Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a3130303a3a2f34382d3634203d3e203238313235.roa
File:                     323830343a313438383a3130303a3a2f34382d3634203d3e203238313235.roa (raw, json)
Hash identifier:          qbZp4FdjEvNkkzjP1wvgJRBWiyKA0Aup2ssI5rW/DtE=
Subject key identifier:   F0:50:E8:0B:AE:A8:BE:67:A4:E5:5A:ED:8D:13:DC:FD:F2:DD:CA:4F
Certificate issuer:       /CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
Certificate serial:       1070C5C7586FA105830C362B8B1DF11A713CB314
Authority key identifier: 26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a3130303a3a2f34382d3634203d3e203238313235.roa
Signing time:             Thu 30 Sep 2021 18:56:35 +0000
ROA not before:           Thu 30 Sep 2021 18:51:35 +0000
ROA not after:            Fri 30 Sep 2022 18:56:35 +0000
asID:                     28125
IP address blocks:        2804:1488:100::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:70:c5:c7:58:6f:a1:05:83:0c:36:2b:8b:1d:f1:1a:71:3c:b3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
        Validity
            Not Before: Sep 30 18:51:35 2021 GMT
            Not After : Sep 30 18:56:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:62:6f:4a:a2:c4:c9:37:f9:da:26:35:77:
                    d8:f8:f8:e6:da:97:c1:e0:cf:72:d6:e7:45:2c:cf:
                    69:41:66:be:e0:2c:d5:1c:8d:bb:93:1b:2c:60:f9:
                    de:33:ec:70:f9:ea:ba:0b:6b:f0:8b:e1:b7:6d:9b:
                    92:9b:c3:2c:05:83:85:8f:6f:11:69:b9:b1:c2:1e:
                    73:44:4f:6b:14:b8:c5:f7:0d:a5:77:92:5f:1b:2f:
                    df:70:9a:c9:63:e9:dd:7e:09:0f:4c:15:ed:f1:c6:
                    1e:87:10:02:34:d1:ca:04:54:25:8d:a8:76:48:83:
                    73:a1:59:ef:b1:8c:4d:82:fe:f3:bb:6e:a6:a9:ba:
                    ed:9b:cc:1d:9c:cf:b2:34:a6:dd:8e:f1:fb:b0:f2:
                    b1:cf:4c:50:12:ad:0d:48:a2:bc:ac:11:0f:5f:21:
                    02:57:a3:58:7a:91:39:02:ae:44:52:cd:74:7e:47:
                    05:a7:f6:ed:93:60:70:66:42:8e:5d:37:8c:df:ae:
                    92:a5:9a:36:86:0c:bb:24:b2:35:28:29:17:84:75:
                    12:48:ce:61:b6:98:f0:e0:4f:83:13:c8:ad:c6:b0:
                    4f:1e:9f:33:f4:c2:5e:70:82:b1:81:b0:9c:6f:7d:
                    ba:d7:87:3c:d4:d1:6d:6e:14:57:e5:0f:9e:a4:31:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:E8:0B:AE:A8:BE:67:A4:E5:5A:ED:8D:13:DC:FD:F2:DD:CA:4F
            X509v3 Authority Key Identifier:
                keyid:26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a3130303a3a2f34382d3634203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:56:c2:4e:9c:d2:d2:38:2e:2a:2b:d6:c3:6c:ba:4f:92:
         56:f8:21:da:78:d4:ec:9d:fb:1b:12:f3:bc:38:f2:f1:39:f5:
         6f:ac:b3:17:4a:61:e7:7c:a2:7c:08:98:8f:f0:7d:80:6b:23:
         8d:c1:ff:1a:14:65:b7:c9:a6:f5:03:4e:31:1e:0a:96:fc:49:
         cb:20:c7:50:e6:be:c7:cf:9b:47:45:5e:20:83:3e:17:82:7f:
         65:54:2f:de:6e:7b:b7:30:85:89:0d:50:b7:14:bf:4e:a6:41:
         e3:41:9a:70:6a:e0:e1:58:99:68:d8:50:ba:20:a8:57:4a:5e:
         51:47:31:8b:5e:8d:1a:64:c5:b1:a5:cb:0e:02:ab:9d:e5:1f:
         e1:55:be:1a:d1:b9:66:0a:bd:46:3c:c0:96:29:21:d1:d8:64:
         01:ce:ec:19:79:95:c2:b5:2f:e9:63:5e:5d:a2:74:07:42:f6:
         a9:b2:c7:21:6c:e3:7d:56:73:fc:cc:47:49:c4:75:64:b2:53:
         91:54:29:f4:7a:78:9e:a5:fc:19:ae:9d:28:75:d5:f8:2a:64:
         7e:08:b7:3f:35:22:91:57:f2:f3:66:70:52:90:23:56:c2:8d:
         be:50:51:07:36:ff:17:b5:12:06:04:8b:a3:5a:33:fe:ea:37:
         b7:ee:50:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org