Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/323830343a326630633a3a2f33322d3333203d3e20323634383638.roa
File:                     323830343a326630633a3a2f33322d3333203d3e20323634383638.roa (raw, json)
Hash identifier:          qe6CjVkUgceLmxy7SXs9XhBLGnxDEjoaPw+pSMrv9R0=
Subject key identifier:   3E:F4:79:AA:B2:43:73:BC:2C:A7:C1:D6:2C:3D:CD:BF:66:EB:A0:F0
Certificate issuer:       /CN=BE430EA87140C1F5014CC192F08B73E872516286
Certificate serial:       5A385A0C16F057D287A85366BF99CBE6BA7EF34B
Authority key identifier: BE:43:0E:A8:71:40:C1:F5:01:4C:C1:92:F0:8B:73:E8:72:51:62:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE430EA87140C1F5014CC192F08B73E872516286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/323830343a326630633a3a2f33322d3333203d3e20323634383638.roa
Signing time:             Tue 18 Jul 2023 18:32:16 +0000
ROA not before:           Tue 18 Jul 2023 18:27:16 +0000
ROA not after:            Tue 16 Jul 2024 18:32:16 +0000
asID:                     264868
IP address blocks:        2804:2f0c::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:38:5a:0c:16:f0:57:d2:87:a8:53:66:bf:99:cb:e6:ba:7e:f3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE430EA87140C1F5014CC192F08B73E872516286
        Validity
            Not Before: Jul 18 18:27:16 2023 GMT
            Not After : Jul 16 18:32:16 2024 GMT
        Subject: CN=3EF479AAB24373BC2CA7C1D62C3DCDBF66EBA0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:ce:bf:8f:df:8d:c8:ec:b2:9a:68:ce:b6:
                    75:31:41:f1:0a:7d:47:f1:f6:a2:77:b1:6f:0f:68:
                    3d:5d:25:24:16:10:1f:96:f0:f6:7e:77:97:7d:d4:
                    a6:1d:7d:36:11:d2:03:06:3c:54:be:fb:51:cb:51:
                    aa:0c:19:2d:d9:8f:be:78:b4:99:fb:81:46:e1:c6:
                    c3:a6:cf:11:0b:db:5a:82:f9:3e:6b:ed:75:90:61:
                    de:3b:b7:75:5a:92:7e:69:c1:d7:76:46:56:f9:f0:
                    bc:75:5c:b8:b4:32:95:22:12:5b:69:97:f3:0d:fc:
                    0c:0f:b1:7c:17:02:3e:8f:36:7a:29:c9:c5:50:83:
                    12:4c:2d:b3:bb:d1:b6:af:61:2f:89:49:e3:9b:32:
                    b2:0e:6f:fa:62:71:89:4f:9a:22:f1:ac:cb:d6:d1:
                    1a:94:9f:2c:11:a8:01:02:53:e5:51:73:ba:b2:d0:
                    e6:81:80:ec:2f:15:20:0f:95:d0:ff:77:0f:22:16:
                    22:a8:d2:51:89:bc:0f:a3:66:72:cb:45:fa:15:8b:
                    2e:40:78:01:57:13:ab:7d:fd:b0:3e:1f:cb:25:f5:
                    68:4d:a4:04:70:e4:cf:5a:4c:dd:81:bf:0e:59:d9:
                    1e:b1:d9:31:9c:ed:5b:c6:66:51:e3:89:98:05:f3:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F4:79:AA:B2:43:73:BC:2C:A7:C1:D6:2C:3D:CD:BF:66:EB:A0:F0
            X509v3 Authority Key Identifier:
                keyid:BE:43:0E:A8:71:40:C1:F5:01:4C:C1:92:F0:8B:73:E8:72:51:62:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/BE430EA87140C1F5014CC192F08B73E872516286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE430EA87140C1F5014CC192F08B73E872516286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8YnNFwXbjyX7urxJK1nRUzWf8wH9hnKmWjCp1ZfbXRN/0/323830343a326630633a3a2f33322d3333203d3e20323634383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:26:b3:04:82:0c:38:34:55:0f:6e:5e:b5:7a:ab:ff:92:b1:
         58:bf:bc:8e:67:1c:c5:5a:b7:52:59:bb:94:dd:4e:ff:a6:19:
         9b:eb:24:c8:dd:b5:22:6b:91:33:e8:a8:87:f5:d0:9d:00:aa:
         8d:27:59:44:cb:3d:be:ef:38:57:10:7e:20:6b:d3:4a:1b:92:
         09:79:95:28:78:27:3e:45:27:07:29:39:94:c6:a6:74:91:3d:
         3a:93:e6:f6:97:e5:4d:13:f2:79:ce:d0:8b:db:8c:c2:3d:9a:
         26:c3:98:48:ba:61:6b:8e:a9:1d:ba:f3:aa:47:7f:05:4b:cf:
         d6:30:3b:2c:43:a4:6a:3d:44:dd:ad:7a:c8:0d:52:28:f5:47:
         91:1f:ff:c6:7e:d0:e2:37:e5:7c:70:ac:df:6d:4b:1d:fc:89:
         d1:5b:41:34:15:43:47:0b:67:cb:00:26:7a:f1:cf:05:dd:2e:
         7a:f6:e4:0b:fd:a4:52:86:7e:ea:d3:c8:7f:27:2b:0e:3d:33:
         c0:2c:87:a0:1e:61:d7:4a:4b:1c:5c:8c:ce:7b:09:89:04:67:
         60:d4:ce:0d:de:48:1d:9b:46:51:a5:99:81:07:c8:eb:93:36:
         8e:14:1b:3f:cb:f5:69:e1:71:e8:bc:38:4a:0b:be:ec:aa:cb:
         ce:74:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org