Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a383030303a3a2f33332d3333203d3e203238323233.roa
File:                     323830343a383461633a383030303a3a2f33332d3333203d3e203238323233.roa (raw, json)
Hash identifier:          GReVL+5BxGWAwvRQUraaETvnJX7FN9rwMB78L6EXfsI=
Subject key identifier:   DF:95:BB:1F:29:E6:40:6A:CA:7B:B7:7D:9C:19:8A:02:A7:76:92:10
Certificate issuer:       /CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
Certificate serial:       387EFB1FE389E535F48E4250D7BFC0AF95D2B5B0
Authority key identifier: BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a383030303a3a2f33332d3333203d3e203238323233.roa
Signing time:             Wed 03 May 2023 22:17:02 +0000
ROA not before:           Wed 03 May 2023 22:12:02 +0000
ROA not after:            Wed 01 May 2024 22:17:02 +0000
asID:                     28223
IP address blocks:        2804:84ac:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7e:fb:1f:e3:89:e5:35:f4:8e:42:50:d7:bf:c0:af:95:d2:b5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE63B8CB93F2BA6FE679C54630B5285FD7878CF3
        Validity
            Not Before: May  3 22:12:02 2023 GMT
            Not After : May  1 22:17:02 2024 GMT
        Subject: CN=DF95BB1F29E6406ACA7BB77D9C198A02A7769210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:7d:fd:1f:3c:b9:03:73:d1:25:84:da:06:
                    da:9f:18:3d:9b:72:5c:2e:52:73:47:e5:57:d6:5b:
                    90:f4:2c:a2:c6:ae:6d:6b:6d:5e:b7:ee:6c:ec:a1:
                    e8:24:d2:c0:50:7e:f2:3e:8d:6d:a2:64:92:30:e9:
                    5a:15:ec:51:9a:7c:71:82:3a:c8:b4:ac:38:0b:3b:
                    d3:33:8f:48:5b:81:b1:cd:7a:45:6e:4a:af:77:9a:
                    f5:c6:2d:b2:1d:ee:47:48:12:74:6f:63:5d:73:dc:
                    06:5e:00:57:45:8e:96:2e:33:76:1c:f3:d0:e9:14:
                    f8:05:2b:2a:30:1e:47:b8:47:6c:fb:59:2d:01:b7:
                    c0:ad:70:af:40:70:76:e6:65:96:9a:d2:c2:37:d7:
                    c6:c5:ed:81:41:73:31:f4:11:ab:32:14:60:b2:70:
                    be:25:90:c4:25:36:fe:45:0d:60:33:6f:d8:d9:64:
                    7b:e8:b6:fb:62:54:27:5b:56:bd:80:21:69:89:5e:
                    ad:18:17:4f:7f:c3:91:ea:61:8b:6d:7e:60:99:f1:
                    81:33:ca:b8:b7:34:00:50:a5:d7:13:23:ec:a1:96:
                    fe:ca:4e:69:59:76:8f:aa:0a:45:f0:48:66:a1:e8:
                    98:92:0a:06:29:ea:19:d7:0c:5b:71:c8:30:8e:fd:
                    ff:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:BB:1F:29:E6:40:6A:CA:7B:B7:7D:9C:19:8A:02:A7:76:92:10
            X509v3 Authority Key Identifier:
                keyid:BE:63:B8:CB:93:F2:BA:6F:E6:79:C5:46:30:B5:28:5F:D7:87:8C:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BE63B8CB93F2BA6FE679C54630B5285FD7878CF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHRirEz5EYN6R1Lg6mnUiHsJUhARW7ntHiqFJg6PCxsJ/0/323830343a383461633a383030303a3a2f33332d3333203d3e203238323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84ac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:f2:02:f8:18:56:e9:4d:73:ff:23:b5:b0:15:44:d9:49:
         bf:83:47:03:16:1a:7a:26:f9:ea:d2:01:ba:b8:e3:97:12:2a:
         5c:33:45:80:19:93:38:df:53:c9:6c:99:5d:55:80:6e:5e:cf:
         f4:e9:a4:03:84:16:aa:3f:26:c1:a4:61:7c:11:53:20:ae:23:
         21:a0:1b:b0:11:40:3f:be:90:ef:23:b3:b8:ff:98:b8:54:73:
         3a:0f:ec:2c:c0:e6:e2:04:d8:aa:a3:bc:84:16:5e:74:41:b1:
         0a:a0:be:55:6e:cd:21:4a:0c:73:e7:88:7e:1b:7e:3b:af:01:
         98:21:1a:45:35:a3:1c:8d:99:2d:15:54:b6:9b:89:0b:b7:e6:
         28:77:06:42:01:54:23:70:1c:cc:a4:f6:ee:3e:54:6e:26:d5:
         87:69:27:34:9b:a8:d6:09:78:a7:7b:af:d8:d5:f3:9c:6f:58:
         31:75:7d:bb:18:ca:a5:e6:29:da:2e:67:ea:c3:f4:9d:98:14:
         79:f1:e0:e5:10:a5:f6:cc:10:a2:89:85:25:64:87:a8:8c:8a:
         77:c4:46:dc:7d:df:0b:22:2f:49:8d:7c:e1:ae:e7:24:2f:ad:
         c7:af:a4:23:7e:08:c8:ba:92:c4:06:8d:ad:22:20:d4:8f:90:
         22:c1:2f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org