Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32332d3233203d3e20323635303636.roa
File:                     3136382e3132312e3230302e302f32332d3233203d3e20323635303636.roa (raw, json)
Hash identifier:          /d3fHT1Ppp8vzGqFxwRM/VZ9daJMfgwKxpozTqMAQ04=
Subject key identifier:   96:B3:E2:98:5A:9D:6E:0E:8E:69:E0:DB:9F:2E:18:8E:F4:39:F9:A4
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       025E6F938C700CF8E26E4A19AE4776D36575FFE8
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32332d3233203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:32 +0000
ROA not before:           Sat 05 Jun 2021 20:31:32 +0000
ROA not after:            Sat 04 Jun 2022 20:36:32 +0000
asID:                     265066
IP address blocks:        168.121.200.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:6f:93:8c:70:0c:f8:e2:6e:4a:19:ae:47:76:d3:65:75:ff:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:32 2021 GMT
            Not After : Jun  4 20:36:32 2022 GMT
        Subject: CN=3082010A0282010100CA5DDBDBA2EC7B0955B0FE3C39701C713797983E48583F6BF079480F142D97432171EED84AF0D80247C566A81F596B3031A46F3D78ADFDB0170420112DE0D0CA4D614BA436E7258744C31CCFEE80D6190933733AE26F0746FD3ABE442DAC35C085FCF05B0E7281E68359BA749E1A7D9CDA0FD2D00B106DFC9117FBA8D5BCC5EF897D9D27325E2693AA0C10E3ABE86D909E977E338EF53FEACFDAC23D4F723902403EFA56B6C4600DEF14577213AF284D075ADB6A93A1877F5A1E56C203B939C5285D03D6E189811B74D379486C0892A4AF6A0BB064E7F05AC68CDACF5A270752A774B30438CC321B2330428E7D301FFD5B978BFD9B8E08D9A79088D3FE518D670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:db:db:a2:ec:7b:09:55:b0:fe:3c:39:70:
                    1c:71:37:97:98:3e:48:58:3f:6b:f0:79:48:0f:14:
                    2d:97:43:21:71:ee:d8:4a:f0:d8:02:47:c5:66:a8:
                    1f:59:6b:30:31:a4:6f:3d:78:ad:fd:b0:17:04:20:
                    11:2d:e0:d0:ca:4d:61:4b:a4:36:e7:25:87:44:c3:
                    1c:cf:ee:80:d6:19:09:33:73:3a:e2:6f:07:46:fd:
                    3a:be:44:2d:ac:35:c0:85:fc:f0:5b:0e:72:81:e6:
                    83:59:ba:74:9e:1a:7d:9c:da:0f:d2:d0:0b:10:6d:
                    fc:91:17:fb:a8:d5:bc:c5:ef:89:7d:9d:27:32:5e:
                    26:93:aa:0c:10:e3:ab:e8:6d:90:9e:97:7e:33:8e:
                    f5:3f:ea:cf:da:c2:3d:4f:72:39:02:40:3e:fa:56:
                    b6:c4:60:0d:ef:14:57:72:13:af:28:4d:07:5a:db:
                    6a:93:a1:87:7f:5a:1e:56:c2:03:b9:39:c5:28:5d:
                    03:d6:e1:89:81:1b:74:d3:79:48:6c:08:92:a4:af:
                    6a:0b:b0:64:e7:f0:5a:c6:8c:da:cf:5a:27:07:52:
                    a7:74:b3:04:38:cc:32:1b:23:30:42:8e:7d:30:1f:
                    fd:5b:97:8b:fd:9b:8e:08:d9:a7:90:88:d3:fe:51:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B3:E2:98:5A:9D:6E:0E:8E:69:E0:DB:9F:2E:18:8E:F4:39:F9:A4
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230302e302f32332d3233203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:e6:9e:0b:80:8b:db:06:1c:e9:b6:b4:b8:c5:a1:20:da:
         52:0d:4f:69:77:32:4e:5f:a5:40:e0:4a:51:1a:27:86:1e:e3:
         8f:f4:c5:fb:08:74:51:04:e8:41:06:0d:b1:3a:47:b0:95:0f:
         6c:28:1b:cd:62:dc:ba:c9:76:52:c2:25:2d:af:42:a8:dc:d9:
         a0:8f:38:aa:cd:92:4d:31:e8:62:9c:64:76:ab:0a:5d:96:dc:
         7e:f8:9d:5b:42:48:7f:18:09:0d:25:dd:67:19:c6:ff:ce:2e:
         c2:3d:2a:10:aa:98:b1:ab:cd:3f:a1:ea:37:2d:70:fd:dc:65:
         03:05:11:a3:d4:b1:49:29:21:a8:32:d3:5d:17:5a:f8:dc:49:
         8e:25:20:34:8b:69:25:a8:c1:ff:b2:0c:a2:c7:73:3b:3c:eb:
         c6:e0:3a:2c:ab:10:ae:a1:42:86:fc:46:84:94:c2:5e:29:76:
         35:e9:f4:0f:25:f7:7e:cc:ea:39:da:2e:08:1d:35:38:0d:22:
         de:5f:7e:a1:d3:3f:d1:33:e9:93:05:58:b2:28:9f:0d:ac:39:
         9d:e4:a4:f5:76:f1:91:18:d2:ce:49:3e:a1:5a:36:b6:d4:9b:
         d2:1e:cf:80:0c:2d:28:57:30:90:46:dd:3c:8a:01:52:58:9c:
         45:b1:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org