Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a3230303a3a2f34382d3634203d3e203238313235.roa
File:                     323830343a313438383a3230303a3a2f34382d3634203d3e203238313235.roa (raw, json)
Hash identifier:          ESiQwl4OcfYICom9P7JGKMlXkNt7VGSII0kday6HC18=
Subject key identifier:   F1:5C:5C:5F:21:50:B0:A5:F5:60:89:AE:B5:45:1A:F5:63:85:A6:CD
Certificate issuer:       /CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
Certificate serial:       4E745685334C664A76811C427F03C033B3C28900
Authority key identifier: 26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a3230303a3a2f34382d3634203d3e203238313235.roa
Signing time:             Thu 30 Sep 2021 18:58:52 +0000
ROA not before:           Thu 30 Sep 2021 18:53:52 +0000
ROA not after:            Fri 30 Sep 2022 18:58:52 +0000
asID:                     28125
IP address blocks:        2804:1488:200::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:74:56:85:33:4c:66:4a:76:81:1c:42:7f:03:c0:33:b3:c2:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
        Validity
            Not Before: Sep 30 18:53:52 2021 GMT
            Not After : Sep 30 18:58:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:b5:f5:f0:20:d3:33:97:34:9a:5c:91:fa:
                    79:ea:2c:cb:10:55:09:38:4a:c5:b0:a0:22:96:be:
                    a0:14:3f:2e:be:93:66:25:7e:8b:f2:42:01:fe:fb:
                    35:70:d3:6d:7c:8e:09:90:ad:77:92:b7:68:0f:64:
                    9a:90:52:12:54:2d:19:59:ea:4a:1d:2d:f2:27:2c:
                    e9:03:5e:0d:7e:f2:aa:f5:68:22:ae:a4:8d:d1:b9:
                    11:18:3a:1b:af:2c:c1:76:04:b3:60:81:86:03:63:
                    f6:9a:a5:d8:be:6e:ee:b6:f4:52:e6:80:96:09:cd:
                    f2:e2:40:db:fe:73:e8:3a:cf:95:78:cf:6b:21:41:
                    ae:6b:65:7c:8d:73:72:e1:f0:71:b5:18:7d:b1:fd:
                    c1:9f:06:69:d3:36:b7:19:c1:3c:98:45:03:3b:4e:
                    5c:74:01:2c:16:30:3f:68:59:c6:c5:29:b2:0e:a3:
                    15:e1:40:0b:5e:83:82:17:7a:f4:c1:0a:b7:04:a1:
                    f6:f4:15:66:4a:1c:77:3d:82:a9:d7:32:48:72:9d:
                    e8:ba:19:9e:7d:41:38:b7:f9:b5:e5:ef:5e:24:0d:
                    7e:87:7b:70:51:9a:28:63:1d:2c:39:9a:27:98:47:
                    d1:f5:73:8a:a3:c5:f5:39:8b:4c:e1:b1:c2:23:08:
                    a2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5C:5C:5F:21:50:B0:A5:F5:60:89:AE:B5:45:1A:F5:63:85:A6:CD
            X509v3 Authority Key Identifier:
                keyid:26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a3230303a3a2f34382d3634203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:f8:3e:b8:97:5f:38:bb:fb:08:dd:6c:b9:2d:0f:ce:ff:26:
         11:21:08:a6:08:bc:c9:3c:b5:92:a0:8e:00:7d:f3:9b:b6:12:
         72:b4:12:4a:46:0d:1c:b7:14:4c:d9:3d:54:37:dd:ac:38:b0:
         fe:ae:5a:10:d6:48:e7:9d:63:a8:68:16:0b:09:e6:07:09:88:
         ef:4e:8c:7f:31:fb:17:6e:a9:5c:75:44:b7:e9:23:df:93:ab:
         39:c1:c2:f0:05:f3:8e:d4:34:8b:46:af:8d:5d:f5:7b:e5:46:
