a:7f:f2:a1:b9:bb:e6:72:81:db:
                    e1:49:33:92:5d:19:5d:fc:8b:8a:78:c2:b5:b1:99:
                    6f:3b:3e:e7:2e:70:c9:25:3e:0b:54:dd:c2:8f:f5:
                    de:5e:43:cb:c4:69:3b:d1:fc:a1:46:60:49:3e:a5:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FE:11:AD:84:83:21:E6:F0:9E:9B:81:48:68:F4:FB:5F:0D:A1:5D
            X509v3 Authority Key Identifier:
                keyid:A4:7E:94:63:76:BB:1F:E6:33:E1:3D:F9:2B:EF:60:BB:DF:8A:64:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47E946376BB1FE633E13DF92BEF60BBDF8A6438.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsDEGemZfaWtuyaQxb7JUVqK5uLsNJpFSHP3ejwUEc4R/0/323830343a363238633a653030303a3a2f33352d3335203d3e20323639333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628c:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         bc:32:0d:f9:1b:80:f5:0a:16:23:6c:d2:ee:ed:3e:47:89:16:
         8f:a1:eb:4d:40:d4:8c:2d:d1:ab:3d:22:33:a8:29:ab:ac:30:
         c5:27:28:16:75:33:52:77:50:dc:3a:f9:e2:a2:30:c1:d5:e1:
         dc:48:07:c6:6b:e5:76:14:63:c7:39:c3:2a:87:a9:ce:2e:a0:
         3b:b0:c3:c7:fb:db:b8:76:e9:28:3b:a4:90:f8:2c:aa:82:f5:
         35:b6:8f:d5:ee:3b:7b:d2:75:1b:8b:fc:f4:f6:4a:9b:4e:8e:
         57:84:d6:88:14:46:d1:dd:10:70:82:99:4e:3b:52:4a:f7:8a:
         2f:ce:b2:1a:00:d3:61:5b:a6:50:57:47:e2:91:91:89:d3:e6:
         e3:b7:f0:78:c0:f3:74:77:e9:d1:40:3a:4c:30:7f:b9:eb:f5:
         50:1d:00:f5:f5:b1:4e:15:ae:db:af:04:29:a0:a5:99:9b:92:
         43:95:b5:e9:60:5f:d3:c6:c3:ce:16:23:0b:99:d0:ea:82:5b:
         fe:47:b0:b6:ef:55:c8:c0:90:b7:49:58:dc:4d:e2:0f:d8:ac:
         c7:53:c5:08:60:b0:28:b1:7a:a9:46:fa:a8:4c:8a:ca:e4:ce:
         66:d8:d9:54:02:08:80:f7:b0:fa:de:16:e2:a6:79:3a:f9:03:
         69:9f:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org