Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32322d3232203d3e20323635303636.roa
File:                     3136382e3132312e3230302e302f32322d3232203d3e20323635303636.roa (raw, json)
Hash identifier:          uDRAbxsSOpDDbcmPdTa0D9CXlsQ1IHlSq2WWgNYy5PQ=
Subject key identifier:   57:CA:AB:C8:BC:45:35:9A:51:65:20:92:E7:B3:E2:AC:CC:AB:66:0F
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       68C72C6DBB5638BE99EEC8516A0D295843C4334D
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32322d3232203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:28 +0000
ROA not before:           Sat 05 Jun 2021 20:31:28 +0000
ROA not after:            Sat 04 Jun 2022 20:36:28 +0000
asID:                     265066
IP address blocks:        168.121.200.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c7:2c:6d:bb:56:38:be:99:ee:c8:51:6a:0d:29:58:43:c4:33:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:28 2021 GMT
            Not After : Jun  4 20:36:28 2022 GMT
        Subject: CN=3082010A0282010100E62119AC45124DFDF56C63402AD113E475D97B674A7278EC63CED2CFA1C35C102E89B547378ADE4CC22A630D2BD797F0730364634AE13E2BD964188ACF87DC16C1B06AC815C360575BCCFF02E490C502E729E603EF4909E00FB9FFC5DDF66C430EFC90FBFBBA4BC65CAC461E9FE0B6D44ABBA4C8C413011F364B072F4DD08264B92435D66D9F52EC14046F3D4FB4EF532929F681E2021772F50B4FAD9FBC9BEC8BE9CE99A4320B895661D7F13104C93624E4D1CF1E8C39B140FA8488FDCA9E0794CD27D1F3B12E724FF063A5461BA195D11729B3C2F63D07F861462501ACCAC7FBB20D1AB9D23DDA5BE7976D2EB7040402BDCD5B983C10D574C3C99A8DCF54CF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:21:19:ac:45:12:4d:fd:f5:6c:63:40:2a:d1:
                    13:e4:75:d9:7b:67:4a:72:78:ec:63:ce:d2:cf:a1:
                    c3:5c:10:2e:89:b5:47:37:8a:de:4c:c2:2a:63:0d:
                    2b:d7:97:f0:73:03:64:63:4a:e1:3e:2b:d9:64:18:
                    8a:cf:87:dc:16:c1:b0:6a:c8:15:c3:60:57:5b:cc:
                    ff:02:e4:90:c5:02:e7:29:e6:03:ef:49:09:e0:0f:
                    b9:ff:c5:dd:f6:6c:43:0e:fc:90:fb:fb:ba:4b:c6:
                    5c:ac:46:1e:9f:e0:b6:d4:4a:bb:a4:c8:c4:13:01:
                    1f:36:4b:07:2f:4d:d0:82:64:b9:24:35:d6:6d:9f:
                    52:ec:14:04:6f:3d:4f:b4:ef:53:29:29:f6:81:e2:
                    02:17:72:f5:0b:4f:ad:9f:bc:9b:ec:8b:e9:ce:99:
                    a4:32:0b:89:56:61:d7:f1:31:04:c9:36:24:e4:d1:
                    cf:1e:8c:39:b1:40:fa:84:88:fd:ca:9e:07:94:cd:
                    27:d1:f3:b1:2e:72:4f:f0:63:a5:46:1b:a1:95:d1:
                    17:29:b3:c2:f6:3d:07:f8:61:46:25:01:ac:ca:c7:
                    fb:b2:0d:1a:b9:d2:3d:da:5b:e7:97:6d:2e:b7:04:
                    04:02:bd:cd:5b:98:3c:10:d5:74:c3:c9:9a:8d:cf:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:AB:C8:BC:45:35:9A:51:65:20:92:E7:B3:E2:AC:CC:AB:66:0F
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32322d3232203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:1c:4f:23:2b:7b:2f:82:c9:1b:ad:9b:44:16:3a:8a:e8:fe:
         f7:70:26:48:c3:b3:f3:40:c4:92:fa:d3:1e:4c:45:d3:69:ca:
         b8:39:8a:01:2e:ba:0d:63:47:a9:90:a7:84:21:be:95:de:18:
         bd:8b:9b:67:57:26:b8:e6:f3:6e:fb:a5:1a:14:87:7e:33:8c:
         d4:fa:9a:8a:f2:04:f8:c3:70:b0:e5:0c:17:f3:2f:88:89:6b:
         15:53:5c:6a:a5:1e:80:64:b3:4f:2a:b3:bd:65:c7:52:26:35:
         bd:61:51:4d:90:ac:b5:3a:e9:4c:c3:96:19:5a:64:6c:3c:02:
         88:02:de:c4:e9:64:fb:e9:a4:c1:72:69:04:d4:0e:60:0b:af:
         08:f0:fe:9b:17:05:15:c4:0f:57:16:6b:7b:59:2d:e5:b8:14:
         3f:30:aa:76:b6:34:25:85:5c:8e:90:f5:44:0a:5b:e6:40:42:
         0c:b7:bb:a1:eb:22:49:9a:c0:98:31:f9:10:33:07:20:f4:61:
         c0:4d:38:4d:21:61:76:ba:16:e2:50:9e:47:63:8d:18:ea:b6:
         d9:c6:1a:dc:c0:aa:36:6a:07:27:02:d7:41:ab:7a:f3:67:3d:
         eb:d3:5c:6c:89:f4:e2:b7:78:be:89:39:12:0a:50:c7:b5:4e:
         cc:c0:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org