Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa
File:                     323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa (raw, json)
Hash identifier:          Z9IkFyUsgyLzC2VkS/srgw9mKc6D1eQQU8s8bT3/PQA=
Subject key identifier:   03:D4:87:38:AF:DF:E5:1F:ED:0C:0D:90:A2:B0:5F:CD:16:F8:53:41
Certificate issuer:       /CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
Certificate serial:       4D94794D58325B6F31974FD00842F70D8D08DC83
Authority key identifier: 02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa
Signing time:             Tue 25 Jul 2023 20:56:21 +0000
ROA not before:           Tue 25 Jul 2023 20:51:21 +0000
ROA not after:            Tue 23 Jul 2024 20:56:21 +0000
asID:                     16685
IP address blocks:        2001:1280:2000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:94:79:4d:58:32:5b:6f:31:97:4f:d0:08:42:f7:0d:8d:08:dc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
        Validity
            Not Before: Jul 25 20:51:21 2023 GMT
            Not After : Jul 23 20:56:21 2024 GMT
        Subject: CN=03D48738AFDFE51FED0C0D90A2B05FCD16F85341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:48:e7:41:6c:97:e4:97:8c:e4:a1:b6:38:c1:
                    94:dd:23:34:21:08:ce:4b:cf:d7:36:8b:6f:b3:32:
                    2d:10:27:a5:be:b6:e3:18:62:90:62:b4:b9:6b:82:
                    06:ac:3d:4b:f0:04:99:18:2a:1d:36:30:c4:b7:58:
                    e3:d3:1f:da:55:db:10:0c:04:44:94:83:a6:71:55:
                    81:17:e3:27:db:ab:19:f3:c1:a2:29:5b:88:04:52:
                    69:8a:72:68:07:9a:66:b1:31:42:81:ed:39:19:8a:
                    da:0a:22:ca:31:3e:98:66:0e:55:fa:e3:69:d9:c1:
                    90:17:7e:b8:3b:2e:69:56:69:db:80:03:3e:5b:b7:
                    b5:a3:8a:6e:14:f3:d3:b0:5c:5b:1b:d9:06:e5:96:
                    18:eb:8b:5d:5a:d6:38:0e:0e:14:94:ff:2f:79:76:
                    aa:be:7a:54:a4:59:d6:2f:8c:ba:8d:8a:aa:b3:40:
                    0d:7f:d0:b3:59:5d:8f:b3:5d:cc:be:6a:25:cb:bf:
                    80:84:d7:e5:c3:e8:d7:8f:b2:36:4e:40:6a:ee:40:
                    84:fe:cd:3f:a0:62:1b:2e:cd:ac:b8:1f:65:d7:6b:
                    45:01:e3:70:b5:24:fc:bb:fc:cd:bb:0b:b8:68:81:
                    e1:36:46:f1:46:ce:5e:0f:69:0d:70:66:e2:05:f4:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:87:38:AF:DF:E5:1F:ED:0C:0D:90:A2:B0:5F:CD:16:F8:53:41
            X509v3 Authority Key Identifier:
                keyid:02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/323030313a313238303a323030303a3a2f33362d3438203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1280:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:62:29:39:29:c7:b3:e2:46:3a:8c:e3:87:42:83:75:54:
         30:7f:e3:33:79:92:63:98:df:d5:db:8e:83:d6:b0:cd:65:88:
         7a:52:ee:d0:9b:e1:e2:5e:39:4f:a6:24:63:6c:92:44:cf:38:
         eb:fc:9c:c7:f5:2d:5e:89:44:9b:93:1b:15:45:8f:ff:19:5a:
         66:10:d1:a0:be:df:25:df:70:71:92:9c:2a:0c:47:84:c4:af:
         26:72:b6:05:24:21:99:46:f2:da:f8:f9:fd:e1:dc:e1:54:36:
         48:36:82:52:56:45:a4:20:71:1d:a4:ea:d2:f9:6e:dd:1e:05:
         f5:db:04:5f:b4:51:2f:9d:48:09:c7:b2:74:13:59:71:b2:57:
         45:d6:75:ba:c2:1b:91:25:c7:0d:85:4e:62:18:1f:d4:3b:9c:
         aa:4c:11:ba:55:d3:71:46:33:2b:eb:5b:66:b3:20:e1:13:9e:
         b6:37:8d:0e:ab:fd:09:aa:1d:c6:c9:65:22:5b:96:1a:ed:46:
         bc:fa:57:de:7e:38:cb:7f:19:d4:2d:21:ad:7f:bf:87:35:3a:
         c0:50:e2:65:d7:06:24:70:43:76:1e:5d:ac:ab:59:4d:04:94:
         be:fd:92:35:03:7a:03:ad:9a:8f:2e:58:2e:41:d9:6c:c4:69:
         d2:f3:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org