         f0:6c:34:5a:3c:de:de:c8:47:79:32:5b:c2:3f:e3:25:f1:70:
         9e:94:cf:4c:72:9a:b7:0f:35:3b:76:4f:e7:b0:64:7a:26:85:
         45:ce:e5:d7:1e:55:44:d0:5c:e5:cf:eb:4a:d2:6f:29:ef:bd:
         ff:6d:6e:62:18:2a:9c:a2:2c:0e:fe:ca:57:4f:a1:5b:79:ce:
         73:99:30:b6:1d:b0:a6:81:11:83:f8:62:76:96:ee:7c:c3:14:
         d5:a8:a4:3d:e9:a8:d3:7d:03:7a:22:6d:20:d9:76:0d:0c:4b:
         14:cc:1f:73:5c:fe:37:3e:c8:41:40:87:87:54:3f:77:c5:95:
         8c:1e:bb:38:a2:3e:19:2c:ed:73:b8:7e:6a:41:5f:2a:4d:ff:
         e7:d5:2b:aa
-----BEGIN CERTIFICATE-----
MIIHSjCCBjKgAwIBAgIUTnRWhTNMZkp2gRxCfwPAM7PCiQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY3RjY0QjBCQzdGQkE3QUM3QjU2RkQ3RTlBMDUxQUY3
ODdBNEE5MzAeFw0yMTA5MzAxODUzNTJaFw0yMjA5MzAxODU4NTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc2NUI1RjVGMDIwRDMzMzk3
MzQ5QTVDOTFGQTc5RUEyQ0NCMTA1NTA5Mzg0QUM1QjBBMDIyOTZCRUEwMTQzRjJF
QkU5MzY2MjU3RThCRjI0MjAxRkVGQjM1NzBEMzZEN0M4RTA5OTBBRDc3OTJCNzY4
MEY2NDlBOTA1MjEyNTQyRDE5NTlFQTRBMUQyREYyMjcyQ0U5MDM1RTBEN0VGMkFB
RjU2ODIyQUVBNDhERDFCOTExMTgzQTFCQUYyQ0MxNzYwNEIzNjA4MTg2MDM2M0Y2
OUFBNUQ4QkU2RUVFQjZGNDUyRTY4MDk2MDlDREYyRTI0MERCRkU3M0U4M0FDRjk1
NzhDRjZCMjE0MUFFNkI2NTdDOEQ3MzcyRTFGMDcxQjUxODdEQjFGREMxOUYwNjY5
RDMzNkI3MTlDMTNDOTg0NTAzM0I0RTVDNzQwMTJDMTYzMDNGNjg1OUM2QzUyOUIy
MEVBMzE1RTE0MDBCNUU4MzgyMTc3QUY0QzEwQUI3MDRBMUY2RjQxNTY2NEExQzc3
M0Q4MkE5RDczMjQ4NzI5REU4QkExOTlFN0Q0MTM4QjdGOUI1RTVFRjVFMjQwRDdF
ODc3QjcwNTE5QTI4NjMxRDJDMzk5QTI3OTg0N0QxRjU3MzhBQTNDNUY1Mzk4QjRD
RTFCMUMyMjMwOEEyOTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx2W19fAg0zOXNJpckfp56izLEFUJOErFsKAilr6gFD8uvpNmJX6L
8kIB/vs1cNNtfI4JkK13krdoD2SakFISVC0ZWepKHS3yJyzpA14NfvKq9WgirqSN
0bkRGDobryzBdgSzYIGGA2P2mqXYvm7utvRS5oCWCc3y4kDb/nPoOs+VeM9rIUGu
a2V8jXNy4fBxtRh9sf3BnwZp0za3GcE8mEUDO05cdAEsFjA/aFnGxSmyDqMV4UAL
XoOCF3r0wQq3BKH29BVmShx3PYKp1zJIcp3ouhmefUE4t/m15e9eJA1+h3twUZoo
Yx0sOZonmEfR9XOKo8X1OYtM4bHCIwiilwIDAQABo4ICWDCCAlQwHQYDVR0OBBYE
FPFcXF8hULCl9WCJrrVFGvVjhabNMB8GA1UdIwQYMBaAFCZ/ZLC8f7p6x7Vv1+mg
Ua94ekqTMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pCWHgxbVpiUmd3RHEx
d0I5OUpCY0Zkc1lSWThhSjZhTEtYeDJXcTZ0ZWhOLzAvMjY3RjY0QjBCQzdGQkE3
QUM3QjU2RkQ3RTlBMDUxQUY3ODdBNEE5My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8yNjdGNjRCMEJDN0ZCQTdBQzdCNTZGRDdFOUEwNTFBRjc4N0E0
QTkzLmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9KQlh4MW1aYlJnd0RxMXdCOTlK
QmNGZHNZUlk4YUo2YUxLWHgyV3E2dGVoTi8wLzMyMzgzMDM0M2EzMTM0MzgzODNh
MzIzMDMwM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzIzODMxMzIzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACgEFIgCADANBgkqhkiG9w0BAQsFAAOCAQEAb/g+uJdfOLv7CN1suS0Pzv8m
ESEIpgi8yTy1kqCOAH3zm7YScrQSSkYNHLcUTNk9VDfdrDiw/q5aENZI551jqGgW
CwnmBwmI706MfzH7F26pXHVEt+kj35OrOcHC8AXzjtQ0i0avjV31e+VG8Gw0Wjze
3shHeTJbwj/jJfFwnpTPTHKatw81O3ZP57BkeiaFRc7l1x5VRNBc5c/rStJvKe+9
/21uYhgqnKIsDv7KV0+hW3nOc5kwth2wpoERg/hidpbufMMU1aikPemo030DeiJt
INl2DQxLFMwfc1z+Nz7IQUCHh1Q/d8WVjB67OKI+GSztc7h+akFfKk3/59Urqg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org