Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a343030303a3a2f33342d3634203d3e203238313235.roa
File:                     323830343a313438383a343030303a3a2f33342d3634203d3e203238313235.roa (raw, json)
Hash identifier:          T1+vLbxazaXdxMAMODDzsf48Fo9uhUKEX/fbKFc2IKE=
Subject key identifier:   7A:24:2E:47:9B:B9:72:36:CA:06:EE:A8:70:EA:E2:FD:92:06:68:1E
Certificate issuer:       /CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
Certificate serial:       12639FC780FE6A678B827FE8805660880456557D
Authority key identifier: 26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a343030303a3a2f33342d3634203d3e203238313235.roa
Signing time:             Thu 30 Sep 2021 18:58:52 +0000
ROA not before:           Thu 30 Sep 2021 18:53:52 +0000
ROA not after:            Fri 30 Sep 2022 18:58:52 +0000
asID:                     28125
IP address blocks:        2804:1488:4000::/34 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:63:9f:c7:80:fe:6a:67:8b:82:7f:e8:80:56:60:88:04:56:55:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93
        Validity
            Not Before: Sep 30 18:53:52 2021 GMT
            Not After : Sep 30 18:58:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:62:d7:ac:57:5f:14:2a:1a:90:82:3b:b7:
                    3f:0c:19:ec:fc:7a:37:24:1a:28:48:19:69:33:9f:
                    ad:11:a4:fb:b7:38:a4:51:88:47:2f:11:ae:92:73:
                    31:95:26:d3:1f:52:bc:19:0f:6c:4a:62:7a:9b:e7:
                    58:58:8f:c7:f1:b3:78:41:c0:21:0d:3c:b0:bc:18:
                    e9:15:1e:21:2b:4c:f0:6f:04:72:be:49:2c:bb:32:
                    3a:c7:40:9e:70:0d:0f:ac:3c:d0:e2:d0:94:87:87:
                    1b:92:a8:88:ae:34:fc:51:41:c1:1b:f5:76:ed:18:
                    76:aa:dd:74:a7:77:19:86:1c:a7:12:6d:81:da:c6:
                    cf:8b:52:e4:19:0d:a8:57:46:15:5c:3e:8e:50:a6:
                    67:8a:a6:2c:d4:3b:75:4a:5a:1c:9d:1d:ae:ca:98:
                    77:1e:bf:82:ce:cb:6e:35:d4:95:7f:2e:0f:77:9d:
                    83:2b:2d:ed:7f:b8:22:f2:64:8d:7a:de:f4:48:76:
                    eb:8f:01:30:9d:a1:ab:05:41:fb:9e:9c:a9:f8:64:
                    ec:31:1f:e3:a6:cc:98:82:83:f1:a7:6c:77:9f:af:
                    6a:3d:7e:e3:17:13:93:1f:e1:67:b8:09:b5:7c:8c:
                    88:f3:81:4c:45:d4:5d:be:d2:5e:bc:ea:8c:36:f0:
                    0a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:2E:47:9B:B9:72:36:CA:06:EE:A8:70:EA:E2:FD:92:06:68:1E
            X509v3 Authority Key Identifier:
                keyid:26:7F:64:B0:BC:7F:BA:7A:C7:B5:6F:D7:E9:A0:51:AF:78:7A:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/267F64B0BC7FBA7AC7B56FD7E9A051AF787A4A93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a343030303a3a2f33342d3634203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:ca:98:14:c5:ca:5c:19:f5:88:21:52:74:a2:62:38:e6:
         c2:de:d8:40:92:87:dd:4c:95:3a:02:5a:e4:47:7e:38:a7:04:
         17:26:df:29:4b:d7:db:f2:c9:f3:b8:f4:1d:3e:94:91:13:d3:
         6e:90:ee:5c:e8:d1:85:7c:06:ef:ad:eb:68:3c:ff:8c:1e:c9:
         b7:c5:85:e5:2f:47:9c:bf:16:29:e5:4e:37:5b:15:b7:81:57:
         6f:b0:21:d4:25:e0:a3:b5:10:0f:8f:ed:d2:17:74:0b:d5:48:
         21:60:e5:fa:99:33:71:b9:7c:c1:ed:b9:41:ff:ef:a9:bc:b5:
         14:5f:c0:48:1a:c4:58:47:ef:2e:e1:fa:82:9c:45:6b:7a:94:
         65:29:cd:3a:09:99:68:4b:22:89:ff:f3:54:bd:b2:3e:10:6b:
         ab:72:81:2d:2b:d9:e5:a0:99:be:34:f5:75:14:b8:d2:b3:27:
         e5:c3:b5:dc:4b:a3:c5:70:07:4a:87:f8:42:c7:98:2c:23:16:
         e3:0b:bc:ec:a8:9a:9d:83:e0:db:7d:ad:0a:0b:f6:bd:a7:35:
         71:04:19:26:f7:67:c2:41:8f:fd:c3:b3:41:9d:01:ee:00:63:
         c1:8a:49:af:ef:7f:8e:4b:82:8e:00:a7:5e:8c:6d:59:21:86:
         f3:99:4a:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org