Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230312e302f32342d3234203d3e20323635303636.roa
File:                     3136382e3132312e3230312e302f32342d3234203d3e20323635303636.roa (raw, json)
Hash identifier:          1JTO/7AT0wbeQNtD9wc3zShrxw5/Me9F4Gzh2w0Y82Y=
Subject key identifier:   B2:CD:23:3B:DE:81:80:24:9E:50:06:97:06:1A:78:26:81:88:9B:36
Certificate issuer:       /CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
Certificate serial:       19688337C5FF6F8F1BE5AACF358C327B15E0B8A0
Authority key identifier: 1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230312e302f32342d3234203d3e20323635303636.roa
Signing time:             Sat 05 Jun 2021 20:36:27 +0000
ROA not before:           Sat 05 Jun 2021 20:31:27 +0000
ROA not after:            Sat 04 Jun 2022 20:36:27 +0000
asID:                     265066
IP address blocks:        168.121.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:68:83:37:c5:ff:6f:8f:1b:e5:aa:cf:35:8c:32:7b:15:e0:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Validity
            Not Before: Jun  5 20:31:27 2021 GMT
            Not After : Jun  4 20:36:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:85:2c:01:6c:5d:98:94:c3:d4:a8:ac:7d:
                    b6:8d:59:98:25:2b:d7:68:24:18:94:69:e1:41:ac:
                    fa:36:81:fc:7f:25:bb:26:b4:54:f4:e0:68:d1:ab:
                    5d:e5:4b:f3:eb:10:ab:d9:c2:0a:f7:92:40:1b:7e:
                    17:3c:3c:b0:02:41:46:1b:c5:40:c3:10:ec:14:00:
                    fa:af:8a:4d:4d:6e:55:8a:78:ba:ab:61:87:d3:d8:
                    fe:4c:0a:64:34:a7:50:a4:28:64:26:ea:32:4b:a0:
                    ce:69:68:2d:0d:a7:66:0c:98:75:97:ce:5f:a1:e6:
                    e4:79:f5:29:bf:19:15:41:21:54:42:17:97:d0:6a:
                    ce:b7:5f:7e:bc:f8:1e:de:a2:5b:90:68:25:76:84:
                    51:08:ed:65:94:f7:11:bd:63:e2:c5:ac:dc:01:c1:
                    d7:14:22:0b:e2:d5:83:74:07:28:81:60:83:95:7e:
                    08:27:1b:ac:7a:2b:d6:8d:c5:85:5c:f1:81:10:0c:
                    43:18:bd:c1:0c:05:c5:61:59:5e:f7:95:f7:a8:5c:
                    56:7c:ad:48:29:bd:de:41:78:e2:68:9a:71:42:36:
                    b2:75:ae:2c:ff:20:de:9e:b2:05:86:54:61:e0:82:
                    3b:6d:b9:52:10:02:ff:8c:ac:0b:8a:56:4e:4c:65:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CD:23:3B:DE:81:80:24:9E:50:06:97:06:1A:78:26:81:88:9B:36
            X509v3 Authority Key Identifier:
                keyid:1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/3136382e3132312e3230312e302f32342d3234203d3e20323635303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:9b:96:03:4e:c7:87:c4:72:25:90:29:05:5d:9f:86:f9:
         33:de:ab:8f:b7:ea:9c:82:9d:6b:2e:a9:6f:85:94:c9:89:21:
         9c:c2:85:e7:26:d9:d6:63:1c:cb:a3:2f:e0:fb:4d:cd:aa:1b:
         b1:79:6c:59:22:8d:c0:4e:d0:3f:63:1c:ea:d7:41:fd:ce:dd:
         e6:27:a5:ab:92:d6:1e:da:f4:2a:e6:64:1d:44:c6:f1:6a:dc:
         ac:84:00:56:92:47:8c:35:a7:ee:bd:7c:1a:44:2c:84:5e:2a:
         e4:56:e8:01:da:97:22:40:97:8b:bc:62:2f:32:8a:0d:2d:37:
         a5:14:0d:15:ce:5a:14:37:1c:fc:9d:97:c6:e6:9d:54:44:c3:
         ca:90:6b:8e:0a:d5:20:f8:78:0c:fe:fc:f5:67:cc:d1:9f:0b:
         8f:81:0f:97:4c:b9:eb:c6:4f:dd:22:8b:9f:e8:ef:41:59:34:
         90:cb:c3:43:2a:7c:2b:ca:ca:04:8d:dd:5a:b5:7c:02:32:5b:
         78:c2:18:ae:ce:24:fd:80:ee:04:ff:af:07:4b:00:15:ec:ea:
         9f:7f:df:1a:cb:2d:72:ef:b8:32:43:3e:8a:3f:fd:51:f2:29:
         14:09:98:3e:70:6c:71:75:25:90:fb:af:38:d1:de:b0:95:08:
         bc:82:f9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:35 2024 by rpki-client on console-ams.rpki-client.org