Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa
File:                     323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa (raw, json)
Hash identifier:          lvxcCICOYfDlOaJ+0vTiO3L3IxCx8L+POi2VPnLf65A=
Subject key identifier:   56:BE:FF:7F:54:A8:95:96:06:B6:7D:40:85:CC:58:D5:E4:23:4A:81
Certificate issuer:       /CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
Certificate serial:       450FAC8CDD0B38CA2590DDFE6589288BE732CA87
Authority key identifier: 02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa
Signing time:             Tue 25 Jul 2023 20:56:28 +0000
ROA not before:           Tue 25 Jul 2023 20:51:28 +0000
ROA not after:            Tue 23 Jul 2024 20:56:28 +0000
asID:                     16685
IP address blocks:        2001:1280:4000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0f:ac:8c:dd:0b:38:ca:25:90:dd:fe:65:89:28:8b:e7:32:ca:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021E94357765B573082345F9DF7AA5ACB27A8AA4
        Validity
            Not Before: Jul 25 20:51:28 2023 GMT
            Not After : Jul 23 20:56:28 2024 GMT
        Subject: CN=56BEFF7F54A8959606B67D4085CC58D5E4234A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:5d:0a:93:80:ed:d3:b2:77:c6:e0:b2:89:
                    27:22:d5:74:93:aa:9e:e0:49:81:2a:fc:38:85:06:
                    63:c9:ad:3f:a8:61:46:9e:ff:ed:1c:bd:ad:46:9a:
                    42:f8:28:a7:5a:e5:4f:62:f0:4a:31:a1:02:78:2b:
                    88:af:9f:c5:3a:9a:90:99:50:8d:9a:fb:d3:d3:86:
                    27:d5:9c:99:18:13:47:68:35:48:0d:93:98:76:52:
                    24:60:55:b3:40:29:ea:25:91:1f:88:68:67:4b:14:
                    9c:9e:c4:39:01:20:b8:7e:21:de:e1:d2:07:b0:3b:
                    88:a7:40:df:a8:f5:ac:d5:ee:51:3a:e4:84:0a:3e:
                    c3:c8:56:12:ca:1d:33:c7:8c:2f:4e:bc:ba:92:1b:
                    58:65:9a:6a:3b:74:f3:5a:52:82:bf:48:c2:5b:1b:
                    d3:d3:01:c3:40:12:40:57:7b:c0:b2:8b:fa:2c:fb:
                    0c:88:c7:e8:a6:0b:f5:2d:26:3b:9c:ef:50:ad:61:
                    41:88:43:c4:55:40:d9:ef:54:44:77:71:83:e7:b3:
                    cc:68:e5:45:d5:eb:1d:17:7e:0f:f3:3e:7c:4c:26:
                    54:7e:18:81:35:77:d6:52:c0:d9:99:0e:2a:d5:b6:
                    35:d0:df:0d:7f:49:b0:0b:54:e3:08:6d:63:9c:ff:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:FF:7F:54:A8:95:96:06:B6:7D:40:85:CC:58:D5:E4:23:4A:81
            X509v3 Authority Key Identifier:
                keyid:02:1E:94:35:77:65:B5:73:08:23:45:F9:DF:7A:A5:AC:B2:7A:8A:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/021E94357765B573082345F9DF7AA5ACB27A8AA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/0/323030313a313238303a343030303a3a2f33362d3438203d3e203136363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1280:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7e:4d:ae:70:ef:9c:30:3e:08:43:f1:80:7d:c6:40:41:37:55:
         97:83:53:0d:be:65:d9:e7:2a:c3:fb:b4:bf:5a:c5:a0:2d:ed:
         c4:04:37:01:bf:3b:48:a4:41:36:6b:68:bc:18:db:61:79:a8:
         e7:02:ed:c2:3b:ef:e7:e7:3a:aa:84:b5:b8:b6:92:1d:7c:a3:
         7e:12:bd:66:b6:fd:a3:22:34:3b:e2:b3:6c:23:d1:48:81:67:
         3c:51:67:d6:74:cc:38:e5:b4:39:25:3c:4a:52:a0:af:c4:26:
         f2:4c:0c:d9:fe:30:63:c3:76:c6:2c:d6:6a:74:38:0c:64:4e:
         4e:bb:11:ff:8d:ec:93:1d:ed:b0:19:14:7f:96:f7:c4:8b:25:
         47:9e:87:ef:5a:da:57:af:76:b6:40:f7:10:ec:a8:4e:1a:b3:
         57:79:59:9e:39:38:31:b0:e9:e3:2c:c1:e3:39:4f:05:2c:10:
         09:54:32:28:45:c1:4e:76:da:90:d9:07:4f:21:f8:28:4d:64:
         c8:7a:d9:79:7e:0c:66:72:48:95:e4:02:db:88:95:1d:70:b8:
         54:a0:64:ae:1b:ad:b2:fd:87:1a:32:19:56:dd:12:3f:8d:2d:
         c2:e8:24:4f:64:a8:b2:21:64:1f:3b:c9:76:fb:5c:fe:80:dd:
         da:8b:70:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org