Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa
File:                     3230302e3138352e36342e302f31382d3234203d3e203136363835.roa (raw, json)
Hash identifier:          xD6XSEAAJDkPoAvvna3CwKN9sJgBvGjjDGfNEL/9L68=
Subject key identifier:   E4:C2:DF:6D:6A:5F:94:15:4D:F8:C0:5B:FC:8E:7D:9D:55:0B:2F:04
Certificate issuer:       /CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
Certificate serial:       1683A5CA6A1165A89483772CDDAF61F3F95B69D2
Authority key identifier: 02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa
Signing time:             Wed 26 Jul 2023 13:24:25 +0000
ROA not before:           Wed 26 Jul 2023 13:19:25 +0000
ROA not after:            Wed 24 Jul 2024 13:24:25 +0000
asID:                     16685
IP address blocks:        200.185.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:83:a5:ca:6a:11:65:a8:94:83:77:2c:dd:af:61:f3:f9:5b:69:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
        Validity
            Not Before: Jul 26 13:19:25 2023 GMT
            Not After : Jul 24 13:24:25 2024 GMT
        Subject: CN=E4C2DF6D6A5F94154DF8C05BFC8E7D9D550B2F04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:6a:61:56:71:87:44:ae:ce:09:db:4c:87:
                    d4:19:14:ee:49:91:05:e6:81:a3:13:da:0b:62:ed:
                    e0:de:b3:09:a3:f9:2a:5f:cb:47:73:64:0a:35:cf:
                    5a:d0:2d:17:0e:f7:3c:95:a3:20:4f:84:77:6d:1c:
                    4f:b4:2f:53:51:9a:66:a7:67:b1:5f:b0:af:97:3a:
                    e4:55:b5:38:3e:10:5a:30:00:3f:93:2e:7d:cb:ce:
                    b4:40:9b:9e:31:28:4a:f7:30:fe:83:20:2d:17:4a:
                    7d:77:bd:aa:78:06:e2:21:2e:e9:68:6a:3c:aa:5b:
                    b9:53:f1:d4:9c:ee:b1:14:13:1b:ee:b5:88:8c:94:
                    7e:32:ed:3f:9b:6f:2c:df:fe:d4:b3:53:fd:d7:44:
                    5f:79:e2:a0:4c:38:7d:e8:40:c8:9c:db:60:0d:a3:
                    32:77:01:fe:f3:75:aa:23:c0:39:71:8f:d4:2f:39:
                    c9:76:35:ff:67:f3:4e:1c:f7:50:28:a3:bb:fd:78:
                    8a:4b:77:15:3a:0e:98:9b:bc:c0:b8:c2:83:63:e4:
                    d8:eb:82:5f:10:68:92:21:41:7e:50:2a:a9:f4:ac:
                    94:74:3b:2a:bc:3d:ee:a1:ff:45:d2:fe:57:86:ec:
                    69:23:81:fe:ed:aa:45:1a:7a:c7:d3:1f:b5:ec:d2:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C2:DF:6D:6A:5F:94:15:4D:F8:C0:5B:FC:8E:7D:9D:55:0B:2F:04
            X509v3 Authority Key Identifier:
                keyid:02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/3230302e3138352e36342e302f31382d3234203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:22:96:cf:f2:a9:48:da:69:07:81:5d:29:d6:67:c1:ad:
