Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa
File:                     323830343a333264343a3a2f33322d3332203d3e20323635313030.roa (raw, json)
Hash identifier:          W11uRi8WDqsz6wNiOtnEgUNgjSvrH5/mCsv9nEqJApU=
Subject key identifier:   59:47:87:60:59:AC:80:3F:8D:C4:29:BB:39:CD:2D:DB:56:39:D1:DD
Certificate issuer:       /CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
Certificate serial:       5B8FECB1DA0F97AF624B742394B666C8457F71CE
Authority key identifier: BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa
Signing time:             Tue 20 Feb 2024 15:00:00 +0000
ROA not before:           Tue 20 Feb 2024 14:55:00 +0000
ROA not after:            Tue 18 Feb 2025 15:00:00 +0000
asID:                     265100
IP address blocks:        2804:32d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8f:ec:b1:da:0f:97:af:62:4b:74:23:94:b6:66:c8:45:7f:71:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECF4D77E2B91192575E2DE0DC91F109BDB0DA93
        Validity
            Not Before: Feb 20 14:55:00 2024 GMT
            Not After : Feb 18 15:00:00 2025 GMT
        Subject: CN=5947876059AC803F8DC429BB39CD2DDB5639D1DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fe:2e:56:a9:63:0f:c9:a5:9c:ac:9c:e4:e2:
                    c0:ca:cc:fe:42:e6:20:c3:d7:d6:0c:e0:64:d9:33:
                    89:f9:29:2f:2e:9a:f3:2b:ff:21:f1:5e:a9:5f:45:
                    91:5c:ac:fc:84:13:a7:00:49:75:7e:08:db:a8:a6:
                    30:8c:cb:eb:df:36:10:03:be:66:b6:0a:91:f5:4c:
                    36:c7:e6:11:e7:af:85:9e:ad:ab:cf:2b:8d:1e:4e:
                    76:52:31:88:cb:e4:fd:61:7a:0f:e5:d7:98:8f:5a:
                    e3:7e:71:aa:e7:4f:18:8d:aa:61:e8:28:fd:5f:1e:
                    ac:4f:b9:28:cb:f9:a4:fe:42:2a:0e:58:e9:cb:59:
                    50:52:54:98:b1:ef:50:05:88:08:40:c5:dd:78:8e:
                    e1:57:5a:a4:17:c6:ca:26:1b:9f:2e:02:1d:f8:cd:
                    04:3a:1a:e9:dc:a9:c9:2e:c3:43:c7:39:47:7c:74:
                    d8:09:db:64:4f:3d:0b:bc:57:65:ea:59:67:1a:28:
                    63:0c:98:37:17:51:29:bf:87:22:d0:4d:db:16:75:
                    c2:87:05:95:13:da:98:7a:77:24:aa:30:69:e7:af:
                    8c:c5:43:79:29:59:81:df:e7:84:07:cf:4d:b2:df:
                    a2:1a:e7:9c:6e:5f:15:a1:76:37:02:8a:61:2e:13:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:87:60:59:AC:80:3F:8D:C4:29:BB:39:CD:2D:DB:56:39:D1:DD
            X509v3 Authority Key Identifier:
                keyid:BE:CF:4D:77:E2:B9:11:92:57:5E:2D:E0:DC:91:F1:09:BD:B0:DA:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BECF4D77E2B91192575E2DE0DC91F109BDB0DA93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HadZSEdgfsrzsWSbWuTPJbpEXvTSAVat4mgWt9tCHLdD/0/323830343a333264343a3a2f33322d3332203d3e20323635313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:bd:60:a6:d4:10:6f:74:e2:c5:56:f1:0d:3e:99:b6:96:
         ce:50:26:80:55:ad:85:a3:04:7f:0d:c9:2e:36:91:f7:10:07:
         f0:0a:08:9e:36:6f:f8:aa:60:81:d5:14:c8:61:3a:80:b6:95:
         bf:e2:58:cb:8e:d4:2b:d5:69:b1:2e:2b:38:7a:04:8b:48:fc:
         e7:db:af:af:00:a3:72:c2:36:9c:fb:8f:92:62:29:c8:b4:5c:
         50:42:ae:fd:03:e5:e7:a1:10:06:f3:05:19:af:9f:15:f3:a7:
         f5:2a:34:93:78:0b:f5:09:78:a8:d8:12:5a:db:2f:eb:07:b8:
         55:39:73:24:6c:f1:26:5b:a5:74:25:08:31:55:f0:80:43:1a:
         a2:5e:47:08:e8:a3:0f:be:8c:4c:a2:9e:e7:39:cc:a5:22:6b:
         4b:13:d0:9c:51:d2:ac:57:00:23:46:8e:5d:d5:38:38:27:23:
         a8:dc:33:1d:4d:c3:c7:3a:35:22:37:13:d1:b9:6e:e9:a3:27:
         f9:66:8c:cc:0a:9b:07:df:e5:90:a4:d0:1e:32:a0:71:dd:ab:
         66:e0:66:9d:dd:45:92:b2:7b:e5:01:35:83:12:f0:21:99:21:
         2e:94:14:43:84:80:bd:19:e7:9a:45:20:77:aa:5a:f3:e7:9b:
         2c:ca:d6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:31 2024 by rpki-client on console.sobornost.net