Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa
File:                     3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa (raw, json)
Hash identifier:          QXLSwvh4o14k+cVhRHpXBexOXbj5nyT6WfTxXmI1sMM=
Subject key identifier:   10:E2:D0:56:9F:D3:65:9D:F7:3B:BD:C8:50:48:F8:67:D3:7D:A2:5A
Certificate issuer:       /CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
Certificate serial:       34F10AFD2FCEE777B527C6DA23CF468EC60C60D8
Authority key identifier: 02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa
Signing time:             Wed 26 Jul 2023 13:24:31 +0000
ROA not before:           Wed 26 Jul 2023 13:19:31 +0000
ROA not after:            Wed 24 Jul 2024 13:24:31 +0000
asID:                     16685
IP address blocks:        200.185.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f1:0a:fd:2f:ce:e7:77:b5:27:c6:da:23:cf:46:8e:c6:0c:60:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
        Validity
            Not Before: Jul 26 13:19:31 2023 GMT
            Not After : Jul 24 13:24:31 2024 GMT
        Subject: CN=10E2D0569FD3659DF73BBDC85048F867D37DA25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:c9:6b:30:83:c3:19:89:46:9e:70:f0:72:
                    af:66:55:45:6c:6f:51:10:08:1b:f8:aa:4a:5d:e1:
                    ea:18:f4:bb:fb:60:c2:04:d1:4b:79:0e:d3:27:bc:
                    98:9f:27:08:28:88:2a:f2:e7:7e:71:c2:d6:c0:f1:
                    15:9d:62:03:5b:22:f7:f8:ff:eb:a5:05:21:81:78:
                    ed:73:4b:1f:af:ee:9c:70:7c:e1:25:8f:73:f5:8d:
                    46:fe:d1:b5:3b:31:d7:c8:92:74:51:9a:2d:20:0f:
                    75:3e:86:a4:25:d2:e2:54:b5:5d:f5:70:2d:9a:9b:
                    23:46:14:96:aa:a5:38:3c:03:4c:90:74:88:67:4b:
                    63:5b:3b:f7:b3:3b:e0:0c:c4:15:95:e7:96:1f:96:
                    58:70:41:12:1e:51:38:c9:0c:dc:94:c4:40:64:c6:
                    de:32:4d:c8:92:27:ea:d7:d9:1e:e1:2c:d3:b7:e9:
                    02:18:97:97:ce:6a:74:53:68:29:db:aa:4c:d5:4b:
                    e6:86:30:78:af:2d:69:cf:35:14:21:ae:94:a4:58:
                    fb:0a:ed:ee:cf:38:27:20:59:25:50:4d:12:9a:bc:
                    bc:90:ce:b8:9a:63:2e:38:c7:0d:70:45:1c:59:c9:
                    21:af:a1:ab:62:59:c3:26:df:e0:9b:ca:d7:9b:1b:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:D0:56:9F:D3:65:9D:F7:3B:BD:C8:50:48:F8:67:D3:7D:A2:5A
            X509v3 Authority Key Identifier:
                keyid:02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e3132382e302f31382d3234203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:cc:a9:a6:b6:79:c0:18:d7:de:44:33:b8:e7:be:0b:cb:
         2a:d8:30:ff:31:36:0c:2e:59:a3:73:51:a8:5c:d3:75:72:ae:
         0d:4f:67:c0:85:a4:df:e6:28:66:de:42:ce:d6:b8:b6:d1:2c:
         d5:47:ec:cd:bd:00:fd:48:e7:3c:dd:27:bb:81:d9:ce:10:39:
         6f:f1:e4:af:ef:ef:21:b6:06:8c:97:37:c3:23:00:92:35:67:
         ad:f5:6d:63:43:34:a2:3b:e0:83:99:f0:19:58:c3:1c:46:ee:
         1a:de:45:86:b8:4b:3d:26:26:60:e1:e1:d4:9f:23:cb:a5:4c:
         ca:c7:13:15:00:2e:76:c6:cb:fa:69:07:ec:8e:85:eb:c0:83:
         68:fe:d7:50:9f:12:06:53:f1:e6:53:91:0b:09:b4:97:09:c0:
         66:cc:b2:2e:57:7f:28:1c:5b:c1:02:35:e8:8f:26:ff:8b:cb:
         2f:70:2e:8c:f6:55:74:29:72:fc:87:40:68:c8:3a:49:59:c9:
         80:09:13:0b:0f:43:c5:76:15:78:ca:4c:03:62:8c:57:76:ef:
         94:3d:dc:2c:9a:35:6b:86:f5:ab:0e:78:8b:d2:78:4f:fd:b6:
         23:08:05:65:a4:fe:ef:7b:d1:04:e8:8b:9c:16:49:6e:82:84:
         0f:bf:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org