         a0:bd:71:4f:e6:79:c1:91:5b:99:58:b4:7c:1c:61:f8:6e:83:
         a7:ff:a3:5d:a6:98:90:16:12:db:f3:34:84:c3:59:77:2e:68:
         9c:1b:f4:f6:04:53:e1:c7:32:91:5b:9c:a0:84:f6:a2:1d:81:
         9c:fa:f2:46:0a:a9:6f:90:74:c5:f3:1d:f6:e3:4c:07:a1:9c:
         d8:a5:5c:00:53:44:24:ba:94:cc:bf:df:c4:3e:50:fb:b2:4d:
         c7:2e:a8:62:cb:99:7b:82:96:c1:53:34:54:90:08:01:f0:10:
         52:07:4f:37:9c:e0:02:77:d4:4d:48:22:18:e6:cb:a6:46:92:
         f4:71:c4:b6:4a:be:2b:6a:46:7b:25:7b:05:5f:69:e7:d6:ef:
         41:c0:3a:ba:a9:09:38:ac:5f:fb:fd:12:51:7c:ec:cb:be:32:
         33:2d:b1:24:32:3d:32:6e:db:29:0b:ea:4b:96:fa:1f:8d:6a:
         8a:9b:35:05:19:c5:50:00:8b:44:7d:e4:b3:ea:75:76:26:c6:
         32:9d:96:63:db:c9:aa:7a:26:9b:aa:14:89:9c:56:a3:c5:0e:
         e6:c9:4d:b7:dc:bf:a4:64:59:56:05:2c:51:21:5f:ed:9e:6a:
         54:42:1f:ac
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFoOlymoRZaiUg3cs3a9h8/lbadIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIxRTk0MzU3NzY1QjU3MzA4MjM0NUY5REY3QUE1QUNC
MjdBOEFBNDAeFw0yMzA3MjYxMzE5MjVaFw0yNDA3MjQxMzI0MjVaMDMxMTAvBgNV
BAMTKEU0QzJERjZENkE1Rjk0MTU0REY4QzA1QkZDOEU3RDlENTUwQjJGMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenWphVnGHRK7OCdtMh9QZFO5J
kQXmgaMT2gti7eDeswmj+Spfy0dzZAo1z1rQLRcO9zyVoyBPhHdtHE+0L1NRmman
Z7FfsK+XOuRVtTg+EFowAD+TLn3LzrRAm54xKEr3MP6DIC0XSn13vap4BuIhLulo
ajyqW7lT8dSc7rEUExvutYiMlH4y7T+bbyzf/tSzU/3XRF954qBMOH3oQMic22AN
ozJ3Af7zdaojwDlxj9QvOcl2Nf9n804c91Aoo7v9eIpLdxU6DpibvMC4woNj5Njr
gl8QaJIhQX5QKqn0rJR0Oyq8Pe6h/0XS/leG7Gkjgf7tqkUaesfTH7Xs0oKzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5MLfbWpflBVN+MBb/I59nVULLwQwHwYDVR0j
BBgwFoAUAh6UNXdltXMII0X533qlrLJ6iqQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkJwR2g0aTN6NUFadUtHeTlxRVhmRVV3RThXUDFyajlxekJmSGg2bWtN
OHovMC8wMjFFOTQzNTc3NjVCNTczMDgyMzQ1RjlERjdBQTVBQ0IyN0E4QUE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyMUU5NDM1Nzc2NUI1NzMw
ODIzNDVGOURGN0FBNUFDQjI3QThBQTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pCcEdoNGkzejVBWnVLR3k5cUVYZkVVd0U4V1Axcmo5cXpCZkhoNm1rTTh6LzAv
MzIzMDMwMmUzMTM4MzUyZTM2MzQyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM2
MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyLlAMA0GCSqGSIb3DQEBCwUAA4IBAQBftyKWz/Kp
SNppB4FdKdZnwa2gvXFP5nnBkVuZWLR8HGH4boOn/6NdppiQFhLb8zSEw1l3Lmic
G/T2BFPhxzKRW5yghPaiHYGc+vJGCqlvkHTF8x3240wHoZzYpVwAU0QkupTMv9/E
PlD7sk3HLqhiy5l7gpbBUzRUkAgB8BBSB083nOACd9RNSCIY5sumRpL0ccS2Sr4r
akZ7JXsFX2nn1u9BwDq6qQk4rF/7/RJRfOzLvjIzLbEkMj0ybtspC+pLlvofjWqK
mzUFGcVQAItEfeSz6nV2JsYynZZj28mqeiabqhSJnFajxQ7myU233L+kZFlWBSxR
IV/tnmpUQh+s
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org